Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6CE4F26A2B11F19A879801CF1D38B0.roa
File: DD6CE4F26A2B11F19A879801CF1D38B0.roa (raw, json)
Hash identifier: VIn1k99zvguWrbLBk+Rlx3xJJ9oJD2WChu8lBD99Yrw=
Subject key identifier: 6E:CB:A3:03:F4:8F:3A:46:80:B4:4F:96:D5:45:29:75:7F:C9:95:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D39E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6CE4F26A2B11F19A879801CF1D38B0.roa
Signing time: Wed 17 Jun 2026 09:06:46 +0000
ROA not before: Wed 17 Jun 2026 09:06:40 +0000
ROA not after: Thu 17 Jun 2027 09:06:40 +0000
asID: 139811
IP address blocks: 154.91.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119710 (0x1d39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 09:06:40 2026 GMT
Not After : Jun 17 09:06:40 2027 GMT
Subject: CN=6a3263a6-7c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:c4:e6:db:89:7e:cd:2f:ac:28:c7:ed:52:
1e:59:c7:30:92:86:e6:e2:06:13:3f:ad:95:5d:ed:
c6:51:18:81:09:e4:c8:8b:41:82:70:e6:d7:6f:e1:
74:31:21:8a:0d:b6:3a:61:06:63:5d:0c:ba:a5:6a:
94:a6:fe:b8:20:57:92:30:06:70:43:a8:e1:08:c3:
82:ab:70:c9:1f:c5:ae:66:c6:16:cf:be:9b:2a:d1:
af:47:1b:4f:6a:4e:fa:6c:91:83:8c:01:85:c5:f8:
4a:8c:61:8c:68:e4:16:d3:5d:07:8e:ac:34:0d:67:
d1:2c:42:47:fb:3a:66:d2:41:b2:d8:32:1a:e2:c1:
d5:a1:1c:80:a6:5b:3a:85:1b:84:85:3b:ce:1a:63:
73:dd:60:3e:15:c9:14:63:a3:d9:b0:b6:64:2c:d8:
c0:18:7e:e0:de:bf:2c:da:2e:a5:4e:c6:6a:70:5b:
94:73:a9:29:6a:68:9c:be:75:59:31:13:93:e1:70:
41:07:6a:9f:f8:ee:1c:0b:4e:1f:b2:ff:4f:ba:8b:
ae:55:18:46:da:01:91:f9:0d:08:a5:27:a1:2b:c8:
9c:bb:3e:f1:7f:f5:f9:10:1e:c7:9f:b0:ea:55:4b:
91:de:c8:64:a8:fb:85:27:99:38:1a:cf:fb:56:98:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:A3:03:F4:8F:3A:46:80:B4:4F:96:D5:45:29:75:7F:C9:95:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6CE4F26A2B11F19A879801CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.39.0/24
Signature Algorithm: sha256WithRSAEncryption
37:23:92:bb:14:92:68:c3:2d:60:27:fd:87:dc:0a:d8:d5:9c:
41:4e:c3:6d:6e:23:15:42:91:87:05:43:4e:fa:fd:cf:20:76:
26:d7:21:e1:7f:74:03:24:16:57:89:0b:f8:ef:e1:7c:c5:20:
23:43:42:0a:2d:89:cb:ff:2c:42:af:cc:f7:17:7c:97:d9:88:
e0:9d:ae:99:36:ed:76:cd:5c:77:b9:e6:8f:86:f3:5d:7a:cc:
ce:db:95:83:09:b6:70:1c:a9:3f:1d:22:95:4e:a0:21:2c:31:
a6:8b:15:88:d4:61:08:dd:04:d8:77:80:cd:57:ea:c7:4e:42:
96:7b:8b:97:90:80:d4:45:ea:6c:b3:c2:c2:b4:5d:5e:ac:9a:
7a:57:ba:98:e9:dd:50:e8:62:7b:1f:ab:9d:94:b4:2d:9c:ab:
07:1a:fe:90:5c:97:20:69:9c:a3:0a:d4:2b:cd:60:d5:c4:5d:
47:14:10:29:9f:18:02:e2:c4:23:f8:80:da:10:e6:26:ad:4a:
11:61:1d:38:5e:7c:8a:72:de:e4:b5:58:cf:65:1c:1d:7e:2d:
11:0a:4a:aa:29:e1:3f:03:c8:f7:e7:4e:3b:6f:d9:dd:9d:91:
75:ff:45:b4:4b:36:6f:b9:b3:2e:13:99:19:c1:08:0e:ba:58:
8f:14:c3:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdOeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE3MDkwNjQwWhcNMjcwNjE3MDkwNjQwWjAYMRYw
FAYDVQQDEw02YTMyNjNhNi03YzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3YfE5tuJfs0vrCjH7VIeWccwkobm4gYTP62VXe3GURiBCeTIi0GCcObX
b+F0MSGKDbY6YQZjXQy6pWqUpv64IFeSMAZwQ6jhCMOCq3DJH8WuZsYWz76bKtGv
RxtPak76bJGDjAGFxfhKjGGMaOQW010Hjqw0DWfRLEJH+zpm0kGy2DIa4sHVoRyA
pls6hRuEhTvOGmNz3WA+FckUY6PZsLZkLNjAGH7g3r8s2i6lTsZqcFuUc6kpamic
vnVZMROT4XBBB2qf+O4cC04fsv9PuouuVRhG2gGR+Q0IpSehK8icuz7xf/X5EB7H
n7DqVUuR3shkqPuFJ5k4Gs/7VpiieQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG7L
owP0jzpGgLRPltVFKXV/yZVQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERDZDRTRGMjZBMkIxMUYxOUE4Nzk4MDFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlsnMA0GCSqGSIb3DQEB
CwUAA4IBAQA3I5K7FJJowy1gJ/2H3ArY1ZxBTsNtbiMVQpGHBUNO+v3PIHYm1yHh
f3QDJBZXiQv47+F8xSAjQ0IKLYnL/yxCr8z3F3yX2Yjgna6ZNu12zVx3ueaPhvNd
eszO25WDCbZwHKk/HSKVTqAhLDGmixWI1GEI3QTYd4DNV+rHTkKWe4uXkIDUReps
s8LCtF1erJp6V7qY6d1Q6GJ7H6udlLQtnKsHGv6QXJcgaZyjCtQrzWDVxF1HFBAp
nxgC4sQj+IDaEOYmrUoRYR04XnyKct7ktVjPZRwdfi0RCkqqKeE/A8j35047b9nd
nZF1/0W0SzZvubMuE5kZwQgOuliPFMOv
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:54 2026 by rpki-client