Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B04EA9DC694111F1B5AED7F1CE1D38B0.roa
File: B04EA9DC694111F1B5AED7F1CE1D38B0.roa (raw, json)
Hash identifier: N1W6CzZxUreBN57nkRqqoDslbL4JeBMbjhBgglaRDyw=
Subject key identifier: BA:86:28:B3:46:00:8D:11:37:34:06:3A:D0:E1:CB:69:C4:DE:0E:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D310
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B04EA9DC694111F1B5AED7F1CE1D38B0.roa
Signing time: Tue 16 Jun 2026 05:10:28 +0000
ROA not before: Tue 16 Jun 2026 05:10:23 +0000
ROA not after: Tue 21 Jul 2026 05:10:23 +0000
asID: 9304
IP address blocks: 154.92.176.0/24 maxlen: 24
154.92.184.0/24 maxlen: 24
154.92.186.0/24 maxlen: 24
154.92.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119568 (0x1d310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 05:10:23 2026 GMT
Not After : Jul 21 05:10:23 2026 GMT
Subject: CN=6a30dac4-61c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:88:00:5c:65:e3:16:70:1b:ad:1c:7b:69:
bb:95:e9:d3:bb:ad:0f:27:1c:ae:10:26:ce:30:d1:
3c:4e:96:db:55:c2:7b:67:41:06:89:a8:ec:6a:ae:
1b:11:3a:13:25:5c:c1:7d:70:f4:ab:7d:14:94:12:
04:8e:db:64:a2:e2:b8:37:2c:27:72:61:c7:78:91:
be:3e:b9:07:c3:27:0c:09:0d:31:68:f7:9b:87:a4:
9c:ef:d9:66:fd:25:dd:ca:cc:16:62:8f:4d:c4:2f:
61:54:72:15:9f:a9:c6:e1:6e:30:5c:4c:13:3b:0c:
3c:5e:e5:39:11:a1:70:29:f5:7e:96:90:58:1f:af:
bb:65:24:09:b9:ae:ca:5a:5e:87:9f:7c:f7:2c:f9:
34:a5:d9:82:a2:73:89:62:af:94:b7:60:de:30:48:
55:06:17:67:a6:df:b7:a3:e6:06:57:b8:11:35:bf:
9c:2d:4b:18:c3:f8:95:45:cf:ac:36:ee:73:3e:d2:
fb:87:91:19:23:e5:d3:fa:c0:d8:09:45:30:c7:df:
ff:85:93:c7:e4:b5:73:b0:6f:a2:4c:07:93:b5:22:
9c:9b:93:56:19:b4:46:15:93:f5:94:fc:5f:cb:92:
4a:ca:c4:95:5f:17:53:80:f7:8d:e4:b0:b3:e3:d5:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:28:B3:46:00:8D:11:37:34:06:3A:D0:E1:CB:69:C4:DE:0E:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B04EA9DC694111F1B5AED7F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/24
154.92.184.0/24
154.92.186.0/24
154.92.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:7b:83:d8:84:c2:33:8c:aa:f9:17:6b:bd:b1:d9:fe:53:f9:
8f:45:ab:64:2c:80:18:44:58:e6:47:4f:ed:fb:3b:55:5c:5c:
5d:a6:52:02:48:1a:59:25:c1:f0:53:d7:a1:d5:6f:d2:c9:ff:
0c:d3:13:cb:5e:f6:e2:28:75:29:d0:e4:13:34:f8:7d:7d:c5:
c1:68:fd:9c:30:39:91:e9:95:f5:85:7a:17:92:86:96:fe:7c:
6f:bb:96:01:d8:d6:e0:d6:96:ee:bc:a5:91:b1:ec:c0:ac:ca:
84:71:63:e8:c4:39:50:b8:2d:1e:52:bf:c3:ad:83:5a:03:3e:
8b:14:a7:e9:4d:b7:26:32:8c:3a:6c:47:64:5b:b5:76:3c:2c:
66:1a:81:9e:c2:f0:ee:06:6c:fc:36:70:f2:4c:35:49:b2:20:
4f:5d:a5:87:cd:40:0e:c8:f0:6c:3f:09:05:88:e2:79:a2:36:
60:4f:97:80:54:db:df:6e:66:98:81:2c:1e:b6:0e:ec:f5:12:
e2:34:43:33:be:59:eb:26:7a:8e:6e:2f:30:dd:53:66:e6:4b:
3d:50:d4:69:fe:72:36:35:82:6c:ba:a2:67:ea:ad:ed:dc:6d:
f4:b5:38:2d:ee:ed:8d:52:b1:aa:ac:83:3a:2d:b9:a2:29:07:
ab:0f:0a:2d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAdMQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE2MDUxMDIzWhcNMjYwNzIxMDUxMDIzWjAYMRYw
FAYDVQQDEw02YTMwZGFjNC02MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArN+IAFxl4xZwG60ce2m7lenTu60PJxyuECbOMNE8TpbbVcJ7Z0EGiajs
aq4bEToTJVzBfXD0q30UlBIEjttkouK4NywncmHHeJG+PrkHwycMCQ0xaPebh6Sc
79lm/SXdyswWYo9NxC9hVHIVn6nG4W4wXEwTOww8XuU5EaFwKfV+lpBYH6+7ZSQJ
ua7KWl6Hn3z3LPk0pdmConOJYq+Ut2DeMEhVBhdnpt+3o+YGV7gRNb+cLUsYw/iV
Rc+sNu5zPtL7h5EZI+XT+sDYCUUwx9//hZPH5LVzsG+iTAeTtSKcm5NWGbRGFZP1
lPxfy5JKysSVXxdTgPeN5LCz49Xq0QIDAQABo4ICtzCCArMwHQYDVR0OBBYEFLqG
KLNGAI0RNzQGOtDhy2nE3g53MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMDRFQTlEQzY5NDExMUYxQjVBRUQ3RjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmlywAwQAmly4AwQAmly6
AwQAmly+MA0GCSqGSIb3DQEBCwUAA4IBAQC3e4PYhMIzjKr5F2u9sdn+U/mPRatk
LIAYRFjmR0/t+ztVXFxdplICSBpZJcHwU9eh1W/Syf8M0xPLXvbiKHUp0OQTNPh9
fcXBaP2cMDmR6ZX1hXoXkoaW/nxvu5YB2Nbg1pbuvKWRsezArMqEcWPoxDlQuC0e
Ur/DrYNaAz6LFKfpTbcmMow6bEdkW7V2PCxmGoGewvDuBmz8NnDyTDVJsiBPXaWH
zUAOyPBsPwkFiOJ5ojZgT5eAVNvfbmaYgSwetg7s9RLiNEMzvlnrJnqObi8w3VNm
5ks9UNRp/nI2NYJsuqJn6q3t3G30tTgt7u2NUrGqrIM6LbmiKQerDwot
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:53 2026 by rpki-client