Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACD6FE4E555011F1BEF598A6CE1D38B0.roa
File: ACD6FE4E555011F1BEF598A6CE1D38B0.roa (raw, json)
Hash identifier: JEtezAJlV2KD6MxAfROg2ktUvczhCxwstfZArr/WUHc=
Subject key identifier: 9E:67:A7:BC:B7:6E:CE:C5:5A:2A:31:D2:55:5E:DE:17:46:67:5B:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACD6FE4E555011F1BEF598A6CE1D38B0.roa
Signing time: Thu 21 May 2026 20:07:21 +0000
ROA not before: Thu 21 May 2026 20:07:16 +0000
ROA not after: Sat 27 Jun 2026 20:07:16 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118219 (0x1cdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 20:07:16 2026 GMT
Not After : Jun 27 20:07:16 2026 GMT
Subject: CN=6a0f65f9-7835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:e8:2b:46:09:81:18:20:48:d2:3f:bd:27:
4f:4c:3e:75:bd:c5:2c:7d:a6:e4:1d:10:8b:42:a5:
b6:0c:93:e3:05:ce:b5:4d:75:c1:67:e5:55:a9:59:
db:22:d2:cb:95:fc:12:47:99:b5:63:04:de:4d:c2:
30:16:cc:ee:a7:e8:e7:4c:da:83:13:62:4a:59:06:
b5:55:15:5e:5f:57:7e:10:a7:67:86:f1:a0:2a:eb:
e1:d6:c3:dd:17:7d:9b:6d:70:2f:7f:ef:3e:36:74:
dd:61:77:d0:a5:1f:90:13:46:09:65:c6:22:91:b9:
0f:d6:3c:7f:c2:d2:e5:38:7a:a9:35:a6:db:fc:2e:
08:03:5a:94:d4:f9:23:d9:dd:45:63:de:00:85:ed:
69:35:6b:13:15:86:a1:bd:92:11:0f:d2:30:4f:31:
ea:bd:46:92:69:d6:52:91:43:42:d5:74:fa:c5:6a:
1c:e1:8b:02:86:d9:a2:9f:a8:ac:a3:6a:dc:8f:fc:
b1:22:3e:a2:f1:a8:00:ac:92:4d:66:9a:8a:5b:fe:
1a:72:58:db:d2:36:24:15:d4:35:db:84:32:8e:db:
5a:15:de:99:87:98:9f:e6:64:df:1a:52:5c:79:47:
40:82:aa:62:57:ab:19:cf:43:e9:07:a6:c5:06:19:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:67:A7:BC:B7:6E:CE:C5:5A:2A:31:D2:55:5E:DE:17:46:67:5B:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACD6FE4E555011F1BEF598A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:11:ac:64:c5:5b:04:71:63:96:df:67:21:3a:f2:c9:e2:8b:
e9:b9:2a:48:22:0b:d9:0a:eb:6f:e4:5a:b3:cc:c0:f3:4c:2b:
16:07:83:8d:c7:4c:69:3f:cd:9f:5a:64:17:d1:f4:16:04:b8:
41:08:af:c7:fe:b2:23:38:2a:8c:36:2c:bb:fa:65:4e:8c:a6:
71:a4:cc:c3:28:db:ef:3a:93:a8:75:72:71:b6:29:01:c0:af:
56:ae:78:72:22:57:2a:33:ea:92:e5:72:20:c5:b5:7f:e1:f2:
27:04:9e:4d:b6:f5:1f:1e:b3:eb:f7:ed:29:27:08:7b:4d:d3:
bc:81:60:63:c0:95:e6:b5:9c:65:4f:6f:7d:8b:27:8e:3b:63:
e0:c6:91:21:e5:d7:fc:87:33:4d:c0:b2:3f:5f:dc:d3:46:92:
4a:92:8f:fb:c5:8d:7d:df:00:97:b3:64:54:d0:0c:95:82:2a:
36:f1:3b:98:84:0e:d2:f0:48:83:8d:7f:ff:a4:61:1c:8e:c4:
0b:a1:7a:93:c6:4e:20:d4:ea:bf:26:89:6c:1c:4b:54:78:54:
94:c8:b7:e5:32:d3:9e:44:38:e8:cd:f8:94:11:b4:72:0e:5f:
68:22:80:6b:25:61:8f:2b:b6:13:bb:33:0e:73:44:88:4f:d3:
90:9d:a4:15
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAc3LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIxMjAwNzE2WhcNMjYwNjI3MjAwNzE2WjAYMRYw
FAYDVQQDEw02YTBmNjVmOS03ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2lfoK0YJgRggSNI/vSdPTD51vcUsfabkHRCLQqW2DJPjBc61TXXBZ+VV
qVnbItLLlfwSR5m1YwTeTcIwFszup+jnTNqDE2JKWQa1VRVeX1d+EKdnhvGgKuvh
1sPdF32bbXAvf+8+NnTdYXfQpR+QE0YJZcYikbkP1jx/wtLlOHqpNabb/C4IA1qU
1Pkj2d1FY94Ahe1pNWsTFYahvZIRD9IwTzHqvUaSadZSkUNC1XT6xWoc4YsChtmi
n6iso2rcj/yxIj6i8agArJJNZpqKW/4acljb0jYkFdQ124QyjttaFd6Zh5if5mTf
GlJceUdAgqpiV6sZz0PpB6bFBhlcEQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJ5n
p7y3bs7FWiox0lVe3hdGZ1umMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQ0Q2RkU0RTU1NTAxMUYxQkVGNTk4QTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlHIAwQEmlMwAwQAmloA
MA0GCSqGSIb3DQEBCwUAA4IBAQC/EaxkxVsEcWOW32chOvLJ4ovpuSpIIgvZCutv
5FqzzMDzTCsWB4ONx0xpP82fWmQX0fQWBLhBCK/H/rIjOCqMNiy7+mVOjKZxpMzD
KNvvOpOodXJxtikBwK9WrnhyIlcqM+qS5XIgxbV/4fInBJ5NtvUfHrPr9+0pJwh7
TdO8gWBjwJXmtZxlT299iyeOO2PgxpEh5df8hzNNwLI/X9zTRpJKko/7xY193wCX
s2RU0AyVgio28TuYhA7S8EiDjX//pGEcjsQLoXqTxk4g1Oq/JolsHEtUeFSUyLfl
MtOeRDjozfiUEbRyDl9oIoBrJWGPK7YTuzMOc0SIT9OQnaQV
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:54 2026 by rpki-client