Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564C6D1455CA11F1A48CDD18CF1D38B0.roa
File: 564C6D1455CA11F1A48CDD18CF1D38B0.roa (raw, json)
Hash identifier: pVWPkWomMD4xScakWLxL5GZ5u9dOcC2js3NkC3vlh1I=
Subject key identifier: 8D:54:00:0E:A5:57:84:16:79:99:10:97:A3:81:BB:B0:45:94:39:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564C6D1455CA11F1A48CDD18CF1D38B0.roa
Signing time: Fri 22 May 2026 10:38:15 +0000
ROA not before: Fri 22 May 2026 10:38:10 +0000
ROA not after: Wed 19 Aug 2026 10:38:10 +0000
asID: 18013
IP address blocks: 154.210.16.0/20 maxlen: 24
154.212.132.0/22 maxlen: 24
154.212.135.0/24 maxlen: 24
154.215.2.0/23 maxlen: 24
154.221.2.0/23 maxlen: 24
154.221.8.0/21 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118268 (0x1cdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 10:38:10 2026 GMT
Not After : Aug 19 10:38:10 2026 GMT
Subject: CN=6a103217-b006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:54:d7:70:08:c7:a1:f8:31:47:db:b0:1f:
01:c8:d7:8e:5b:f8:77:b2:59:55:fa:78:70:81:d1:
de:bf:ef:84:5a:fa:60:39:da:b2:b2:7f:97:1f:73:
32:f8:6d:0a:89:60:93:61:a0:ba:c6:a2:5c:b8:bd:
6e:be:cd:cc:3f:1a:e3:65:08:e6:2d:55:62:61:4f:
c2:27:a1:ff:1a:b4:72:cd:fa:65:5b:42:62:78:66:
0d:13:75:29:be:58:bd:0b:0a:87:95:70:b2:af:08:
f1:16:67:be:ef:5f:f5:c5:21:c8:23:66:e1:ef:8a:
78:ca:be:49:f2:ae:cb:82:46:b5:3b:9e:16:57:c2:
f7:0c:64:9f:6e:19:f7:59:dd:93:78:28:63:ff:f3:
6a:87:64:eb:b5:33:fa:56:41:a0:6d:d7:5b:51:c4:
4c:30:75:f0:4f:33:07:5e:47:b9:50:ca:c0:99:13:
2c:08:c9:b3:d4:a5:69:7c:ac:36:a6:89:c7:87:2e:
57:38:a9:1f:d0:33:ec:85:78:81:fe:e4:21:bb:73:
f7:5d:f7:46:a8:58:25:bc:31:6a:84:a4:ce:be:5d:
c3:9d:f4:ad:78:2f:25:68:b9:bc:a5:fa:7a:8c:2a:
50:41:64:60:a3:1d:f9:42:a7:9c:a1:65:1f:8f:27:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:00:0E:A5:57:84:16:79:99:10:97:A3:81:BB:B0:45:94:39:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564C6D1455CA11F1A48CDD18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.212.132.0/22
154.215.2.0/23
154.221.2.0/23
154.221.8.0/21
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
26:3e:48:17:cf:3c:6e:d7:e4:94:a2:7e:7e:c4:44:9e:69:b4:
f8:a0:8b:09:3b:47:d1:f7:02:cf:82:92:2e:22:ac:05:52:89:
73:73:16:9c:ca:28:33:04:0f:f9:9a:b0:54:18:9b:c6:23:a6:
c2:0a:31:84:d9:0c:0a:9d:7c:19:0e:cf:0b:88:43:19:85:58:
18:87:e7:af:96:44:23:09:69:8a:50:0e:0e:62:a7:a8:99:40:
16:0f:88:8e:31:af:ed:a2:d4:e7:be:6b:de:e9:fa:fd:1a:21:
d0:d7:16:3b:fb:a3:0f:ef:d1:ba:8f:73:2c:59:89:8c:ff:3c:
86:c9:73:e7:97:33:1f:e4:53:ae:7e:2c:74:b4:58:1d:6a:32:
9b:35:f9:61:6c:0b:22:d4:e2:a8:10:fa:c9:a8:28:a8:f4:77:
c4:1c:a0:cb:d1:63:88:82:66:9c:64:10:8c:9e:bd:51:9b:a7:
d1:c4:34:04:02:26:a4:9b:78:79:bb:1f:60:6d:03:73:bf:0b:
71:f0:65:b9:7b:77:84:c8:02:72:76:c1:a4:22:00:6c:08:a3:
4e:e0:e0:f5:49:77:9a:cf:1e:6a:d1:89:0f:39:dc:5f:4d:9c:
ee:56:82:78:8c:b4:b3:9f:34:4a:29:87:78:15:f6:6c:27:59:
ff:0f:2b:f6
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAc38MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIyMTAzODEwWhcNMjYwODE5MTAzODEwWjAYMRYw
FAYDVQQDEw02YTEwMzIxNy1iMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwjxU13AIx6H4MUfbsB8ByNeOW/h3sllV+nhwgdHev++EWvpgOdqysn+X
H3My+G0KiWCTYaC6xqJcuL1uvs3MPxrjZQjmLVViYU/CJ6H/GrRyzfplW0JieGYN
E3Upvli9CwqHlXCyrwjxFme+71/1xSHII2bh74p4yr5J8q7Lgka1O54WV8L3DGSf
bhn3Wd2TeChj//Nqh2TrtTP6VkGgbddbUcRMMHXwTzMHXke5UMrAmRMsCMmz1KVp
fKw2ponHhy5XOKkf0DPshXiB/uQhu3P3XfdGqFglvDFqhKTOvl3DnfSteC8laLm8
pfp6jCpQQWRgox35QqecoWUfjycbawIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFI1U
AA6lV4QWeZkQl6OBu7BFlDmtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NjRDNkQxNDU1Q0ExMUYxQTQ4Q0REMThDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEmtIQAwQCmtSEAwQBmtcC
AwQBmt0CAwQDmt0IAwQEmt7gMA0GCSqGSIb3DQEBCwUAA4IBAQAmPkgXzzxu1+SU
on5+xESeabT4oIsJO0fR9wLPgpIuIqwFUolzcxacyigzBA/5mrBUGJvGI6bCCjGE
2QwKnXwZDs8LiEMZhVgYh+evlkQjCWmKUA4OYqeomUAWD4iOMa/totTnvmve6fr9
GiHQ1xY7+6MP79G6j3MsWYmM/zyGyXPnlzMf5FOufix0tFgdajKbNflhbAsi1OKo
EPrJqCio9HfEHKDL0WOIgmacZBCMnr1Rm6fRxDQEAiakm3h5ux9gbQNzvwtx8GW5
e3eEyAJydsGkIgBsCKNO4OD1SXeazx5q0YkPOdxfTZzuVoJ4jLSznzRKKYd4FfZs
J1n/Dyv2
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:33 2026 by rpki-client