Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49F0DF2858F911F18121BCFACE1D38B0.roa
File: 49F0DF2858F911F18121BCFACE1D38B0.roa (raw, json)
Hash identifier: 9QHHJK8zDwFPTjaowDh3ssOOUmvQrAYYYtIsd+zt/UM=
Subject key identifier: 6D:E0:35:25:3E:81:7E:DC:58:DD:20:13:42:58:BF:C8:33:01:0D:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49F0DF2858F911F18121BCFACE1D38B0.roa
Signing time: Tue 26 May 2026 11:51:54 +0000
ROA not before: Tue 26 May 2026 11:51:48 +0000
ROA not after: Sat 04 Jul 2026 11:51:48 +0000
asID: 198243
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118717 (0x1cfbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 11:51:48 2026 GMT
Not After : Jul 4 11:51:48 2026 GMT
Subject: CN=6a15895a-10bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:fb:aa:2b:57:49:00:f0:8d:e2:f8:25:aa:
c2:1d:da:ad:ed:de:b2:17:a2:b7:01:9d:64:45:56:
d0:2c:36:16:3e:02:2e:dd:2f:e6:4a:9b:76:a4:ff:
70:5c:af:c3:47:43:94:0e:58:e1:b6:b5:20:7c:16:
8c:5e:1c:9e:bd:2c:62:0f:1d:d6:b4:cd:cc:74:18:
32:34:7f:34:90:88:56:f5:3d:69:57:3b:bd:3b:d2:
dc:e2:54:1a:01:32:ea:f1:f9:fe:74:0d:08:f1:66:
a7:64:64:63:a0:1c:ca:8e:0f:98:ae:87:a8:21:4d:
e9:92:11:76:87:9e:c9:8c:44:e0:cb:e4:12:1f:0a:
9e:dc:44:86:97:a1:59:96:da:2e:08:f5:6a:3f:da:
a6:4d:25:7e:26:e9:42:4c:54:54:a2:0c:87:86:d7:
42:e9:b2:59:34:49:3c:37:30:44:d3:3c:6d:d4:76:
94:f9:2d:c7:0f:5c:17:d9:2e:10:36:43:b1:d6:5e:
98:ad:a0:4f:d7:f5:64:34:d9:60:29:d7:07:fc:d7:
5e:11:26:3d:49:22:37:e0:4f:e7:86:ca:7c:94:0f:
ff:d9:30:1d:13:db:f3:8b:f9:3f:13:07:ed:01:ec:
c2:40:0f:fa:6d:9c:f2:61:77:c1:75:3b:24:1e:35:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:35:25:3E:81:7E:DC:58:DD:20:13:42:58:BF:C8:33:01:0D:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49F0DF2858F911F18121BCFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:60:5b:53:2b:31:56:6e:a4:8e:1a:ed:d2:35:db:53:e5:f6:
fc:e5:f6:c5:8a:6b:9a:ba:5a:73:83:48:69:70:f9:8c:41:34:
09:49:ea:c8:6b:5a:35:b8:81:14:7c:59:5d:8e:4b:7d:84:05:
fa:4e:df:ef:2d:52:e5:5d:8e:e4:85:6e:dc:69:25:99:c1:63:
d2:4e:c0:b8:36:83:5a:6a:65:2a:5a:86:84:30:5e:b2:b9:cd:
e2:3c:33:7c:cb:72:1d:63:90:15:e7:56:23:02:f4:25:60:db:
e6:ee:69:b3:62:34:8d:20:0e:51:bc:8d:4e:0c:f5:ed:1c:79:
65:fb:cc:9d:f5:b0:63:18:b1:2a:71:b3:91:2e:f1:55:9d:07:
e9:ae:46:39:71:60:c5:59:a6:39:92:8c:12:d1:b1:01:92:99:
7c:a4:0c:e2:7f:f7:4b:67:d4:37:b3:57:85:0d:3c:1b:0f:55:
98:ca:ce:2e:84:cf:47:85:be:03:c0:b1:07:f4:5f:5f:c0:c1:
06:e2:6b:51:0a:0f:7e:92:9e:bc:5d:b7:33:aa:0a:6d:86:94:
17:95:76:6d:65:fa:60:65:4f:7e:7c:0f:c0:98:7c:96:1a:e4:
f6:94:0c:07:70:cc:3a:99:b0:f1:9b:ac:a9:22:fe:01:2a:9a:
af:0b:b0:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc+9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI2MTE1MTQ4WhcNMjYwNzA0MTE1MTQ4WjAYMRYw
FAYDVQQDEw02YTE1ODk1YS0xMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyBj7qitXSQDwjeL4JarCHdqt7d6yF6K3AZ1kRVbQLDYWPgIu3S/mSpt2
pP9wXK/DR0OUDljhtrUgfBaMXhyevSxiDx3WtM3MdBgyNH80kIhW9T1pVzu9O9Lc
4lQaATLq8fn+dA0I8WanZGRjoBzKjg+YroeoIU3pkhF2h57JjETgy+QSHwqe3ESG
l6FZltouCPVqP9qmTSV+JulCTFRUogyHhtdC6bJZNEk8NzBE0zxt1HaU+S3HD1wX
2S4QNkOx1l6YraBP1/VkNNlgKdcH/NdeESY9SSI34E/nhsp8lA//2TAdE9vzi/k/
EwftAezCQA/6bZzyYXfBdTskHjXQWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG3g
NSU+gX7cWN0gE0JYv8gzAQ0WMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OUYwREYyODU4RjkxMUYxODEyMUJDRkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPSMA0GCSqGSIb3DQEB
CwUAA4IBAQAKYFtTKzFWbqSOGu3SNdtT5fb85fbFimuaulpzg0hpcPmMQTQJSerI
a1o1uIEUfFldjkt9hAX6Tt/vLVLlXY7khW7caSWZwWPSTsC4NoNaamUqWoaEMF6y
uc3iPDN8y3IdY5AV51YjAvQlYNvm7mmzYjSNIA5RvI1ODPXtHHll+8yd9bBjGLEq
cbORLvFVnQfprkY5cWDFWaY5kowS0bEBkpl8pAzif/dLZ9Q3s1eFDTwbD1WYys4u
hM9Hhb4DwLEH9F9fwMEG4mtRCg9+kp68XbczqgpthpQXlXZtZfpgZU9+fA/AmHyW
GuT2lAwHcMw6mbDxm6ypIv4BKpqvC7AR
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:04 2026 by rpki-client