Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3448E8546A11F1BAC3A5AACE1D38B0.roa
File: 9D3448E8546A11F1BAC3A5AACE1D38B0.roa (raw, json)
Hash identifier: TCFbhdET0n1OtE5/y/OuadmILFGJ6BQJknjhn+Tz89M=
Subject key identifier: A3:04:C9:C9:FE:03:0F:25:4C:09:8F:A8:85:EE:21:11:87:45:09:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3448E8546A11F1BAC3A5AACE1D38B0.roa
Signing time: Wed 20 May 2026 16:40:31 +0000
ROA not before: Wed 20 May 2026 16:40:26 +0000
ROA not after: Fri 26 Jun 2026 16:40:26 +0000
asID: 154177
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118026 (0x1cd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 16:40:26 2026 GMT
Not After : Jun 26 16:40:26 2026 GMT
Subject: CN=6a0de3ff-0553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:e8:ab:cc:9a:78:ed:e6:80:84:0f:a9:2e:
6a:bd:82:65:ad:2a:48:23:2d:2d:9d:ac:41:42:e6:
66:73:24:b4:d2:57:ef:8f:b5:3c:07:18:51:ed:4c:
bd:b2:0f:34:fa:3b:b7:ac:95:4f:48:75:be:85:2d:
ed:3c:4a:3f:63:f6:8b:91:6c:c5:86:96:1b:c9:f9:
73:88:9f:dd:6f:cf:7e:5f:a8:f8:3a:3e:61:7f:9f:
e0:0c:16:fc:c7:37:4c:c3:51:b1:24:9b:c5:5e:aa:
a5:5f:83:f3:4f:71:82:05:5b:12:1e:a7:cf:90:27:
1e:da:af:ac:6e:ec:0a:73:c2:3b:15:2e:7b:98:b1:
8f:ce:a6:d7:b2:39:0e:cd:2c:1d:b5:17:30:cf:cf:
4a:fb:09:72:6b:9d:a8:17:4f:24:36:c6:e8:76:95:
1b:05:d5:8c:39:fc:4c:77:64:27:1a:fc:47:9b:8d:
4f:98:6b:09:bd:6f:c6:9c:0b:a0:0e:c8:35:61:6b:
20:c5:e3:a2:85:d0:f9:35:ce:6b:86:14:4d:95:2f:
55:18:1f:35:18:d8:57:53:27:04:1b:12:4c:36:95:
6f:f0:90:34:24:0d:8d:3c:1c:3a:9d:c6:32:f2:89:
37:59:c7:12:ae:e4:9d:e4:79:a3:97:99:0c:b3:a0:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:C9:C9:FE:03:0F:25:4C:09:8F:A8:85:EE:21:11:87:45:09:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3448E8546A11F1BAC3A5AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
82:12:b8:f7:eb:67:53:08:4c:b2:09:28:2e:3b:ab:ae:43:cb:
c6:9b:c9:75:54:01:62:6a:cc:2e:ef:82:7d:d7:22:cc:b2:d6:
9c:6f:ca:60:f8:91:7f:b7:1a:f0:91:26:5e:2c:50:53:0f:07:
07:12:9c:ce:c9:00:bd:d2:e4:a6:5c:f0:0a:23:48:6a:64:33:
2d:6f:9f:68:2d:5d:9b:ff:7f:b9:bc:cd:46:ef:6b:95:f3:b0:
d8:d2:6b:c4:9d:73:37:52:73:35:a5:62:0e:5a:a8:53:b3:25:
48:81:a1:be:82:6a:a1:c2:f9:59:63:73:cf:cc:7a:c2:09:d7:
03:b2:91:42:3c:58:38:77:27:b0:51:b6:37:b3:a4:6d:96:f5:
58:c4:a2:83:68:e7:43:25:45:d2:72:e8:e8:90:f6:48:7b:d6:
26:ce:db:ed:ca:e7:c4:e7:f3:2c:f5:c9:c4:31:78:9c:2e:dc:
de:5d:09:54:f9:df:69:4b:90:44:b2:ce:31:35:9f:a0:bd:38:
42:66:2a:13:1f:27:a7:e2:b3:03:9c:39:61:35:c6:5f:00:b1:
4d:50:44:6d:27:54:d8:a5:b6:aa:8e:09:fe:e4:ed:6b:1b:c8:
5c:90:f0:fe:37:ae:ea:0d:77:40:d9:80:01:40:05:50:8d:d5:
86:84:bc:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc0KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIwMTY0MDI2WhcNMjYwNjI2MTY0MDI2WjAYMRYw
FAYDVQQDEw02YTBkZTNmZi0wNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxg7oq8yaeO3mgIQPqS5qvYJlrSpIIy0tnaxBQuZmcyS00lfvj7U8BxhR
7Uy9sg80+ju3rJVPSHW+hS3tPEo/Y/aLkWzFhpYbyflziJ/db89+X6j4Oj5hf5/g
DBb8xzdMw1GxJJvFXqqlX4PzT3GCBVsSHqfPkCce2q+sbuwKc8I7FS57mLGPzqbX
sjkOzSwdtRcwz89K+wlya52oF08kNsbodpUbBdWMOfxMd2QnGvxHm41PmGsJvW/G
nAugDsg1YWsgxeOihdD5Nc5rhhRNlS9VGB81GNhXUycEGxJMNpVv8JA0JA2NPBw6
ncYy8ok3WccSruSd5Hmjl5kMs6DdhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKME
ycn+Aw8lTAmPqIXuIRGHRQmfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RDM0NDhFODU0NkExMUYxQkFDM0E1QUFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml1oMA0GCSqGSIb3DQEB
CwUAA4IBAQCCErj362dTCEyyCSguO6uuQ8vGm8l1VAFiaswu74J91yLMstacb8pg
+JF/txrwkSZeLFBTDwcHEpzOyQC90uSmXPAKI0hqZDMtb59oLV2b/3+5vM1G72uV
87DY0mvEnXM3UnM1pWIOWqhTsyVIgaG+gmqhwvlZY3PPzHrCCdcDspFCPFg4dyew
UbY3s6RtlvVYxKKDaOdDJUXScujokPZIe9YmztvtyufE5/Ms9cnEMXicLtzeXQlU
+d9pS5BEss4xNZ+gvThCZioTHyen4rMDnDlhNcZfALFNUERtJ1TYpbaqjgn+5O1r
G8hckPD+N67qDXdA2YABQAVQjdWGhLwM
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:56 2026 by rpki-client