Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/762BDE34545E11F1B4AE60E2CE1D38B0.roa
File: 762BDE34545E11F1B4AE60E2CE1D38B0.roa (raw, json)
Hash identifier: FAyySOukZCjBSLi8ku7stUW2GCVSCcsso7jIGDN5xCI=
Subject key identifier: F3:72:7B:A5:05:14:9F:6F:D9:78:24:72:0E:67:83:3A:19:6A:35:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/762BDE34545E11F1B4AE60E2CE1D38B0.roa
Signing time: Wed 20 May 2026 15:13:31 +0000
ROA not before: Wed 20 May 2026 15:13:27 +0000
ROA not after: Sat 27 Jun 2026 15:13:27 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 02 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117998 (0x1ccee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 15:13:27 2026 GMT
Not After : Jun 27 15:13:27 2026 GMT
Subject: CN=6a0dcf9b-95f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:d0:42:4f:37:7e:29:37:10:cb:85:ee:f1:
55:fd:ee:8d:16:5e:6b:6c:c8:2a:73:8a:0d:29:57:
67:51:75:9b:6e:12:6a:5e:7a:64:2d:3e:d0:24:a6:
14:91:b8:ed:60:ce:cd:93:9d:f8:f4:5f:59:3d:bd:
eb:4f:80:b6:a1:04:64:e2:73:26:e3:e9:76:d1:81:
3a:75:08:87:13:0b:07:2d:46:a8:79:7e:e1:91:3f:
b7:d0:db:d3:15:0b:aa:ac:b3:d4:2e:38:2a:4a:fa:
06:db:8e:a4:74:34:e5:62:1d:01:a6:af:0e:72:e9:
95:74:9e:38:5f:d1:21:bd:32:08:4e:97:c0:f9:e2:
4f:e3:5a:6a:e9:58:49:18:36:59:90:51:68:d7:84:
8c:66:b5:15:c4:6e:22:f9:9f:58:40:25:e3:cd:65:
1e:ae:cc:82:13:4a:e1:72:16:06:41:b5:1a:df:9b:
99:5b:40:54:be:e5:60:49:9f:cf:05:2f:93:37:d5:
7e:a9:1d:2c:be:aa:de:66:74:8e:41:bf:c6:7a:94:
6f:75:8d:54:e9:b9:bf:fd:36:b1:57:d2:c2:5a:3a:
51:22:ec:b0:a2:7a:e8:14:c2:25:0e:f9:14:1e:24:
fc:44:2d:99:6e:bd:2f:87:a7:a3:a0:60:93:31:cc:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:7B:A5:05:14:9F:6F:D9:78:24:72:0E:67:83:3A:19:6A:35:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/762BDE34545E11F1B4AE60E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:14:c0:0e:e2:42:47:0f:3f:83:6c:b9:08:0b:a5:e1:9b:97:
5d:d8:fd:ac:a2:22:17:a5:88:a4:f6:e6:78:e5:ac:aa:0f:58:
d5:ba:d2:85:bd:2e:47:18:e3:b9:4f:67:e6:a2:24:64:58:a2:
bd:3f:96:23:83:9c:cb:0f:c1:b0:48:da:5f:4f:d4:84:08:68:
97:fd:c0:cd:08:30:62:7f:14:c5:16:07:f5:19:2c:49:7e:03:
bb:4c:93:9e:46:b2:6b:66:19:88:d4:cb:86:95:23:38:8e:db:
c8:f1:74:96:61:52:54:45:6e:00:17:f2:de:eb:d6:3f:93:59:
f6:3b:f6:92:f0:3f:68:80:4c:96:c5:63:3d:ad:03:78:13:d2:
fc:27:d7:94:bd:1f:57:ad:ef:cf:d5:e8:a1:7a:de:96:62:13:
06:e6:95:73:8e:89:55:88:74:28:b3:a3:ac:7a:e2:79:4b:19:
8f:b3:1f:c3:91:a8:fe:19:f4:8d:e4:3b:c0:05:b0:a4:a8:e7:
cf:3b:91:b6:ef:72:c5:ec:ad:71:63:6c:ba:c6:67:2e:a8:85:
f8:fc:14:57:bc:ab:30:f4:9a:5e:c9:1c:bf:79:2b:aa:ef:57:
05:41:43:03:81:2a:0b:22:d7:d8:05:68:1d:a1:71:a5:37:7a:
0f:a9:f9:7c
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAczuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIwMTUxMzI3WhcNMjYwNjI3MTUxMzI3WjAYMRYw
FAYDVQQDEw02YTBkY2Y5Yi05NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3+rQQk83fik3EMuF7vFV/e6NFl5rbMgqc4oNKVdnUXWbbhJqXnpkLT7Q
JKYUkbjtYM7Nk5349F9ZPb3rT4C2oQRk4nMm4+l20YE6dQiHEwsHLUaoeX7hkT+3
0NvTFQuqrLPULjgqSvoG246kdDTlYh0Bpq8OcumVdJ44X9EhvTIITpfA+eJP41pq
6VhJGDZZkFFo14SMZrUVxG4i+Z9YQCXjzWUersyCE0rhchYGQbUa35uZW0BUvuVg
SZ/PBS+TN9V+qR0svqreZnSOQb/GepRvdY1U6bm//TaxV9LCWjpRIuywonroFMIl
DvkUHiT8RC2Zbr0vh6ejoGCTMcy8zwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPNy
e6UFFJ9v2Xgkcg5ngzoZajX2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NjJCREUzNDU0NUUxMUYxQjRBRTYwRTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlHIAwQEmlMwAwQAmloA
MA0GCSqGSIb3DQEBCwUAA4IBAQALFMAO4kJHDz+DbLkIC6Xhm5dd2P2soiIXpYik
9uZ45ayqD1jVutKFvS5HGOO5T2fmoiRkWKK9P5Yjg5zLD8GwSNpfT9SECGiX/cDN
CDBifxTFFgf1GSxJfgO7TJOeRrJrZhmI1MuGlSM4jtvI8XSWYVJURW4AF/Le69Y/
k1n2O/aS8D9ogEyWxWM9rQN4E9L8J9eUvR9Xre/P1eihet6WYhMG5pVzjolViHQo
s6OseuJ5SxmPsx/Dkaj+GfSN5DvABbCkqOfPO5G273LF7K1xY2y6xmcuqIX4/BRX
vKsw9JpeyRy/eSuq71cFQUMDgSoLItfYBWgdoXGlN3oPqfl8
-----END CERTIFICATE-----
Generated at Sun May 31 06:53:40 2026 by rpki-client