Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9859E5CC5BA311F1828A8C1DCF1D38B0.roa
File: 9859E5CC5BA311F1828A8C1DCF1D38B0.roa (raw, json)
Hash identifier: kyOthQCvN9kXYWTI5beJO4nxRbGZT9UII7ox4UMErmc=
Subject key identifier: 06:D2:98:1A:78:EC:62:6B:81:6B:64:68:30:E7:27:16:B7:1D:57:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D095
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9859E5CC5BA311F1828A8C1DCF1D38B0.roa
Signing time: Fri 29 May 2026 21:16:02 +0000
ROA not before: Fri 29 May 2026 21:15:58 +0000
ROA not after: Thu 02 Jul 2026 21:15:58 +0000
asID: 202656
IP address blocks: 154.81.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118933 (0x1d095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 21:15:58 2026 GMT
Not After : Jul 2 21:15:58 2026 GMT
Subject: CN=6a1a0212-a30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:36:a5:45:c9:95:83:b9:b4:a3:79:e7:54:
a9:3f:81:18:1b:e0:cb:da:b8:37:f4:5c:96:42:d9:
df:67:eb:81:57:79:23:93:21:a7:78:de:13:26:d2:
3d:c8:2f:cf:aa:fd:49:ca:c6:a6:a7:a1:40:c1:f1:
04:fc:6c:8d:15:b9:b4:91:6f:f2:8a:fd:43:d6:08:
c3:33:2c:e2:10:7b:cd:33:dd:1c:09:04:6d:a7:dd:
4f:9a:fc:ba:1f:95:dd:e4:7b:4f:b1:8a:e3:df:c5:
d9:81:d9:a8:dd:36:9a:53:c9:7b:ba:f7:27:aa:37:
8b:a3:fc:3e:48:7b:4f:d1:66:a9:14:0f:95:77:21:
af:67:2c:03:a9:f4:27:53:fe:4f:8c:9b:5c:8e:7a:
eb:a1:9b:97:2d:54:b2:4f:8d:d6:b5:4e:11:cd:59:
7f:7f:9b:d7:c5:89:29:88:25:33:75:7f:7b:7e:a9:
79:3c:be:1f:f9:9a:73:34:66:c7:da:9c:b4:12:98:
32:32:70:6c:5c:15:ea:33:25:4f:35:07:b4:f1:93:
23:20:c7:47:e6:90:dc:21:f9:59:42:b8:f0:39:bd:
c8:2d:24:2f:01:33:40:b9:1c:ea:08:a4:50:38:d6:
05:78:bb:f6:f8:16:ef:9f:b3:77:14:1c:6e:d3:f4:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:98:1A:78:EC:62:6B:81:6B:64:68:30:E7:27:16:B7:1D:57:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9859E5CC5BA311F1828A8C1DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.193.0/24
Signature Algorithm: sha256WithRSAEncryption
83:12:bd:be:fc:3f:c9:c1:f6:c4:0a:ba:d5:c0:ea:1c:ae:c0:
19:af:9c:4b:30:be:af:33:26:d3:1d:06:a6:9a:ae:e7:22:55:
82:d4:22:17:b7:20:6e:83:04:42:a6:2e:25:d2:48:a2:51:84:
1d:e1:0c:b9:0f:09:6f:07:a8:d2:91:a6:d1:51:e9:ce:2b:60:
24:25:61:a6:7c:83:c6:4d:c0:33:57:c1:d2:f4:c1:d7:fe:dc:
f1:c3:ce:83:e6:96:74:0e:da:89:8e:86:04:ef:e2:9a:0b:a8:
5e:87:b4:b2:2b:e6:7a:5c:df:e6:06:d1:59:fb:9d:68:88:98:
d7:05:e6:cc:1a:41:f3:ac:bc:61:2c:57:c5:b2:ad:9a:b9:a7:
15:b7:63:9d:f2:5d:37:4e:63:a5:bb:48:84:75:17:6b:0e:1a:
4a:d6:7c:42:16:6a:ba:ba:b4:67:21:50:12:9c:ed:29:eb:98:
1c:01:b0:82:e3:d5:f6:85:52:94:ec:a0:31:84:5f:7c:b3:4f:
43:fa:d6:8c:7e:12:3f:4e:19:45:09:69:b3:b1:34:3e:d9:b0:
76:5c:12:bd:bc:08:50:f5:cc:cf:11:94:33:ec:e8:77:68:9c:
cc:64:5c:39:0e:24:38:9a:62:ff:27:58:ea:01:5a:e8:0e:3b:
82:06:fa:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdCVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MjExNTU4WhcNMjYwNzAyMjExNTU4WjAYMRYw
FAYDVQQDEw02YTFhMDIxMi1hMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9IY2pUXJlYO5tKN551SpP4EYG+DL2rg39FyWQtnfZ+uBV3kjkyGneN4T
JtI9yC/Pqv1Jysamp6FAwfEE/GyNFbm0kW/yiv1D1gjDMyziEHvNM90cCQRtp91P
mvy6H5Xd5HtPsYrj38XZgdmo3TaaU8l7uvcnqjeLo/w+SHtP0WapFA+VdyGvZywD
qfQnU/5PjJtcjnrroZuXLVSyT43WtU4RzVl/f5vXxYkpiCUzdX97fql5PL4f+Zpz
NGbH2py0EpgyMnBsXBXqMyVPNQe08ZMjIMdH5pDcIflZQrjwOb3ILSQvATNAuRzq
CKRQONYFeLv2+Bbvn7N3FBxu0/Q0LwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAbS
mBp47GJrgWtkaDDnJxa3HVe6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85ODU5RTVDQzVCQTMxMUYxODI4QThDMURDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlHBMA0GCSqGSIb3DQEB
CwUAA4IBAQCDEr2+/D/JwfbECrrVwOocrsAZr5xLML6vMybTHQammq7nIlWC1CIX
tyBugwRCpi4l0kiiUYQd4Qy5DwlvB6jSkabRUenOK2AkJWGmfIPGTcAzV8HS9MHX
/tzxw86D5pZ0DtqJjoYE7+KaC6heh7SyK+Z6XN/mBtFZ+51oiJjXBebMGkHzrLxh
LFfFsq2auacVt2Od8l03TmOlu0iEdRdrDhpK1nxCFmq6urRnIVASnO0p65gcAbCC
49X2hVKU7KAxhF98s09D+taMfhI/ThlFCWmzsTQ+2bB2XBK9vAhQ9czPEZQz7Oh3
aJzMZFw5DiQ4mmL/J1jqAVroDjuCBvqD
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:54 2026 by rpki-client