Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8247BF0560D11F19BFCF3ACCE1D38B0.roa
File: C8247BF0560D11F19BFCF3ACCE1D38B0.roa (raw, json)
Hash identifier: sCw8COFQDSvBcCB0bG+d9DLBuZxCVef9XncSgxoMhWU=
Subject key identifier: BD:07:93:83:71:0F:D3:27:7A:EA:2C:AC:B8:42:22:F2:36:8E:5B:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8247BF0560D11F19BFCF3ACCE1D38B0.roa
Signing time: Fri 22 May 2026 18:41:02 +0000
ROA not before: Fri 22 May 2026 18:40:56 +0000
ROA not after: Thu 03 Dec 2026 18:40:56 +0000
asID: 55720
IP address blocks: 154.91.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118350 (0x1ce4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 18:40:56 2026 GMT
Not After : Dec 3 18:40:56 2026 GMT
Subject: CN=6a10a33e-ea04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:06:d6:48:36:78:eb:a8:6d:51:e4:b2:4c:
05:9d:63:bf:59:e0:09:86:e6:cc:5c:a1:c7:c4:98:
fd:de:4f:3d:83:0e:34:58:eb:d6:b2:4d:65:9c:ca:
0d:c2:d6:45:2a:ea:d7:7b:df:a2:a9:d8:14:c5:f2:
2c:c9:e4:09:f1:e6:47:79:6a:55:3a:c2:13:0f:4f:
d0:43:fc:c9:19:25:62:af:1d:60:79:4b:4a:79:95:
60:f4:71:02:1f:ef:ec:29:92:c2:4c:3e:c3:5a:84:
a9:0f:09:0c:11:cf:f5:14:cd:38:f5:f5:6a:cc:75:
64:51:b9:3d:61:bd:19:b5:62:e6:d8:55:39:3a:ae:
67:4a:8b:f3:50:81:f7:91:88:82:2f:ad:2d:f9:d8:
f2:0f:84:69:d1:63:c8:d5:56:27:73:9a:8e:68:2d:
80:a5:7a:73:2b:de:c9:a9:11:63:1f:a2:25:cf:c4:
1e:9f:c9:a8:d4:01:b5:d7:d9:b6:10:74:04:c5:d3:
8e:5a:a0:8e:aa:d8:2f:dc:50:f5:19:77:c5:bb:37:
b2:d3:03:db:89:70:42:05:38:db:aa:dd:71:72:dd:
d0:f3:eb:b0:b0:90:4b:9c:20:6d:c6:b9:e6:8b:6a:
37:b1:f1:b3:d1:5b:b2:5c:83:59:f5:41:3b:42:d9:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:93:83:71:0F:D3:27:7A:EA:2C:AC:B8:42:22:F2:36:8E:5B:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8247BF0560D11F19BFCF3ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:18:aa:cf:4a:9e:d0:b5:90:f7:1e:a6:a6:a6:47:26:75:59:
0f:90:59:bb:cd:77:9d:e4:54:aa:0b:68:dc:26:96:4a:04:7a:
39:be:41:09:f1:82:23:3a:f6:c7:82:0f:99:94:ee:af:a5:5c:
f6:b2:92:ed:9e:54:6b:ce:9f:d6:f4:0d:80:85:c2:30:68:29:
ad:70:bd:e0:2b:68:01:1e:f0:83:9c:f9:ae:83:f5:6f:b9:b0:
25:e3:65:be:d4:ea:40:e6:ed:1c:f0:4f:c4:78:a0:b8:0c:02:
32:62:0a:e2:5f:03:f6:b4:89:2f:ad:be:b4:17:e2:20:dc:af:
aa:26:1d:f4:d1:a7:d2:38:3c:e7:fc:59:15:63:94:fc:6f:72:
62:43:dd:2d:28:bf:c1:35:3f:3d:8f:bd:d4:86:a7:9a:7d:df:
e9:d5:e0:15:83:a9:22:49:4e:c3:64:e8:e2:2d:ba:8c:07:44:
10:a1:2c:99:f2:b4:3e:3f:37:e2:60:fd:20:02:b1:0c:56:5f:
2c:f6:08:64:ee:bb:09:7b:44:b7:e2:33:63:6b:69:53:20:4f:
9a:f0:d8:11:59:cf:12:ce:a4:ab:f4:e1:82:71:7d:7d:30:43:
9e:98:f0:e5:16:01:48:dc:af:d0:52:00:c8:64:74:c4:c3:14:
1c:e5:e8:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc5OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIyMTg0MDU2WhcNMjYxMjAzMTg0MDU2WjAYMRYw
FAYDVQQDEw02YTEwYTMzZS1lYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ggG1kg2eOuobVHkskwFnWO/WeAJhubMXKHHxJj93k89gw40WOvWsk1l
nMoNwtZFKurXe9+iqdgUxfIsyeQJ8eZHeWpVOsITD0/QQ/zJGSVirx1geUtKeZVg
9HECH+/sKZLCTD7DWoSpDwkMEc/1FM049fVqzHVkUbk9Yb0ZtWLm2FU5Oq5nSovz
UIH3kYiCL60t+djyD4Rp0WPI1VYnc5qOaC2ApXpzK97JqRFjH6Ilz8Qen8mo1AG1
19m2EHQExdOOWqCOqtgv3FD1GXfFuzey0wPbiXBCBTjbqt1xct3Q8+uwsJBLnCBt
xrnmi2o3sfGz0VuyXINZ9UE7QtkI7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL0H
k4NxD9MneuosrLhCIvI2jltoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DODI0N0JGMDU2MEQxMUYxOUJGQ0YzQUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmluSMA0GCSqGSIb3DQEB
CwUAA4IBAQCuGKrPSp7QtZD3HqampkcmdVkPkFm7zXed5FSqC2jcJpZKBHo5vkEJ
8YIjOvbHgg+ZlO6vpVz2spLtnlRrzp/W9A2AhcIwaCmtcL3gK2gBHvCDnPmug/Vv
ubAl42W+1OpA5u0c8E/EeKC4DAIyYgriXwP2tIkvrb60F+Ig3K+qJh300afSODzn
/FkVY5T8b3JiQ90tKL/BNT89j73Uhqeafd/p1eAVg6kiSU7DZOjiLbqMB0QQoSyZ
8rQ+PzfiYP0gArEMVl8s9ghk7rsJe0S34jNja2lTIE+a8NgRWc8SzqSr9OGCcX19
MEOemPDlFgFI3K/QUgDIZHTEwxQc5eiX
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:19 2026 by rpki-client