Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0B25A25FF811F1A6AB64FECE1D38B0.roa
File: 3C0B25A25FF811F1A6AB64FECE1D38B0.roa (raw, json)
Hash identifier: JnEOFUWTvirdcsAKA1IjfsFUVoWwUoW5f29Qnc1Vue0=
Subject key identifier: E2:45:5C:DA:C2:21:B5:30:21:E4:18:A8:DD:9C:2A:D0:7A:89:B5:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D192
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0B25A25FF811F1A6AB64FECE1D38B0.roa
Signing time: Thu 04 Jun 2026 09:31:59 +0000
ROA not before: Thu 04 Jun 2026 09:31:55 +0000
ROA not after: Fri 10 Jul 2026 09:31:55 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119186 (0x1d192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 09:31:55 2026 GMT
Not After : Jul 10 09:31:55 2026 GMT
Subject: CN=6a21460f-f561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:e9:2f:02:91:9f:79:4b:7c:23:b6:f7:0d:
d8:bc:7a:dd:78:e7:fa:02:16:d9:e2:62:99:0f:68:
1f:32:dd:07:8c:7f:5f:db:9e:99:cf:d3:dc:24:4e:
6c:9b:9c:8d:2c:fc:44:e5:50:a9:c5:da:5c:c4:6c:
f7:15:5d:4b:28:a8:2f:3a:c0:78:1b:f5:b4:21:c9:
d7:b4:c3:cf:f6:84:45:9c:0d:35:4b:7e:8a:93:f4:
45:9c:7c:ff:22:b3:53:54:2f:8e:db:cd:19:f0:93:
cd:92:d6:8c:12:82:7f:a7:8f:b2:61:bb:59:51:03:
fa:e1:da:72:01:99:e3:cd:de:fc:65:5a:04:7f:ab:
a0:af:05:94:5f:0d:cc:0f:80:f5:01:bc:01:98:aa:
96:d2:c6:e8:c2:4a:08:8c:2b:8a:69:c6:3c:50:fb:
23:79:cb:57:b6:9b:f3:e6:59:09:fe:ea:aa:78:0e:
d9:4a:69:57:b9:16:37:d4:2a:9d:36:19:cd:4c:ab:
cc:13:3c:7a:60:30:0f:c5:7a:4d:54:45:b4:00:19:
12:92:d8:b9:96:0b:3e:c3:87:3f:32:79:6e:50:1e:
02:9b:32:56:38:ac:5f:d5:f9:e4:ff:a2:31:53:e6:
d3:21:96:4f:a3:79:9d:88:e6:d9:4f:b9:72:a0:11:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:45:5C:DA:C2:21:B5:30:21:E4:18:A8:DD:9C:2A:D0:7A:89:B5:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0B25A25FF811F1A6AB64FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cf:27:eb:7d:56:b8:e6:90:94:3a:41:bf:32:d9:29:38:d6:
1b:0b:24:dd:b2:db:b3:9e:30:05:ad:aa:23:40:79:fa:12:89:
b1:be:1a:d1:5e:71:97:6e:4a:a4:85:c0:ff:95:52:a2:24:25:
70:4c:87:99:72:57:6b:b5:35:2c:3c:79:11:92:af:82:b7:a5:
cc:84:6d:08:0e:d4:95:62:e4:c8:ab:86:15:80:ee:b5:30:30:
54:7d:5f:78:ac:f6:97:e8:fd:30:16:d7:6b:15:ab:7f:8c:93:
fd:83:3d:85:a4:2d:7e:25:c3:9b:0c:7b:da:65:17:92:c0:fd:
e1:76:5f:e9:de:0a:c2:85:e4:cf:fc:22:e6:97:21:7a:f9:53:
38:f2:f3:71:9c:fc:fe:a3:25:dd:67:a0:e4:2e:32:2b:97:c4:
b3:17:64:ed:f8:dc:27:62:8f:23:a1:3e:d2:d7:4f:cc:0f:e1:
2b:a6:44:8b:4f:12:17:76:0c:60:36:22:b3:31:0e:7f:1a:f8:
cd:b8:6b:d5:fe:88:46:1a:3a:1d:e8:51:bd:8e:25:01:2a:05:
3d:3e:99:7c:42:93:1b:81:c1:d0:1f:51:06:57:6d:08:a5:df:
85:89:99:57:c3:14:c2:6c:5e:2f:9b:d1:b1:76:1d:12:cf:bd:
c1:58:59:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdGSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA0MDkzMTU1WhcNMjYwNzEwMDkzMTU1WjAYMRYw
FAYDVQQDEw02YTIxNDYwZi1mNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvk3pLwKRn3lLfCO29w3YvHrdeOf6AhbZ4mKZD2gfMt0HjH9f256Zz9Pc
JE5sm5yNLPxE5VCpxdpcxGz3FV1LKKgvOsB4G/W0IcnXtMPP9oRFnA01S36Kk/RF
nHz/IrNTVC+O280Z8JPNktaMEoJ/p4+yYbtZUQP64dpyAZnjzd78ZVoEf6ugrwWU
Xw3MD4D1AbwBmKqW0sbowkoIjCuKacY8UPsjectXtpvz5lkJ/uqqeA7ZSmlXuRY3
1CqdNhnNTKvMEzx6YDAPxXpNVEW0ABkSkti5lgs+w4c/MnluUB4CmzJWOKxf1fnk
/6IxU+bTIZZPo3mdiObZT7lyoBEh9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOJF
XNrCIbUwIeQYqN2cKtB6ibVwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQzBCMjVBMjVGRjgxMUYxQTZBQjY0RkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt9BMA0GCSqGSIb3DQEB
CwUAA4IBAQBHzyfrfVa45pCUOkG/MtkpONYbCyTdstuznjAFraojQHn6EomxvhrR
XnGXbkqkhcD/lVKiJCVwTIeZcldrtTUsPHkRkq+Ct6XMhG0IDtSVYuTIq4YVgO61
MDBUfV94rPaX6P0wFtdrFat/jJP9gz2FpC1+JcObDHvaZReSwP3hdl/p3grCheTP
/CLmlyF6+VM48vNxnPz+oyXdZ6DkLjIrl8SzF2Tt+NwnYo8joT7S10/MD+ErpkSL
TxIXdgxgNiKzMQ5/GvjNuGvV/ohGGjod6FG9jiUBKgU9Ppl8QpMbgcHQH1EGV20I
pd+FiZlXwxTCbF4vm9Gxdh0Sz73BWFld
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:17:09 2026 by rpki-client