Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE826AE615E11F189AC6C01CF1D38B0.roa
File: 3FE826AE615E11F189AC6C01CF1D38B0.roa (raw, json)
Hash identifier: xWIfOWQzXM73ARLEy8PeOLLkSLB4pVdpymooVszfANg=
Subject key identifier: FB:5C:5A:0E:6A:F2:7F:E9:48:23:5E:7A:46:64:5F:7A:14:2E:8F:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE826AE615E11F189AC6C01CF1D38B0.roa
Signing time: Sat 06 Jun 2026 04:14:45 +0000
ROA not before: Sat 06 Jun 2026 04:14:40 +0000
ROA not after: Wed 02 Jun 2027 04:14:40 +0000
asID: 140659
IP address blocks: 154.197.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119253 (0x1d1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 04:14:40 2026 GMT
Not After : Jun 2 04:14:40 2027 GMT
Subject: CN=6a239eb5-5dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:ab:96:87:4f:a7:3b:e3:82:0d:71:68:d3:
87:5a:8e:ea:82:7e:3a:66:1c:0c:26:37:9a:f3:e3:
eb:ce:68:d1:0f:e2:b0:49:ee:0c:7e:ee:5e:b8:a7:
a3:35:20:89:ae:bf:93:fa:dd:6d:76:f1:48:03:e7:
e7:63:99:db:90:0e:64:5c:88:db:80:c8:54:90:8f:
78:39:15:61:cc:3e:e2:96:3e:4d:fa:5d:97:20:5e:
49:74:cf:5d:66:83:73:04:6f:e9:2a:a9:38:ed:e2:
a4:9f:68:35:2b:27:87:fd:7a:a6:10:79:fa:3f:66:
85:fc:e7:0a:b0:06:f5:92:91:af:38:18:31:fe:af:
8b:6f:ec:9c:3a:2b:df:f5:21:81:15:d8:1b:50:e4:
68:73:26:ce:3f:a6:e8:ff:69:ab:dd:54:d0:be:08:
71:97:36:95:b9:99:a0:76:07:f1:ac:c6:5a:f3:ee:
9b:6c:b0:22:2e:59:db:ed:a8:76:ac:bd:67:94:75:
0e:eb:ed:d5:d1:b1:56:ac:49:f4:b0:1d:1e:2e:1f:
b0:97:30:e7:d0:b5:98:4a:84:08:5a:3a:f3:ef:5b:
5c:4f:02:9d:19:d2:cf:a6:31:88:46:cc:0f:de:a1:
f1:3a:61:d0:b4:f5:26:07:e5:81:2f:4f:60:d6:82:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5C:5A:0E:6A:F2:7F:E9:48:23:5E:7A:46:64:5F:7A:14:2E:8F:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE826AE615E11F189AC6C01CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:df:fa:56:3f:61:22:1a:ed:22:71:4c:6f:cc:51:05:dc:0b:
eb:b7:ab:d7:63:bc:06:34:33:3e:da:75:f9:ba:2d:f0:06:c2:
db:28:9c:bb:c8:7d:3e:ed:ac:a5:3a:2d:66:af:12:0d:7a:bc:
10:7a:5e:be:d9:1f:73:12:0b:6c:7e:e5:e2:94:ba:84:a7:84:
fd:99:45:72:75:0e:18:66:94:7a:b4:8b:e9:3a:f8:65:ce:b0:
68:cd:29:70:90:71:0e:c3:ba:5c:cd:a5:e6:de:a3:55:5b:e7:
d9:60:51:43:5f:5f:86:17:65:50:f6:95:8c:ea:47:38:29:4b:
28:62:34:d6:f4:c6:e4:f0:95:9c:c1:45:9a:18:7c:98:ca:44:
e4:49:80:c6:c1:f8:6f:75:6e:e7:45:2c:d7:c2:37:8b:dc:5d:
94:d8:bb:75:0b:fd:f1:bb:b5:77:96:60:89:84:bf:9c:ad:d1:
eb:0e:5d:28:be:cd:c1:6f:24:cc:88:ae:b8:3b:81:45:04:ef:
64:30:25:ae:9e:1f:cc:b6:db:08:16:4b:fd:c9:34:ca:ac:00:
96:4d:d9:23:9e:2b:25:cc:a3:36:28:30:8f:0f:74:12:53:75:
9e:46:d0:83:e8:20:cc:3b:fa:f8:fd:5c:b2:70:db:e7:40:0a:
8a:91:ce:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdHVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDQxNDQwWhcNMjcwNjAyMDQxNDQwWjAYMRYw
FAYDVQQDEw02YTIzOWViNS01ZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu0arlodPpzvjgg1xaNOHWo7qgn46ZhwMJjea8+PrzmjRD+KwSe4Mfu5e
uKejNSCJrr+T+t1tdvFIA+fnY5nbkA5kXIjbgMhUkI94ORVhzD7ilj5N+l2XIF5J
dM9dZoNzBG/pKqk47eKkn2g1KyeH/XqmEHn6P2aF/OcKsAb1kpGvOBgx/q+Lb+yc
Oivf9SGBFdgbUORocybOP6bo/2mr3VTQvghxlzaVuZmgdgfxrMZa8+6bbLAiLlnb
7ah2rL1nlHUO6+3V0bFWrEn0sB0eLh+wlzDn0LWYSoQIWjrz71tcTwKdGdLPpjGI
RswP3qHxOmHQtPUmB+WBL09g1oKdKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPtc
Wg5q8n/pSCNeekZkX3oULo8BMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRkU4MjZBRTYxNUUxMUYxODlBQzZDMDFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsU/MA0GCSqGSIb3DQEB
CwUAA4IBAQCj3/pWP2EiGu0icUxvzFEF3Avrt6vXY7wGNDM+2nX5ui3wBsLbKJy7
yH0+7aylOi1mrxINerwQel6+2R9zEgtsfuXilLqEp4T9mUVydQ4YZpR6tIvpOvhl
zrBozSlwkHEOw7pczaXm3qNVW+fZYFFDX1+GF2VQ9pWM6kc4KUsoYjTW9Mbk8JWc
wUWaGHyYykTkSYDGwfhvdW7nRSzXwjeL3F2U2Lt1C/3xu7V3lmCJhL+crdHrDl0o
vs3BbyTMiK64O4FFBO9kMCWunh/MttsIFkv9yTTKrACWTdkjnislzKM2KDCPD3QS
U3WeRtCD6CDMO/r4/VyycNvnQAqKkc5E
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:29 2026 by rpki-client