Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6191D94A2A8A11F1A37210D8DAE4EC9C.roa
File: 6191D94A2A8A11F1A37210D8DAE4EC9C.roa (raw, json)
Hash identifier: pl2QJZ4Oh2j45QnfAVBKDNBcJ0gny4tnZSrlEAhh+ig=
Subject key identifier: 95:1B:68:E0:CE:46:6F:FF:FC:D3:C5:BF:A3:68:67:7B:BF:3A:E5:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C152
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6191D94A2A8A11F1A37210D8DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 09:42:06 +0000
ROA not before: Sat 28 Mar 2026 09:42:01 +0000
ROA not after: Sat 02 May 2026 09:42:01 +0000
asID: 214238
IP address blocks: 154.81.193.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115026 (0x1c152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 09:42:01 2026 GMT
Not After : May 2 09:42:01 2026 GMT
Subject: CN=69c7a26e-36cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:ef:c2:17:5d:73:0d:49:e1:e3:3a:29:2c:
95:8f:aa:3a:74:f5:f2:c5:bf:85:d2:db:68:44:79:
15:9f:ad:85:98:22:3f:a2:aa:aa:a4:22:f3:2c:82:
9a:29:ca:d5:e3:18:37:ce:52:8e:fd:1f:d2:bc:2b:
ad:b1:75:78:c6:db:9a:ae:76:f1:55:98:aa:0b:43:
c6:4c:45:52:5b:37:be:01:ea:f4:63:6c:b6:04:ce:
f3:98:61:bb:7c:ab:be:9c:18:82:bc:5a:94:51:fd:
bb:a7:72:82:06:8a:b3:2e:13:94:40:04:4d:9a:b9:
0b:35:d5:56:f9:a7:5a:8c:b8:a5:db:f4:6a:21:28:
60:5c:89:4e:4a:0f:52:e8:9f:fc:fc:97:56:67:52:
1a:b3:ac:b7:40:62:57:81:f6:ed:c6:a9:b6:b7:f9:
2d:f9:e9:9e:48:15:1c:67:e8:ec:84:5b:23:1a:51:
03:39:28:b2:37:59:40:c5:ee:84:2c:11:ee:5f:57:
83:ca:6d:c4:ed:55:de:9b:bf:18:d8:c8:07:5f:49:
27:86:1f:2a:f1:9d:7d:be:ac:aa:75:7e:bb:06:31:
94:09:59:de:1a:b2:ca:0f:ce:30:48:b4:26:78:f5:
8a:0d:25:72:c7:5c:92:7f:45:e3:ec:fc:bc:a3:c7:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:68:E0:CE:46:6F:FF:FC:D3:C5:BF:A3:68:67:7B:BF:3A:E5:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6191D94A2A8A11F1A37210D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.193.0-154.81.194.255
154.81.196.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c8:9b:80:11:70:6e:ed:7f:3f:35:f3:e5:a0:e1:fd:1d:13:
b4:73:59:c2:9d:a2:2c:9d:66:e0:d9:fa:5b:b1:2c:fb:61:5b:
7a:a9:68:8c:90:39:d5:c0:cd:8b:61:06:71:11:96:e6:12:9c:
ff:43:cd:9c:b3:3f:5e:f3:37:fe:b5:01:60:bb:f5:60:ef:c8:
b1:90:43:0c:56:e4:ab:e0:54:2c:dd:3f:51:d0:bb:b3:89:a4:
ce:fa:38:3d:18:14:5f:67:aa:29:c6:91:6b:72:42:4e:82:77:
7a:97:c4:ae:cc:f4:31:92:aa:f1:f2:04:5c:54:ef:95:2a:61:
5f:2c:2e:ef:9a:03:2e:51:6f:b2:4d:f8:e3:cc:e7:71:5c:a3:
5f:43:bb:f3:4b:ed:65:02:06:bb:93:9e:c5:75:0a:34:37:bc:
b4:09:08:16:b2:43:d9:ba:f4:32:4b:57:86:5f:e9:fa:02:d1:
8a:86:31:fc:35:26:1f:87:65:5d:64:3d:88:1a:80:20:e3:9b:
1f:1a:a7:bf:08:df:6d:82:1b:18:49:e5:0e:38:b6:72:23:cd:
26:5b:59:24:97:8c:98:30:d4:cf:ed:e9:52:fd:c7:ab:4c:da:
d3:ed:dc:64:0e:83:a2:85:0a:e1:e4:67:e9:2a:c9:5e:3b:5d:
d8:cb:c1:83
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAcFSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI4MDk0MjAxWhcNMjYwNTAyMDk0MjAxWjAYMRYw
FAYDVQQDEw02OWM3YTI2ZS0zNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArr3vwhddcw1J4eM6KSyVj6o6dPXyxb+F0ttoRHkVn62FmCI/oqqqpCLz
LIKaKcrV4xg3zlKO/R/SvCutsXV4xtuarnbxVZiqC0PGTEVSWze+Aer0Y2y2BM7z
mGG7fKu+nBiCvFqUUf27p3KCBoqzLhOUQARNmrkLNdVW+adajLil2/RqIShgXIlO
Sg9S6J/8/JdWZ1Ias6y3QGJXgfbtxqm2t/kt+emeSBUcZ+jshFsjGlEDOSiyN1lA
xe6ELBHuX1eDym3E7VXem78Y2MgHX0knhh8q8Z19vqyqdX67BjGUCVneGrLKD84w
SLQmePWKDSVyx1ySf0Xj7Py8o8d5pQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFJUb
aODORm///NPFv6NoZ3u/OuWtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTkxRDk0QTJBOEExMUYxQTM3MjEwRDhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaUcEDBACaUcIDBAKa
UcQwDQYJKoZIhvcNAQELBQADggEBAHPIm4ARcG7tfz818+Wg4f0dE7RzWcKdoiyd
ZuDZ+luxLPthW3qpaIyQOdXAzYthBnERluYSnP9DzZyzP17zN/61AWC79WDvyLGQ
QwxW5KvgVCzdP1HQu7OJpM76OD0YFF9nqinGkWtyQk6Cd3qXxK7M9DGSqvHyBFxU
75UqYV8sLu+aAy5Rb7JN+OPM53Fco19Du/NL7WUCBruTnsV1CjQ3vLQJCBayQ9m6
9DJLV4Zf6foC0YqGMfw1Jh+HZV1kPYgagCDjmx8ap78I322CGxhJ5Q44tnIjzSZb
WSSXjJgw1M/t6VL9x6tM2tPt3GQOg6KFCuHkZ+kqyV47XdjLwYM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:24 2026 by rpki-client