Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B393219C617911F186E69EACCE1D38B0.roa
File: B393219C617911F186E69EACCE1D38B0.roa (raw, json)
Hash identifier: qV/f2oBGnTx85R4PTXTNyd64KzNp5sswfdaenVxReZQ=
Subject key identifier: C8:D3:8C:4C:D3:36:E2:8F:AA:13:F9:A6:95:82:04:78:99:A3:40:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B393219C617911F186E69EACCE1D38B0.roa
Signing time: Sat 06 Jun 2026 07:31:16 +0000
ROA not before: Sat 06 Jun 2026 07:31:11 +0000
ROA not after: Tue 07 Jul 2026 07:31:11 +0000
asID: 40115
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119259 (0x1d1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 07:31:11 2026 GMT
Not After : Jul 7 07:31:11 2026 GMT
Subject: CN=6a23ccc4-13bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:ff:2f:21:76:ee:96:73:1c:57:ab:6a:3e:
f8:db:78:f2:5c:0c:bb:b9:a2:18:03:35:db:e6:85:
65:ca:bc:fb:5e:bf:cc:93:83:2b:a4:d0:e6:ce:9c:
11:bd:90:ca:fa:fd:96:14:fd:39:47:89:64:b5:54:
e0:9a:0e:26:bc:c9:38:e6:e4:01:3e:c3:ec:5c:d3:
74:67:01:a4:21:02:e2:60:ba:dc:5f:b5:12:47:62:
e2:83:ac:69:ef:27:2a:e9:e0:26:14:7c:3e:78:af:
7f:b6:2a:7b:b5:2f:34:f5:a4:91:df:1f:54:01:5c:
15:3a:5c:5d:50:c4:62:39:fc:87:b8:b9:5d:20:b1:
0d:dd:cc:44:d5:c1:af:8f:2a:02:ef:63:8f:7e:c9:
0c:3c:6f:df:9c:87:e8:c4:83:f2:8c:5f:2b:0d:b8:
32:dc:46:22:a4:40:ed:6b:97:ef:a7:90:4c:64:95:
b5:17:6f:c2:bd:a7:b1:fe:5d:d7:be:ee:f5:37:f6:
9d:73:64:39:6b:9b:39:8d:c7:67:55:4f:11:d7:31:
6e:c0:8f:96:f4:26:6a:1b:83:7e:31:92:cb:83:e8:
99:87:d4:1a:ff:4e:0a:c9:fc:df:89:0b:e7:5e:ca:
14:d0:3e:06:5d:40:34:21:89:1f:d9:a0:c9:61:12:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:8C:4C:D3:36:E2:8F:AA:13:F9:A6:95:82:04:78:99:A3:40:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B393219C617911F186E69EACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:75:ee:93:5c:ea:5a:70:13:22:a1:64:aa:b6:46:5c:15:d6:
1e:03:9a:a7:bd:21:f5:bf:3c:fe:17:f3:5e:c1:c6:18:6b:9b:
b5:8b:86:d4:7f:ca:d5:61:0d:a4:3b:64:11:f5:42:c3:c9:df:
ab:fb:5d:13:e6:99:80:75:8d:6e:48:52:5b:0c:55:d5:fe:52:
7a:7e:49:8b:55:b2:30:ac:ad:24:c4:5e:6a:0f:4c:ba:3b:7a:
65:81:e7:90:3a:c6:38:3e:89:8b:b6:6f:8a:49:f5:78:98:2f:
9e:47:b2:6d:49:93:13:77:ac:37:e2:1e:6f:b4:0e:c0:9e:d9:
9a:22:3d:ff:05:be:9f:b1:94:93:20:0d:11:35:b5:63:cc:ca:
be:6f:b1:29:fa:21:50:cc:41:42:af:9e:0c:a0:26:75:86:2a:
f7:e6:db:04:db:52:ed:21:42:4c:64:56:26:df:c4:5b:34:be:
1e:5c:dd:60:ea:d1:37:16:98:5d:db:28:f5:87:8c:85:6d:08:
da:3c:c2:8a:3f:56:c8:55:56:f4:69:f7:4d:ed:66:e3:ed:49:
aa:14:8c:20:dc:67:c3:e1:f4:45:42:ec:c7:4b:66:25:44:a2:
e8:41:ab:7d:c1:41:39:19:4e:55:ce:1d:67:f2:e6:a2:6b:c1:
0c:e9:2c:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdHbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDczMTExWhcNMjYwNzA3MDczMTExWjAYMRYw
FAYDVQQDEw02YTIzY2NjNC0xM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw17/LyF27pZzHFeraj7423jyXAy7uaIYAzXb5oVlyrz7Xr/Mk4MrpNDm
zpwRvZDK+v2WFP05R4lktVTgmg4mvMk45uQBPsPsXNN0ZwGkIQLiYLrcX7USR2Li
g6xp7ycq6eAmFHw+eK9/tip7tS809aSR3x9UAVwVOlxdUMRiOfyHuLldILEN3cxE
1cGvjyoC72OPfskMPG/fnIfoxIPyjF8rDbgy3EYipEDta5fvp5BMZJW1F2/Cvaex
/l3Xvu71N/adc2Q5a5s5jcdnVU8R1zFuwI+W9CZqG4N+MZLLg+iZh9Qa/04Kyfzf
iQvnXsoU0D4GXUA0IYkf2aDJYRKcowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMjT
jEzTNuKPqhP5ppWCBHiZo0DKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMzkzMjE5QzYxNzkxMUYxODZFNjlFQUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQDKde6TXOpacBMioWSqtkZcFdYeA5qnvSH1vzz+F/NewcYYa5u1i4bU
f8rVYQ2kO2QR9ULDyd+r+10T5pmAdY1uSFJbDFXV/lJ6fkmLVbIwrK0kxF5qD0y6
O3plgeeQOsY4PomLtm+KSfV4mC+eR7JtSZMTd6w34h5vtA7AntmaIj3/Bb6fsZST
IA0RNbVjzMq+b7Ep+iFQzEFCr54MoCZ1hir35tsE21LtIUJMZFYm38RbNL4eXN1g
6tE3Fphd2yj1h4yFbQjaPMKKP1bIVVb0afdN7Wbj7UmqFIwg3GfD4fRFQuzHS2Yl
RKLoQat9wUE5GU5Vzh1n8uaia8EM6Syv
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:03 2026 by rpki-client