Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE53E02A697011F185A9E60CCF1D38B0.roa
File: DE53E02A697011F185A9E60CCF1D38B0.roa (raw, json)
Hash identifier: SMibLjlihQ584R11Mv3GJ1krTuklZ8X0ebh5lSKfpck=
Subject key identifier: E6:E5:9C:E5:BF:82:04:19:6A:CA:D7:D9:BA:23:F5:1E:88:39:ED:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D32C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE53E02A697011F185A9E60CCF1D38B0.roa
Signing time: Tue 16 Jun 2026 10:48:12 +0000
ROA not before: Tue 16 Jun 2026 10:48:07 +0000
ROA not after: Thu 16 Jul 2026 10:48:07 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119596 (0x1d32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 10:48:07 2026 GMT
Not After : Jul 16 10:48:07 2026 GMT
Subject: CN=6a3129eb-0df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:0d:53:5e:fc:52:67:e4:31:f3:47:36:d7:
c1:7a:2f:40:83:62:dc:78:95:78:2a:71:0b:66:3f:
9e:8a:4d:93:d3:52:b6:74:f3:ed:29:8d:81:78:8e:
b6:8a:26:58:84:a4:95:de:45:d4:03:6e:a0:31:8c:
c7:7f:35:0c:03:ab:bf:c4:8a:dd:38:eb:2c:10:fa:
97:d9:f2:cf:01:ae:6a:22:11:f3:41:9b:ee:89:bf:
a1:d6:aa:d8:1a:33:d1:03:64:4c:56:f7:66:4c:31:
a6:f6:79:4f:84:2f:8d:64:02:97:1b:d8:5d:b7:4d:
91:55:91:dc:7e:99:cc:9d:39:af:bb:81:7c:72:1d:
60:09:39:af:7c:1d:0c:d6:4a:0c:86:2d:03:07:d0:
85:e2:9d:a6:ad:f7:d1:cb:2b:89:25:b9:09:db:b2:
96:aa:af:58:da:db:04:2d:8b:09:29:dd:97:99:eb:
a4:ff:33:55:6a:8c:ae:a6:38:d8:ea:67:62:5f:c5:
15:14:66:66:fe:0c:c5:a8:a0:6e:44:a2:16:db:31:
b9:24:ff:04:09:da:12:a3:34:e0:88:dc:07:59:b4:
4f:f1:d3:ac:45:d0:39:b0:87:f1:ab:10:fe:96:07:
fa:a0:e1:4a:59:41:1a:f2:c7:02:68:dd:fe:aa:e2:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:9C:E5:BF:82:04:19:6A:CA:D7:D9:BA:23:F5:1E:88:39:ED:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE53E02A697011F185A9E60CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:32:ac:a3:de:8e:95:2f:bf:7a:b8:62:21:93:ee:28:6f:9d:
40:fa:7a:a6:a6:db:c5:95:4c:9e:7c:37:b8:15:e1:dc:8a:51:
a3:06:95:18:00:07:ab:7a:cb:b5:e9:b3:f7:07:5a:8b:39:c5:
1e:1d:94:8f:64:6c:d8:0b:72:91:b4:bc:c8:35:09:f4:70:f3:
4a:5d:34:b4:87:0e:60:b1:1e:41:b1:35:ef:03:80:ad:0f:9d:
b2:bf:1e:1f:3c:0d:44:d1:74:0b:25:69:06:ed:b3:0d:bd:ac:
b5:c2:93:65:dd:97:99:93:d3:15:ee:71:65:97:40:4b:97:2e:
9a:7f:97:eb:52:ea:5f:eb:81:d9:98:9a:2d:fd:d3:0d:a2:69:
11:f7:30:69:95:b8:0e:92:da:c0:f2:9d:88:d5:fd:cd:68:10:
e9:eb:d5:c7:40:55:d1:0f:35:eb:b8:f1:59:6c:ac:31:ef:6a:
89:ff:f8:c8:1d:11:72:6e:27:05:0d:ff:d4:e1:f5:72:ea:16:
97:68:a0:a5:9d:36:c0:9e:49:54:05:17:27:1e:14:7d:61:a7:
ac:6f:a3:3a:02:db:c6:e1:92:4a:d1:de:ff:9b:c0:3c:b6:23:
17:03:84:8d:88:0c:c8:1b:ac:54:fd:38:b0:c5:99:6a:42:06:
1e:99:20:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdMsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE2MTA0ODA3WhcNMjYwNzE2MTA0ODA3WjAYMRYw
FAYDVQQDEw02YTMxMjllYi0wZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyN8NU178UmfkMfNHNtfBei9Ag2LceJV4KnELZj+eik2T01K2dPPtKY2B
eI62iiZYhKSV3kXUA26gMYzHfzUMA6u/xIrdOOssEPqX2fLPAa5qIhHzQZvuib+h
1qrYGjPRA2RMVvdmTDGm9nlPhC+NZAKXG9hdt02RVZHcfpnMnTmvu4F8ch1gCTmv
fB0M1koMhi0DB9CF4p2mrffRyyuJJbkJ27KWqq9Y2tsELYsJKd2Xmeuk/zNVaoyu
pjjY6mdiX8UVFGZm/gzFqKBuRKIW2zG5JP8ECdoSozTgiNwHWbRP8dOsRdA5sIfx
qxD+lgf6oOFKWUEa8scCaN3+quJUmwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFObl
nOW/ggQZasrX2boj9R6IOe0gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERTUzRTAyQTY5NzAxMUYxODVBOUU2MENDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQDVMqyj3o6VL796uGIhk+4ob51A+nqmptvFlUyefDe4FeHcilGjBpUY
AAeresu16bP3B1qLOcUeHZSPZGzYC3KRtLzINQn0cPNKXTS0hw5gsR5BsTXvA4Ct
D52yvx4fPA1E0XQLJWkG7bMNvay1wpNl3ZeZk9MV7nFll0BLly6af5frUupf64HZ
mJot/dMNomkR9zBplbgOktrA8p2I1f3NaBDp69XHQFXRDzXruPFZbKwx72qJ//jI
HRFybicFDf/U4fVy6haXaKClnTbAnklUBRcnHhR9Yaesb6M6AtvG4ZJK0d7/m8A8
tiMXA4SNiAzIG6xU/TiwxZlqQgYemSBA
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:29 2026 by rpki-client