Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2793145EBC11F18D61E3F6CE1D38B0.roa
File: DC2793145EBC11F18D61E3F6CE1D38B0.roa (raw, json)
Hash identifier: xK1Gs8dMswP2mVtRHJiYHJ5SThNNRLKMs84BoQ5HiqQ=
Subject key identifier: 59:6C:B2:0D:35:31:D7:C4:5E:81:D0:45:8A:CC:9A:0F:FD:1F:C2:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D15E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2793145EBC11F18D61E3F6CE1D38B0.roa
Signing time: Tue 02 Jun 2026 19:54:27 +0000
ROA not before: Tue 02 Jun 2026 19:54:22 +0000
ROA not after: Thu 09 Jul 2026 19:54:22 +0000
asID: 44559
IP address blocks: 154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
154.219.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119134 (0x1d15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 19:54:22 2026 GMT
Not After : Jul 9 19:54:22 2026 GMT
Subject: CN=6a1f34f3-bef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:de:43:a8:21:a5:3f:84:06:22:1b:d2:ce:
53:6d:1c:cc:f2:9d:06:a7:e5:1f:66:e9:6c:f1:09:
ef:af:79:08:8e:ee:62:a4:11:2d:09:3e:59:e8:82:
8e:37:ef:24:e7:a2:79:50:9a:90:d3:a6:17:0a:a3:
86:d9:0b:89:b6:66:1b:a3:a9:3e:10:cd:66:04:74:
a7:23:7f:6b:65:0c:3d:66:98:80:d2:a8:76:e9:a8:
8d:a1:06:ff:5f:4d:cf:2e:16:44:6b:e7:6b:5b:37:
cd:d9:2b:18:61:6f:94:67:a6:34:f0:47:dd:b3:57:
5f:db:1c:a4:9d:6c:3c:37:4b:71:c8:6e:85:ae:0f:
49:d7:5a:9a:4c:dd:42:5d:82:e8:d5:18:d4:00:9c:
d2:f3:b4:a5:c1:20:86:0b:6f:71:7c:07:2e:14:3c:
91:90:ce:e0:a8:54:c4:81:26:0e:0f:25:d8:1b:4b:
2d:7b:a4:f3:a0:6b:d3:90:37:cf:87:1e:ac:c0:6c:
8f:d8:19:df:00:8c:f8:05:21:4f:7f:0c:d0:cb:07:
b1:fd:e5:3d:42:b6:3d:36:fb:e4:8b:d9:47:5b:92:
e0:54:f9:ce:5f:0e:58:45:21:44:0a:03:f0:27:c0:
f1:5c:bf:a3:13:f8:9e:19:a1:e7:99:e6:be:bf:c9:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:B2:0D:35:31:D7:C4:5E:81:D0:45:8A:CC:9A:0F:FD:1F:C2:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2793145EBC11F18D61E3F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.73.0-154.219.92.255
Signature Algorithm: sha256WithRSAEncryption
d1:7d:27:f1:2c:38:4d:b2:3f:87:ac:85:18:f9:dd:c1:e2:74:
a7:6e:57:cf:5e:c9:f9:8d:0a:97:4b:23:5c:1a:6d:40:f3:46:
73:5b:30:7b:b9:05:a0:6e:45:8c:fa:62:0f:af:db:af:ff:03:
86:1e:dc:15:08:f3:8c:e8:16:9f:7e:e9:a4:80:5b:3f:6a:87:
6b:ff:08:e8:2a:37:ec:ae:bc:0a:a6:2c:83:f2:31:0f:36:b2:
52:2e:cb:71:0f:c5:63:34:da:95:7d:83:86:84:e8:cc:14:f9:
ff:d4:8f:54:50:e2:91:1f:f9:3b:0f:2b:9c:14:f7:7c:0d:05:
a5:ba:bd:d1:67:21:ec:86:b4:41:c6:30:52:73:33:cd:ac:02:
c8:91:14:6e:4b:7a:6b:4f:83:f6:ab:20:04:7c:3f:ed:09:c2:
b9:8b:f0:fa:1b:ce:5d:f7:7f:7e:c5:81:15:fc:c8:b6:d8:44:
00:7a:1a:c9:de:e1:aa:ab:96:a3:f9:b4:2c:79:09:05:ac:17:
5d:fc:af:5c:c8:0d:6e:1c:8a:82:85:92:64:43:52:97:c6:1b:
59:13:7f:82:c1:12:52:3f:f9:0e:3d:ec:c7:0c:34:2f:ca:ea:
f3:05:ea:7e:ac:5f:87:f6:b9:fe:d5:fa:98:6f:21:5b:ff:88:
9e:16:e5:00
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdFeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjAyMTk1NDIyWhcNMjYwNzA5MTk1NDIyWjAYMRYw
FAYDVQQDEw02YTFmMzRmMy1iZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs6LeQ6ghpT+EBiIb0s5TbRzM8p0Gp+UfZuls8Qnvr3kIju5ipBEtCT5Z
6IKON+8k56J5UJqQ06YXCqOG2QuJtmYbo6k+EM1mBHSnI39rZQw9ZpiA0qh26aiN
oQb/X03PLhZEa+drWzfN2SsYYW+UZ6Y08Efds1df2xyknWw8N0txyG6Frg9J11qa
TN1CXYLo1RjUAJzS87SlwSCGC29xfAcuFDyRkM7gqFTEgSYODyXYG0ste6TzoGvT
kDfPhx6swGyP2BnfAIz4BSFPfwzQywex/eU9QrY9Nvvki9lHW5LgVPnOXw5YRSFE
CgPwJ8DxXL+jE/ieGaHnmea+v8nNEwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFls
sg01MdfEXoHQRYrMmg/9H8K8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQzI3OTMxNDVFQkMxMUYxOEQ2MUUzRjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACa20kDBACa21wwDQYJ
KoZIhvcNAQELBQADggEBANF9J/EsOE2yP4eshRj53cHidKduV89eyfmNCpdLI1wa
bUDzRnNbMHu5BaBuRYz6Yg+v26//A4Ye3BUI84zoFp9+6aSAWz9qh2v/COgqN+yu
vAqmLIPyMQ82slIuy3EPxWM02pV9g4aE6MwU+f/Uj1RQ4pEf+TsPK5wU93wNBaW6
vdFnIeyGtEHGMFJzM82sAsiRFG5LemtPg/arIAR8P+0JwrmL8Pobzl33f37FgRX8
yLbYRAB6Gsne4aqrlqP5tCx5CQWsF138r1zIDW4cioKFkmRDUpfGG1kTf4LBElI/
+Q497McMNC/K6vMF6n6sX4f2uf7V+phvIVv/iJ4W5QA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:21 2026 by rpki-client