Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EFC23C5A6711F1B0F571B1CE1D38B0.roa
File: A2EFC23C5A6711F1B0F571B1CE1D38B0.roa (raw, json)
Hash identifier: CfHinITv8q+WBZUDuDJfLF4SMmFWrh7YdbTvdBzoUDY=
Subject key identifier: 9B:D0:B5:D9:D4:5E:F5:E4:C4:53:8C:FE:09:DE:3B:D9:B2:FA:6D:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D018
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EFC23C5A6711F1B0F571B1CE1D38B0.roa
Signing time: Thu 28 May 2026 07:34:19 +0000
ROA not before: Thu 28 May 2026 07:34:14 +0000
ROA not after: Tue 09 Jun 2026 07:34:14 +0000
asID: 154177
IP address blocks: 154.90.32.0/23 maxlen: 24
154.90.34.0/23 maxlen: 24
154.90.36.0/23 maxlen: 24
154.90.38.0/23 maxlen: 24
154.90.40.0/23 maxlen: 24
154.90.42.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118808 (0x1d018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 07:34:14 2026 GMT
Not After : Jun 9 07:34:14 2026 GMT
Subject: CN=6a17effb-621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:8f:72:f0:d0:18:ad:2a:11:6c:68:c9:27:
d4:46:5b:6a:fe:d8:ad:f9:41:48:b1:ca:ca:34:b1:
26:91:d8:40:71:6c:f3:81:c2:ee:9a:09:b7:3a:e2:
61:1e:89:5f:d4:32:a7:ac:df:57:8f:50:f3:7f:0b:
d0:20:9b:c1:6e:5f:4a:f6:da:62:50:85:93:82:40:
de:5c:45:cb:14:9b:67:41:ee:ab:8c:a8:ac:20:97:
c4:b6:ad:38:55:c0:6d:a9:83:ed:4b:48:cb:c3:9a:
5e:a9:50:62:c7:33:f9:dc:bf:2e:9e:b2:04:23:e0:
5d:c5:d3:ea:85:11:5f:99:7a:02:7f:42:b8:0f:e1:
51:f2:a2:7c:b7:b7:0b:52:bb:76:00:a2:35:34:31:
7e:6e:ea:9c:65:a1:dd:50:09:de:ae:b0:7e:13:1e:
76:4c:d4:dc:ed:56:2f:c6:a3:54:73:38:4b:ec:07:
00:b8:ce:98:b8:f8:45:56:ab:6f:ff:bb:de:cf:f4:
e2:30:64:d1:50:f3:e1:0b:da:09:15:b2:90:80:77:
16:22:73:1b:aa:4e:db:46:81:7c:09:e3:ad:7c:f5:
fc:67:39:46:1d:85:e7:92:95:e8:5e:94:18:3d:9b:
59:92:7f:87:85:73:ba:7b:4e:9b:80:c0:bd:df:40:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D0:B5:D9:D4:5E:F5:E4:C4:53:8C:FE:09:DE:3B:D9:B2:FA:6D:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EFC23C5A6711F1B0F571B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0-154.90.43.255
154.90.48.0/22
154.90.54.0/23
154.90.60.0/23
Signature Algorithm: sha256WithRSAEncryption
47:28:8a:f6:e1:f0:42:b6:b1:b2:07:12:27:dd:de:37:ed:71:
ff:a1:aa:55:e3:f0:2a:b1:26:16:f9:ba:22:a7:07:c0:eb:18:
25:a7:93:11:4f:d1:ea:f1:9d:50:4b:2e:8b:ec:60:d8:e2:36:
3a:54:5d:56:d6:98:4a:37:5d:ea:db:fd:bf:9a:89:25:af:cc:
71:02:ac:47:f2:89:75:ad:10:d3:dc:aa:f3:4e:bb:cd:45:c8:
01:bd:da:02:5e:f9:8a:28:80:67:42:ec:34:ae:47:85:8a:28:
ea:d4:3e:da:2b:90:e2:69:a9:d0:22:1c:38:82:c3:5e:ee:90:
d5:99:c9:35:5e:05:08:f1:66:22:7b:91:35:11:a4:fd:52:3b:
aa:79:93:77:eb:78:2a:d7:ea:45:03:9e:de:98:48:d9:58:39:
9c:45:f7:bf:b6:9a:f0:1e:cf:41:8d:e4:6a:ad:7e:53:28:58:
f2:62:0c:c1:5e:87:10:59:9d:52:b2:61:fc:1b:9c:22:e5:7e:
06:52:68:a2:d0:bf:3d:a9:cd:5b:e8:5a:c0:f3:73:13:50:12:
fb:35:ed:cc:ba:18:da:8d:de:fb:a6:42:98:0b:7a:e2:23:6a:
1c:79:29:ae:3d:8f:f0:41:ed:b1:8f:dc:9e:26:a7:59:ef:f8:
ae:b8:bc:24
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAdAYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI4MDczNDE0WhcNMjYwNjA5MDczNDE0WjAYMRYw
FAYDVQQDEw02YTE3ZWZmYi02MjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyy+PcvDQGK0qEWxoySfURltq/tit+UFIscrKNLEmkdhAcWzzgcLumgm3
OuJhHolf1DKnrN9Xj1DzfwvQIJvBbl9K9tpiUIWTgkDeXEXLFJtnQe6rjKisIJfE
tq04VcBtqYPtS0jLw5peqVBixzP53L8unrIEI+BdxdPqhRFfmXoCf0K4D+FR8qJ8
t7cLUrt2AKI1NDF+buqcZaHdUAnerrB+Ex52TNTc7VYvxqNUczhL7AcAuM6YuPhF
Vqtv/7vez/TiMGTRUPPhC9oJFbKQgHcWInMbqk7bRoF8CeOtfPX8ZzlGHYXnkpXo
XpQYPZtZkn+HhXO6e06bgMC930Av9wIDAQABo4ICvzCCArswHQYDVR0OBBYEFJvQ
tdnUXvXkxFOM/gneO9my+m3mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMkVGQzIzQzVBNjcxMUYxQjBGNTcxQjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAWaWiADBAKaWigDBAKa
WjADBAGaWjYDBAGaWjwwDQYJKoZIhvcNAQELBQADggEBAEcoivbh8EK2sbIHEifd
3jftcf+hqlXj8CqxJhb5uiKnB8DrGCWnkxFP0erxnVBLLovsYNjiNjpUXVbWmEo3
Xerb/b+aiSWvzHECrEfyiXWtENPcqvNOu81FyAG92gJe+YoogGdC7DSuR4WKKOrU
PtorkOJpqdAiHDiCw17ukNWZyTVeBQjxZiJ7kTURpP1SO6p5k3freCrX6kUDnt6Y
SNlYOZxF97+2mvAez0GN5GqtflMoWPJiDMFehxBZnVKyYfwbnCLlfgZSaKLQvz2p
zVvoWsDzcxNQEvs17cy6GNqN3vumQpgLeuIjahx5Ka49j/BB7bGP3J4mp1nv+K64
vCQ=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:00 2026 by rpki-client