Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D98F91FC55FB11F1BD9BECC1CE1D38B0.roa
File: D98F91FC55FB11F1BD9BECC1CE1D38B0.roa (raw, json)
Hash identifier: VW8dQKIfWRt+D1OHwNdaqaNGr7iCT4i4Ht11jXszDPU=
Subject key identifier: D6:7B:06:4F:93:70:B0:CE:D2:63:94:F7:98:10:B3:13:3F:1D:75:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D98F91FC55FB11F1BD9BECC1CE1D38B0.roa
Signing time: Fri 22 May 2026 16:32:40 +0000
ROA not before: Fri 22 May 2026 16:32:35 +0000
ROA not after: Fri 26 Jun 2026 16:32:35 +0000
asID: 138915
IP address blocks: 154.206.56.0/23 maxlen: 24
154.206.58.0/23 maxlen: 24
154.206.60.0/23 maxlen: 24
154.206.62.0/23 maxlen: 24
154.206.67.0/24 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.72.0/24 maxlen: 24
154.206.73.0/24 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.90.0/23 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118322 (0x1ce32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 16:32:35 2026 GMT
Not After : Jun 26 16:32:35 2026 GMT
Subject: CN=6a108528-eab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:d2:56:36:d8:0e:ed:91:c3:fd:ff:58:96:
c2:a0:a6:d5:7e:b1:72:06:c1:0c:2e:3f:1e:8e:c4:
5c:b6:f2:fc:6c:97:86:b0:0d:d6:97:9f:f0:a0:7b:
1c:23:29:26:99:ba:1a:53:eb:49:11:a1:84:2f:ff:
a3:44:a5:e3:98:36:cd:68:bb:22:cf:0b:c9:c5:04:
ed:74:66:21:57:bb:f5:2d:02:1b:5b:cb:73:87:bc:
fe:1d:b8:52:4b:18:23:2d:56:c3:f4:42:cd:ce:31:
9a:2a:33:26:32:a7:ad:1a:f7:52:7d:20:45:57:0f:
73:12:8a:8a:92:3e:df:65:6c:a2:6c:fe:c5:86:ee:
f7:0a:15:29:53:e6:44:d8:5f:56:72:e1:b9:b1:ae:
c2:e8:3c:c5:01:0f:d3:84:1a:27:83:1e:28:7c:6e:
ad:f9:2e:f9:d3:b4:e9:85:e5:28:5d:aa:aa:47:22:
9b:fa:77:14:18:45:81:b5:7f:b4:72:4b:f8:cf:bf:
0f:a2:a9:a4:df:02:80:39:67:ed:e8:e7:1e:d7:df:
04:c7:05:b4:c3:02:31:1f:8d:d4:85:25:5e:c8:a8:
93:29:cc:33:5d:e4:95:d3:26:a2:7b:c3:d0:3c:99:
e9:05:c8:c2:13:ee:b3:f7:d0:4d:3d:46:c4:cb:38:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:06:4F:93:70:B0:CE:D2:63:94:F7:98:10:B3:13:3F:1D:75:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D98F91FC55FB11F1BD9BECC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/21
154.206.67.0/24
154.206.72.0-154.206.95.255
Signature Algorithm: sha256WithRSAEncryption
0c:19:d9:f7:fb:69:a7:85:31:20:53:50:52:ed:d4:86:6b:61:
d1:6a:19:15:61:ec:07:4d:58:35:4e:58:ad:9f:c8:b4:70:4b:
39:d1:03:85:b1:50:ae:b8:2b:1e:0e:d1:3a:22:bb:0e:17:bc:
ec:8b:93:52:f3:76:43:3c:c4:17:b8:f4:f6:bf:d6:54:d3:7d:
ba:6f:78:e3:fd:0b:ad:1d:f6:a8:3c:a9:7f:cb:ec:87:a8:be:
fa:d5:1c:27:0d:83:ce:e9:fc:f5:24:14:d9:ff:a5:9a:46:d0:
1d:fb:c5:16:a1:36:c2:f9:f3:2e:15:f5:06:9a:26:b9:cf:f4:
16:fd:49:84:50:02:89:ac:80:20:df:ab:78:75:7d:c4:c7:71:
c0:82:54:f4:3b:ec:76:1b:a9:b4:ad:9a:53:f5:d7:42:42:bc:
b8:73:81:24:1a:b8:58:df:d0:7c:8f:ab:50:78:e5:7c:09:ad:
2a:b5:df:63:b0:44:22:d2:5d:8f:90:c9:c0:47:c9:1d:de:84:
b5:70:86:27:89:dd:03:18:b6:ee:c0:ec:a4:5c:17:9f:d8:3d:
40:90:09:d1:55:c6:d8:ff:1d:eb:47:45:67:5f:6c:9b:35:f8:
09:0d:91:d3:c2:01:b7:76:8d:f0:fe:89:15:e5:de:67:c0:0f:
03:ed:02:82
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAc4yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIyMTYzMjM1WhcNMjYwNjI2MTYzMjM1WjAYMRYw
FAYDVQQDEw02YTEwODUyOC1lYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsmLSVjbYDu2Rw/3/WJbCoKbVfrFyBsEMLj8ejsRctvL8bJeGsA3Wl5/w
oHscIykmmboaU+tJEaGEL/+jRKXjmDbNaLsizwvJxQTtdGYhV7v1LQIbW8tzh7z+
HbhSSxgjLVbD9ELNzjGaKjMmMqetGvdSfSBFVw9zEoqKkj7fZWyibP7Fhu73ChUp
U+ZE2F9WcuG5sa7C6DzFAQ/ThBongx4ofG6t+S7507TpheUoXaqqRyKb+ncUGEWB
tX+0ckv4z78Poqmk3wKAOWft6Oce198ExwW0wwIxH43UhSVeyKiTKcwzXeSV0yai
e8PQPJnpBcjCE+6z99BNPUbEyzhgoQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFNZ7
Bk+TcLDO0mOU95gQsxM/HXVyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOThGOTFGQzU1RkIxMUYxQkQ5QkVDQzFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDms44AwQAms5DMAwDBAOa
zkgDBAWazkAwDQYJKoZIhvcNAQELBQADggEBAAwZ2ff7aaeFMSBTUFLt1IZrYdFq
GRVh7AdNWDVOWK2fyLRwSznRA4WxUK64Kx4O0Toiuw4XvOyLk1LzdkM8xBe49Pa/
1lTTfbpveOP9C60d9qg8qX/L7IeovvrVHCcNg87p/PUkFNn/pZpG0B37xRahNsL5
8y4V9QaaJrnP9Bb9SYRQAomsgCDfq3h1fcTHccCCVPQ77HYbqbStmlP110JCvLhz
gSQauFjf0HyPq1B45XwJrSq132OwRCLSXY+QycBHyR3ehLVwhieJ3QMYtu7A7KRc
F5/YPUCQCdFVxtj/HetHRWdfbJs1+AkNkdPCAbd2jfD+iRXl3mfADwPtAoI=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:42 2026 by rpki-client