Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BADDC4A578211F18C98D60ECF1D38B0.roa
File: 8BADDC4A578211F18C98D60ECF1D38B0.roa (raw, json)
Hash identifier: tpNqzknLvgb+4NDcg2Jm6QpWk02MR6EysrJ1VawHjPs=
Subject key identifier: B3:6D:A0:8D:54:7C:9B:F2:6D:AA:AA:EF:46:7F:9B:13:87:90:F5:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BADDC4A578211F18C98D60ECF1D38B0.roa
Signing time: Sun 24 May 2026 15:09:23 +0000
ROA not before: Sun 24 May 2026 15:09:18 +0000
ROA not after: Wed 01 Jul 2026 15:09:18 +0000
asID: 202656
IP address blocks: 154.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118501 (0x1cee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 15:09:18 2026 GMT
Not After : Jul 1 15:09:18 2026 GMT
Subject: CN=6a1314a3-2dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:7e:2e:13:a5:2b:ef:63:94:a1:65:d9:7a:
95:f4:90:01:2d:a7:59:43:d8:22:4e:38:6a:4f:d5:
bc:96:30:42:7d:8e:b2:7a:32:68:28:76:e3:ef:3c:
ef:d4:17:c3:0e:84:d8:cd:2b:c9:03:f8:78:b7:79:
77:fe:b3:f9:a2:b9:d4:08:c9:40:52:3c:d7:05:13:
c6:11:cb:74:95:3d:fe:35:81:88:30:ca:ff:0f:5a:
7e:1d:c6:9a:57:21:28:92:35:68:a7:11:1c:67:49:
36:58:45:f2:f7:8f:b2:03:73:58:de:3b:4c:53:77:
e2:69:40:f6:93:ca:a8:85:0f:7d:1c:6b:aa:0c:95:
2c:59:43:06:96:2f:1f:4a:a1:dd:cc:b0:f0:fd:bc:
b7:bb:41:12:eb:03:6d:f4:4c:b0:8d:ec:e6:22:96:
02:fd:3b:77:f4:88:45:25:1d:a5:8b:8b:fe:aa:af:
74:49:9e:ee:a1:7d:6b:df:58:a2:d3:7f:11:0f:d6:
05:aa:00:61:b6:98:75:4c:36:42:a1:61:63:84:32:
c1:8d:a0:53:97:c1:72:72:db:b5:fa:b5:26:32:f6:
07:7a:d4:86:b8:01:83:43:40:27:81:89:15:04:40:
29:3b:f5:3a:ac:c8:c7:cf:c0:8a:fb:52:b1:4b:ba:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6D:A0:8D:54:7C:9B:F2:6D:AA:AA:EF:46:7F:9B:13:87:90:F5:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BADDC4A578211F18C98D60ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
02:55:e6:c1:5d:88:90:04:01:ba:26:2a:89:a3:61:53:4f:c9:
b3:66:6e:25:34:1c:b2:14:8f:d5:1c:cb:cb:e5:21:d3:fe:a2:
88:24:d8:12:32:ae:1e:2b:66:98:97:5a:cb:98:9c:54:1c:6a:
e4:d9:d7:3b:c6:01:cb:d9:2c:b1:36:11:ee:51:b0:a0:d9:14:
29:8e:43:41:42:6c:bb:b1:36:b2:b2:fc:28:03:51:11:4c:32:
2c:61:b2:ef:96:e8:84:29:b9:d0:b0:ba:34:96:94:20:ed:23:
f7:cb:9c:be:e4:15:7a:f0:5e:f1:c5:8f:50:f7:e6:f8:4f:47:
81:81:c4:55:da:d1:7d:f4:da:8e:f1:4b:08:a8:d0:1a:5a:d8:
b8:55:2d:0a:7f:43:53:40:53:22:3a:a4:db:b8:dd:b6:e3:94:
2e:4e:d7:7e:42:75:42:34:a0:c8:af:66:47:27:ab:47:71:78:
a9:86:76:84:2c:d4:0d:e9:e1:ca:4d:7d:c8:8b:e7:06:24:0a:
dd:b6:2d:d4:d9:08:2f:11:c7:82:14:b2:27:ef:b1:fc:bc:6b:
24:1f:2b:ee:9d:56:19:06:81:b6:c8:49:5f:0f:99:fe:eb:75:
2e:1a:88:ce:7d:a3:fc:b6:c6:50:1f:62:16:ab:91:8f:c4:74:
8b:72:fe:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc7lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI0MTUwOTE4WhcNMjYwNzAxMTUwOTE4WjAYMRYw
FAYDVQQDEw02YTEzMTRhMy0yZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArO9+LhOlK+9jlKFl2XqV9JABLadZQ9giTjhqT9W8ljBCfY6yejJoKHbj
7zzv1BfDDoTYzSvJA/h4t3l3/rP5ornUCMlAUjzXBRPGEct0lT3+NYGIMMr/D1p+
HcaaVyEokjVopxEcZ0k2WEXy94+yA3NY3jtMU3fiaUD2k8qohQ99HGuqDJUsWUMG
li8fSqHdzLDw/by3u0ES6wNt9EywjezmIpYC/Tt39IhFJR2li4v+qq90SZ7uoX1r
31ii038RD9YFqgBhtph1TDZCoWFjhDLBjaBTl8Fyctu1+rUmMvYHetSGuAGDQ0An
gYkVBEApO/U6rMjHz8CK+1KxS7oqhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLNt
oI1UfJvybaqq70Z/mxOHkPWAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QkFEREM0QTU3ODIxMUYxOEM5OEQ2MEVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjjMA0GCSqGSIb3DQEB
CwUAA4IBAQACVebBXYiQBAG6JiqJo2FTT8mzZm4lNByyFI/VHMvL5SHT/qKIJNgS
Mq4eK2aYl1rLmJxUHGrk2dc7xgHL2SyxNhHuUbCg2RQpjkNBQmy7sTaysvwoA1ER
TDIsYbLvluiEKbnQsLo0lpQg7SP3y5y+5BV68F7xxY9Q9+b4T0eBgcRV2tF99NqO
8UsIqNAaWti4VS0Kf0NTQFMiOqTbuN2245QuTtd+QnVCNKDIr2ZHJ6tHcXiphnaE
LNQN6eHKTX3Ii+cGJArdti3U2QgvEceCFLIn77H8vGskHyvunVYZBoG2yElfD5n+
63UuGojOfaP8tsZQH2IWq5GPxHSLcv7E
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:47 2026 by rpki-client