Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8668127E55F111F1AE99A304CF1D38B0.roa
File: 8668127E55F111F1AE99A304CF1D38B0.roa (raw, json)
Hash identifier: 31+QrSGHHLhRIkWa1gSBn1VTRKFaS61KkRRH5B6IVHk=
Subject key identifier: 39:DF:0B:AB:57:E1:6A:6D:AA:12:D2:3B:4D:62:40:E5:E0:04:C5:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8668127E55F111F1AE99A304CF1D38B0.roa
Signing time: Fri 22 May 2026 15:18:46 +0000
ROA not before: Fri 22 May 2026 15:18:41 +0000
ROA not after: Fri 26 Jun 2026 15:18:41 +0000
asID: 63139
IP address blocks: 154.81.1.0/24 maxlen: 24
154.93.67.0/24 maxlen: 24
154.93.68.0/24 maxlen: 24
154.93.69.0/24 maxlen: 24
154.93.70.0/24 maxlen: 24
154.93.71.0/24 maxlen: 24
154.93.72.0/24 maxlen: 24
154.93.73.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.75.0/24 maxlen: 24
154.93.76.0/24 maxlen: 24
154.94.64.0/24 maxlen: 24
154.94.65.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.79.0/24 maxlen: 24
154.94.80.0/24 maxlen: 24
154.94.81.0/24 maxlen: 24
154.94.83.0/24 maxlen: 24
154.94.84.0/24 maxlen: 24
154.94.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118308 (0x1ce24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 15:18:41 2026 GMT
Not After : Jun 26 15:18:41 2026 GMT
Subject: CN=6a1073d6-47b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:23:20:cf:c1:0b:02:f0:c3:97:6f:d8:f1:
fd:2d:a6:67:2f:75:69:cb:2c:bc:2f:2e:14:7b:af:
a6:5a:72:b3:4d:b1:e9:66:d1:52:ef:dd:21:d7:75:
5e:1a:ec:d3:40:d9:5f:f2:01:f0:41:d2:20:7f:4c:
13:c3:df:b9:7b:53:70:58:63:07:02:41:6e:d2:d1:
b3:1b:75:85:6b:3e:bd:b2:07:2b:a9:57:f6:8b:6e:
de:ea:8c:99:53:49:55:f6:d1:93:70:27:16:a3:9c:
57:f2:9b:15:9e:6b:1f:d3:05:f4:ac:b4:39:57:d0:
dd:9a:da:9f:da:d9:c6:68:5a:8e:2a:5c:15:d0:bb:
42:73:ab:26:5e:42:ed:00:3b:9d:67:e0:f8:6b:3d:
e0:52:42:03:eb:e8:98:fc:ac:a6:fc:74:54:9e:d5:
89:01:b6:b5:37:e6:fb:a4:2b:76:d9:72:25:83:fb:
76:c0:8d:08:14:1a:b3:59:b0:b8:d1:e9:f8:8e:04:
bb:95:e2:20:13:b8:25:89:50:d8:cc:ea:c2:95:b9:
88:dc:13:1f:90:71:05:49:aa:f5:59:5c:30:0b:01:
3d:c9:38:5b:1e:01:d2:c5:3f:77:b3:c7:3e:ac:00:
63:0c:14:05:2c:ed:a9:cd:8a:3d:a0:bc:7f:ee:9d:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:0B:AB:57:E1:6A:6D:AA:12:D2:3B:4D:62:40:E5:E0:04:C5:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8668127E55F111F1AE99A304CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.1.0/24
154.93.67.0-154.93.76.255
154.94.64.0/22
154.94.79.0-154.94.81.255
154.94.83.0-154.94.85.255
Signature Algorithm: sha256WithRSAEncryption
48:68:06:09:53:8d:98:3c:83:53:24:ce:1b:84:0d:90:f2:b3:
64:5a:2f:3d:ba:5d:50:62:fa:8d:e4:99:3c:d9:05:f2:f2:17:
a4:0e:33:0d:2a:31:43:eb:67:a2:90:d9:85:33:66:0a:d4:33:
b9:e9:69:2c:39:27:b1:fa:78:15:89:b0:81:de:b5:a9:66:92:
06:8b:ac:47:0a:a2:40:e3:c3:61:66:bc:1f:61:e1:64:06:fa:
bb:cb:09:52:62:a4:72:3d:d8:c4:18:c9:aa:e0:6c:0e:e5:18:
93:3f:cf:bd:bb:10:06:c8:cf:67:1b:1f:63:8d:99:be:c4:4d:
35:cf:5d:67:bb:60:27:c5:d3:57:7b:2a:95:aa:a4:00:6c:09:
0c:58:1b:02:2b:09:8c:9d:a0:e2:8d:de:33:b7:fe:59:48:b0:
d7:4c:20:d0:22:43:66:c5:85:38:4a:dd:ad:9d:14:51:fa:26:
70:c6:f3:69:11:e3:80:e3:76:d3:68:e7:25:6d:02:2f:5a:d4:
ba:df:16:99:5a:c4:b2:cb:7c:d8:7f:27:86:29:a8:24:aa:a7:
82:13:33:5a:21:d5:cd:b2:cd:0d:a8:f4:fd:71:c7:08:e5:7d:
bc:ac:89:f7:7d:7a:ee:51:04:2f:47:a5:2b:73:d7:13:7b:b0:
fe:a3:17:10
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAc4kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIyMTUxODQxWhcNMjYwNjI2MTUxODQxWjAYMRYw
FAYDVQQDEw02YTEwNzNkNi00N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwP0jIM/BCwLww5dv2PH9LaZnL3Vpyyy8Ly4Ue6+mWnKzTbHpZtFS790h
13VeGuzTQNlf8gHwQdIgf0wTw9+5e1NwWGMHAkFu0tGzG3WFaz69sgcrqVf2i27e
6oyZU0lV9tGTcCcWo5xX8psVnmsf0wX0rLQ5V9Ddmtqf2tnGaFqOKlwV0LtCc6sm
XkLtADudZ+D4az3gUkID6+iY/Kym/HRUntWJAba1N+b7pCt22XIlg/t2wI0IFBqz
WbC40en4jgS7leIgE7gliVDYzOrClbmI3BMfkHEFSar1WVwwCwE9yThbHgHSxT93
s8c+rABjDBQFLO2pzYo9oLx/7p0I0QIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFDnf
C6tX4WptqhLSO01iQOXgBMUsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjY4MTI3RTU1RjExMUYxQUU5OUEzMDRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmlEBMAwDBACaXUMDBACa
XUwDBAKaXkAwDAMEAJpeTwMEAZpeUDAMAwQAml5TAwQBml5UMA0GCSqGSIb3DQEB
CwUAA4IBAQBIaAYJU42YPINTJM4bhA2Q8rNkWi89ul1QYvqN5Jk82QXy8hekDjMN
KjFD62eikNmFM2YK1DO56WksOSex+ngVibCB3rWpZpIGi6xHCqJA48NhZrwfYeFk
Bvq7ywlSYqRyPdjEGMmq4GwO5RiTP8+9uxAGyM9nGx9jjZm+xE01z11nu2AnxdNX
eyqVqqQAbAkMWBsCKwmMnaDijd4zt/5ZSLDXTCDQIkNmxYU4St2tnRRR+iZwxvNp
EeOA43bTaOclbQIvWtS63xaZWsSyy3zYfyeGKagkqqeCEzNaIdXNss0NqPT9cccI
5X28rIn3fXruUQQvR6Urc9cTe7D+oxcQ
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:54 2026 by rpki-client