Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54E0D2B2630311F182F75507CF1D38B0.roa
File: 54E0D2B2630311F182F75507CF1D38B0.roa (raw, json)
Hash identifier: YdU2rA0gXevhSUw+p0vVyUj/yYmIGHtkj13IM+/6jCI=
Subject key identifier: 68:E9:45:13:4C:FA:3E:5B:FA:E9:F9:8A:C9:7E:41:2E:0D:0A:43:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D23A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54E0D2B2630311F182F75507CF1D38B0.roa
Signing time: Mon 08 Jun 2026 06:28:59 +0000
ROA not before: Mon 08 Jun 2026 06:28:54 +0000
ROA not after: Tue 14 Jul 2026 06:28:54 +0000
asID: 199707
IP address blocks: 154.193.152.0/24 maxlen: 24
154.193.153.0/24 maxlen: 24
154.193.154.0/24 maxlen: 24
154.193.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119354 (0x1d23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 06:28:54 2026 GMT
Not After : Jul 14 06:28:54 2026 GMT
Subject: CN=6a26612b-57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:f8:a4:5a:97:b0:65:af:1e:a2:24:00:7e:
e1:be:f2:93:c6:22:e8:4a:bd:73:6a:b9:e9:9e:8f:
a7:c3:7a:39:fb:bc:1a:cd:12:8b:f3:5a:7f:fa:cd:
6a:d2:59:e8:30:51:4f:67:95:67:c0:07:59:d0:63:
58:5a:dd:b9:fd:fe:6f:c9:21:32:f6:a1:02:c0:2d:
ee:e2:16:06:b1:27:4f:7b:8d:f3:aa:a2:ad:3e:e4:
d6:ae:0a:3b:8b:6e:82:9f:e4:b4:ca:c0:30:6e:22:
6a:47:3b:73:bd:27:5b:db:ba:d9:f5:8e:6f:bb:79:
6b:1a:dd:bc:ef:96:b8:7a:cb:c5:22:30:29:09:3c:
4e:87:0c:1f:0c:d2:e6:9b:c0:e8:79:17:2f:f0:02:
ac:54:1c:1f:00:8d:ac:1a:09:78:87:0e:ed:22:6e:
61:8f:fd:ad:53:59:4a:f1:9a:45:3b:0a:2f:19:06:
b5:e9:46:91:6a:19:e1:8c:99:f9:27:82:8f:85:91:
71:70:71:3d:f6:14:ae:da:10:9e:c2:47:21:ad:b7:
9e:57:8e:51:f5:8a:e7:ae:f1:95:ce:8c:c2:bd:50:
f2:2e:aa:65:05:b7:11:54:8d:44:46:bf:f5:97:06:
3f:53:e9:f3:51:16:fb:a5:9b:5f:89:96:05:dd:7e:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:45:13:4C:FA:3E:5B:FA:E9:F9:8A:C9:7E:41:2E:0D:0A:43:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54E0D2B2630311F182F75507CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
Signature Algorithm: sha256WithRSAEncryption
02:71:1b:d5:56:26:88:77:5c:e0:79:80:5b:3a:b1:07:3a:62:
47:8b:d8:0f:e8:c7:79:3b:85:5a:c3:c9:a0:2c:e4:ec:50:67:
b7:33:9f:59:d8:a4:72:7d:ec:a9:84:0a:9b:24:e4:24:04:e3:
26:42:47:c1:8f:56:17:2c:34:33:f0:be:f0:98:6e:d6:ef:48:
8d:19:61:0e:87:d5:c7:11:85:fc:92:a5:74:fb:d3:4f:78:24:
fb:c6:23:48:2b:aa:1e:ba:bd:49:55:37:08:c2:b5:48:3f:7c:
50:41:25:70:53:b1:ee:ce:3c:9b:1e:e4:3b:fa:e9:2d:b2:f1:
73:01:5e:46:ff:58:8a:9d:65:54:0a:d8:17:01:60:9c:8e:0a:
2c:8c:28:0e:ea:fd:a9:16:48:25:ac:48:e8:01:b0:c1:03:08:
30:1e:4c:bc:39:c4:ee:ba:28:33:2e:34:0f:ec:75:3f:70:af:
61:c7:bb:ee:5c:8b:be:13:f9:f8:5c:89:be:8c:63:c3:08:fd:
dd:b3:64:fa:e6:39:a4:b8:28:8f:49:d3:55:2d:08:13:0b:29:
28:18:9a:e2:9a:07:1f:d9:fe:fe:6d:90:4f:4b:3d:dc:9f:e7:
8a:95:bf:46:78:d3:5d:39:a6:73:87:da:5b:61:3e:f4:71:03:
02:c3:00:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdI6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA4MDYyODU0WhcNMjYwNzE0MDYyODU0WjAYMRYw
FAYDVQQDEw02YTI2NjEyYi01N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy6f4pFqXsGWvHqIkAH7hvvKTxiLoSr1zarnpno+nw3o5+7wazRKL81p/
+s1q0lnoMFFPZ5VnwAdZ0GNYWt25/f5vySEy9qECwC3u4hYGsSdPe43zqqKtPuTW
rgo7i26Cn+S0ysAwbiJqRztzvSdb27rZ9Y5vu3lrGt2875a4esvFIjApCTxOhwwf
DNLmm8DoeRcv8AKsVBwfAI2sGgl4hw7tIm5hj/2tU1lK8ZpFOwovGQa16UaRahnh
jJn5J4KPhZFxcHE99hSu2hCewkchrbeeV45R9YrnrvGVzozCvVDyLqplBbcRVI1E
Rr/1lwY/U+nzURb7pZtfiZYF3X559wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGjp
RRNM+j5b+un5isl+QS4NCkOZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NEUwRDJCMjYzMDMxMUYxODJGNzU1MDdDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsGYMA0GCSqGSIb3DQEB
CwUAA4IBAQACcRvVViaId1zgeYBbOrEHOmJHi9gP6Md5O4Vaw8mgLOTsUGe3M59Z
2KRyfeyphAqbJOQkBOMmQkfBj1YXLDQz8L7wmG7W70iNGWEOh9XHEYX8kqV0+9NP
eCT7xiNIK6oeur1JVTcIwrVIP3xQQSVwU7HuzjybHuQ7+uktsvFzAV5G/1iKnWVU
CtgXAWCcjgosjCgO6v2pFkglrEjoAbDBAwgwHky8OcTuuigzLjQP7HU/cK9hx7vu
XIu+E/n4XIm+jGPDCP3ds2T65jmkuCiPSdNVLQgTCykoGJrimgcf2f7+bZBPSz3c
n+eKlb9GeNNdOaZzh9pbYT70cQMCwwDS
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:48 2026 by rpki-client