Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96912480576B11F18FA2C405CF1D38B0.roa
File: 96912480576B11F18FA2C405CF1D38B0.roa (raw, json)
Hash identifier: SA+Uw5fLfuZJ8BcryK2+c3txLdaofEs5UCZq4Mmn+Dc=
Subject key identifier: 10:6E:90:8C:4D:CA:86:BA:4B:58:47:0F:16:AC:B9:E9:10:30:A4:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96912480576B11F18FA2C405CF1D38B0.roa
Signing time: Sun 24 May 2026 12:25:03 +0000
ROA not before: Sun 24 May 2026 12:24:58 +0000
ROA not after: Thu 04 Jun 2026 12:24:58 +0000
asID: 23764
IP address blocks: 154.85.14.0/24 maxlen: 24
154.85.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118469 (0x1cec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 12:24:58 2026 GMT
Not After : Jun 4 12:24:58 2026 GMT
Subject: CN=6a12ee1f-6371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:f6:c1:ac:f3:d7:e6:1b:a2:fb:b6:1e:dc:
2f:58:21:36:a7:a2:87:ec:53:8c:ed:2d:4c:d4:a9:
1f:f6:a1:1e:bb:51:aa:e5:b1:93:00:20:a2:04:95:
a0:0b:2e:b7:42:68:f8:50:24:9c:79:ab:35:14:a2:
85:65:06:c5:bc:74:e1:8e:7a:24:c0:71:69:0d:d1:
9a:6f:bf:d4:eb:05:4c:92:aa:b8:94:b7:90:a1:a4:
62:ce:de:ee:8a:dc:bc:1f:4e:c3:b7:ec:83:09:05:
c8:72:ce:81:8b:f6:ae:37:06:df:c6:57:5e:ff:20:
25:7f:c3:ee:00:62:9a:ed:56:3e:21:26:5a:b8:94:
a1:03:71:5c:bd:b3:1e:6d:e4:3d:9e:e8:49:5d:c2:
f1:51:87:fa:db:5d:b0:aa:cb:eb:71:40:9b:df:ea:
ca:bf:99:3f:44:97:67:cc:dc:44:2b:20:34:4f:62:
3e:3d:59:5a:30:ca:c6:d9:4e:8b:43:1d:15:5c:f6:
b7:7a:6e:46:0a:78:0a:3a:20:68:01:54:48:38:2f:
64:93:f1:28:ed:7e:2b:66:1a:4a:bb:3c:fd:53:ce:
4d:ab:d3:5f:21:49:6b:8d:63:11:f8:d4:5b:74:cf:
0e:3f:46:bb:37:0d:8b:ab:21:41:75:c2:e2:00:05:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:90:8C:4D:CA:86:BA:4B:58:47:0F:16:AC:B9:E9:10:30:A4:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96912480576B11F18FA2C405CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.14.0/23
Signature Algorithm: sha256WithRSAEncryption
58:b9:05:8f:7a:07:ff:7d:17:23:b3:07:3e:3d:27:d3:6d:e9:
a5:e8:09:8b:fe:61:d9:21:9e:99:02:5c:76:cc:20:fe:5a:2c:
d5:a6:2e:79:11:62:63:67:bc:c5:e4:a7:16:19:a0:24:84:5c:
fb:8e:7d:f2:e1:68:99:bc:f6:39:1c:9d:df:50:9c:16:0d:82:
46:c2:c4:9e:f4:64:25:25:b1:49:a0:dd:5b:d6:0b:5f:c6:4b:
39:94:51:a7:59:42:db:32:84:36:3e:d3:cf:60:32:df:bf:b8:
98:f6:66:25:1c:0b:17:08:09:44:da:01:2e:08:51:e1:11:92:
c3:fa:3e:6a:d9:d2:7a:51:9f:27:0d:a7:c5:02:24:34:1d:64:
a6:41:d9:a1:b4:d8:85:38:66:7f:2a:22:dc:35:c7:e3:06:18:
f0:ee:54:fa:eb:b3:40:2b:42:e5:9e:74:b9:2d:d0:0a:05:09:
40:dd:20:12:ba:95:1b:e7:3d:0a:84:cb:84:c2:96:65:f7:5e:
59:5a:0c:e7:d2:77:f8:41:68:50:96:b9:9c:53:3b:bf:84:8c:
c9:57:85:11:d5:37:f6:f2:a6:79:ff:31:33:f0:66:f1:4f:ff:
db:e6:93:85:8f:55:e5:13:df:36:78:29:38:7c:65:db:79:9e:
4d:78:7c:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc7FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI0MTIyNDU4WhcNMjYwNjA0MTIyNDU4WjAYMRYw
FAYDVQQDEw02YTEyZWUxZi02MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArpP2wazz1+Ybovu2HtwvWCE2p6KH7FOM7S1M1Kkf9qEeu1Gq5bGTACCi
BJWgCy63Qmj4UCSceas1FKKFZQbFvHThjnokwHFpDdGab7/U6wVMkqq4lLeQoaRi
zt7uity8H07Dt+yDCQXIcs6Bi/auNwbfxlde/yAlf8PuAGKa7VY+ISZauJShA3Fc
vbMebeQ9nuhJXcLxUYf6212wqsvrcUCb3+rKv5k/RJdnzNxEKyA0T2I+PVlaMMrG
2U6LQx0VXPa3em5GCngKOiBoAVRIOC9kk/Eo7X4rZhpKuzz9U85Nq9NfIUlrjWMR
+NRbdM8OP0a7Nw2LqyFBdcLiAAVxdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBBu
kIxNyoa6S1hHDxasuekQMKRxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NjkxMjQ4MDU3NkIxMUYxOEZBMkM0MDVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlUOMA0GCSqGSIb3DQEB
CwUAA4IBAQBYuQWPegf/fRcjswc+PSfTbeml6AmL/mHZIZ6ZAlx2zCD+WizVpi55
EWJjZ7zF5KcWGaAkhFz7jn3y4WiZvPY5HJ3fUJwWDYJGwsSe9GQlJbFJoN1b1gtf
xks5lFGnWULbMoQ2PtPPYDLfv7iY9mYlHAsXCAlE2gEuCFHhEZLD+j5q2dJ6UZ8n
DafFAiQ0HWSmQdmhtNiFOGZ/KiLcNcfjBhjw7lT667NAK0LlnnS5LdAKBQlA3SAS
upUb5z0KhMuEwpZl915ZWgzn0nf4QWhQlrmcUzu/hIzJV4UR1Tf28qZ5/zEz8Gbx
T//b5pOFj1XlE982eCk4fGXbeZ5NeHz5
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:08 2026 by rpki-client