Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88432FB2579911F1B44DD617CF1D38B0.roa
File: 88432FB2579911F1B44DD617CF1D38B0.roa (raw, json)
Hash identifier: n19V4s2F/v3j1ZmxjqU4u80iwPOQF7S2u26NjZueOns=
Subject key identifier: 77:E5:38:97:E0:5F:2C:08:93:8C:65:83:8C:45:64:FE:D0:FB:F3:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88432FB2579911F1B44DD617CF1D38B0.roa
Signing time: Sun 24 May 2026 17:53:56 +0000
ROA not before: Sun 24 May 2026 17:53:51 +0000
ROA not after: Fri 28 Aug 2026 17:53:51 +0000
asID: 137899
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118531 (0x1cf03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 17:53:51 2026 GMT
Not After : Aug 28 17:53:51 2026 GMT
Subject: CN=6a133b33-e03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:32:ad:95:32:82:40:94:b4:69:ef:4f:dc:
1b:01:bc:b6:06:7a:a4:d7:a8:bb:c6:31:9e:05:f5:
a4:f6:0b:fd:c4:c6:95:3b:12:03:b1:1b:ae:3b:1a:
5f:38:fb:6e:74:e9:19:81:36:40:05:2e:e9:b3:72:
ba:ed:25:43:45:e8:d3:b4:0b:55:42:40:b7:28:9d:
5b:2a:95:bb:1a:8a:ec:f5:03:34:7f:62:4b:ea:0a:
cf:ce:12:10:24:56:fa:34:a2:41:42:f3:8e:3a:2f:
f3:75:68:f8:d3:eb:fe:e5:5c:03:e7:61:b3:d4:db:
db:67:f8:8a:48:13:6c:c9:74:51:32:d0:e7:03:36:
b4:23:48:ba:ff:75:00:99:a8:06:01:85:18:c4:21:
69:de:f2:3e:dc:1c:38:24:8e:e6:21:ea:23:12:92:
73:64:dd:9a:12:12:8f:22:b3:90:b9:a5:9e:31:e7:
70:4f:24:c7:69:a4:8a:4a:44:74:2f:2f:fa:69:90:
a1:71:c0:e8:46:84:44:ed:b4:22:60:e5:39:59:1e:
65:3d:52:f5:d9:4e:dd:c5:76:55:ce:6a:aa:25:c6:
cf:af:e3:25:20:98:5b:4e:57:1d:19:7b:1a:09:9c:
ab:90:5a:35:5b:ba:c7:98:41:e8:9b:17:aa:f7:85:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:38:97:E0:5F:2C:08:93:8C:65:83:8C:45:64:FE:D0:FB:F3:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88432FB2579911F1B44DD617CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
05:92:b9:65:ce:67:78:43:33:4d:80:08:48:13:31:76:58:ec:
1d:a8:ff:06:27:df:37:8a:11:43:03:16:1d:32:d0:01:fc:c0:
87:b4:df:b7:1c:70:f7:c9:77:ca:02:1d:b5:34:fd:6d:c7:8d:
fb:6c:49:89:87:3c:2b:5e:13:f5:61:b1:ba:bb:fe:21:bf:9b:
c6:08:e7:ab:a8:6c:db:94:81:38:f2:4c:65:c0:38:de:5e:1c:
ad:3f:6b:84:9d:a8:a6:55:c7:1d:51:fb:ae:b4:08:db:33:39:
c6:31:c7:4d:11:c2:2a:b0:93:44:cc:f8:5f:0d:dc:58:d2:a8:
d8:c6:4d:02:31:c1:9c:90:11:6f:62:13:fc:b5:1e:41:82:dc:
0f:76:45:29:4a:f5:af:71:03:76:c5:0f:62:96:3f:48:71:86:
69:12:17:74:d1:e3:74:60:91:cc:34:64:3c:9a:8d:e5:96:c2:
51:b4:08:39:f4:c0:b3:f0:aa:2e:80:25:1f:3d:7c:99:4f:99:
8b:83:a8:91:57:49:75:16:ac:47:13:e0:25:ee:ad:12:76:c7:
c3:7e:de:d7:59:e8:89:a8:f9:ed:c1:34:63:e5:1e:12:0b:d6:
74:e5:8a:0f:cc:7d:0f:80:33:f3:87:a5:97:1e:f2:58:d2:0e:
b0:cd:2a:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc8DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI0MTc1MzUxWhcNMjYwODI4MTc1MzUxWjAYMRYw
FAYDVQQDEw02YTEzM2IzMy1lMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtcMyrZUygkCUtGnvT9wbAby2Bnqk16i7xjGeBfWk9gv9xMaVOxIDsRuu
OxpfOPtudOkZgTZABS7ps3K67SVDRejTtAtVQkC3KJ1bKpW7Gors9QM0f2JL6grP
zhIQJFb6NKJBQvOOOi/zdWj40+v+5VwD52Gz1NvbZ/iKSBNsyXRRMtDnAza0I0i6
/3UAmagGAYUYxCFp3vI+3Bw4JI7mIeojEpJzZN2aEhKPIrOQuaWeMedwTyTHaaSK
SkR0Ly/6aZChccDoRoRE7bQiYOU5WR5lPVL12U7dxXZVzmqqJcbPr+MlIJhbTlcd
GXsaCZyrkFo1W7rHmEHomxeq94WcuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHfl
OJfgXywIk4xlg4xFZP7Q+/MwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84ODQzMkZCMjU3OTkxMUYxQjQ0REQ2MTdDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB
CwUAA4IBAQAFkrllzmd4QzNNgAhIEzF2WOwdqP8GJ983ihFDAxYdMtAB/MCHtN+3
HHD3yXfKAh21NP1tx437bEmJhzwrXhP1YbG6u/4hv5vGCOerqGzblIE48kxlwDje
XhytP2uEnaimVccdUfuutAjbMznGMcdNEcIqsJNEzPhfDdxY0qjYxk0CMcGckBFv
YhP8tR5BgtwPdkUpSvWvcQN2xQ9ilj9IcYZpEhd00eN0YJHMNGQ8mo3llsJRtAg5
9MCz8KougCUfPXyZT5mLg6iRV0l1FqxHE+Al7q0SdsfDft7XWeiJqPntwTRj5R4S
C9Z05YoPzH0PgDPzh6WXHvJY0g6wzSps
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:55 2026 by rpki-client