Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BEFB1A58FB11F191CFF406CF1D38B0.roa
File: 66BEFB1A58FB11F191CFF406CF1D38B0.roa (raw, json)
Hash identifier: cldqtMEUCoXdVbxWecMgpi0JbcLheiDKfl9HUjOhGcE=
Subject key identifier: 2F:64:32:3C:41:C9:6C:84:78:0C:5C:95:31:D8:53:80:B3:B0:6C:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BEFB1A58FB11F191CFF406CF1D38B0.roa
Signing time: Tue 26 May 2026 12:07:02 +0000
ROA not before: Tue 26 May 2026 12:06:56 +0000
ROA not after: Sat 04 Jul 2026 12:06:56 +0000
asID: 198652
IP address blocks: 154.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118721 (0x1cfc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 12:06:56 2026 GMT
Not After : Jul 4 12:06:56 2026 GMT
Subject: CN=6a158ce6-01eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:18:1b:e2:97:34:d7:df:59:ba:0b:d9:ae:
8c:08:bb:a8:39:a3:9a:48:b0:3c:4f:79:17:aa:f6:
f2:b0:25:cf:36:dd:f0:7d:a4:c7:62:8d:fd:2a:44:
25:ea:2e:b5:f1:f1:59:29:51:bb:9e:77:49:dd:16:
50:bb:aa:97:d6:e3:53:a9:df:9f:14:20:f9:66:83:
91:96:ad:df:11:3e:26:86:ad:85:39:d0:38:9c:36:
e5:0a:ae:f6:8f:b5:c4:c6:8d:64:cb:10:05:a5:9a:
a6:5b:a5:41:35:16:8b:82:65:6c:e5:46:4a:25:b7:
7b:95:2d:25:e6:7c:b0:60:f1:cf:c3:fc:4b:a6:f4:
4f:3e:e6:37:a4:93:4d:77:57:3f:30:70:9a:6e:43:
c0:4c:1a:61:9b:90:5c:73:ec:c9:db:0d:86:18:ee:
8c:50:dd:6e:65:74:47:fc:e6:08:f6:3d:c8:bb:45:
e1:75:af:fa:4b:d4:95:46:c6:d7:84:17:93:da:70:
f7:ae:81:5b:c1:2b:f1:fc:6f:02:ea:12:f0:c9:76:
a8:fe:74:1a:90:97:dc:eb:ad:a2:52:1d:86:6d:0a:
f6:4c:60:55:f0:8f:76:a8:e8:0c:bd:6f:b9:88:33:
be:a4:30:52:e4:54:97:29:28:3b:51:84:21:55:84:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:32:3C:41:C9:6C:84:78:0C:5C:95:31:D8:53:80:B3:B0:6C:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BEFB1A58FB11F191CFF406CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:02:2f:1d:ce:77:fa:ec:cc:ba:b6:0f:16:2f:65:74:57:18:
61:fc:8c:b5:a9:1a:16:03:8b:e7:cd:5d:c3:f1:fd:7f:35:4b:
de:5a:7d:f0:e9:ec:01:27:d0:d3:19:d1:f6:d3:e4:8a:df:5d:
dc:9e:cd:78:cc:4b:eb:74:09:9f:2e:5a:e6:e2:a5:d4:ef:d8:
7c:17:af:f6:a2:ee:fb:a8:1d:2a:4c:e1:36:61:1f:95:a9:d7:
66:21:ea:65:a1:29:d4:81:b3:14:bc:cc:8c:53:bf:39:ed:03:
d3:71:33:93:7a:b5:dc:97:82:96:ab:b1:f3:de:92:c0:9a:4c:
9a:66:fd:6c:2a:76:f6:ae:31:0e:f9:1b:60:25:5a:09:26:3e:
f1:40:6d:40:a2:03:09:26:4a:59:7e:c1:be:94:c0:02:2a:d0:
8f:96:88:56:7b:d3:c5:fc:8a:99:9d:59:47:03:92:32:41:06:
71:ed:97:f0:a7:03:15:a9:99:f7:f2:11:c4:32:d4:1b:70:78:
92:9e:f8:0c:a5:ec:16:0c:eb:dd:eb:a8:bf:e4:7e:b6:14:ef:
1c:2b:58:12:05:10:b4:6d:8e:5e:dd:23:cf:f4:3e:95:26:f2:
60:c8:3f:ae:66:2c:9b:21:63:f2:9e:8d:78:fc:69:79:bc:09:
2a:fe:c8:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc/BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI2MTIwNjU2WhcNMjYwNzA0MTIwNjU2WjAYMRYw
FAYDVQQDEw02YTE1OGNlNi0wMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA04AYG+KXNNffWboL2a6MCLuoOaOaSLA8T3kXqvbysCXPNt3wfaTHYo39
KkQl6i618fFZKVG7nndJ3RZQu6qX1uNTqd+fFCD5ZoORlq3fET4mhq2FOdA4nDbl
Cq72j7XExo1kyxAFpZqmW6VBNRaLgmVs5UZKJbd7lS0l5nywYPHPw/xLpvRPPuY3
pJNNd1c/MHCabkPATBphm5Bcc+zJ2w2GGO6MUN1uZXRH/OYI9j3Iu0Xhda/6S9SV
RsbXhBeT2nD3roFbwSvx/G8C6hLwyXao/nQakJfc662iUh2GbQr2TGBV8I92qOgM
vW+5iDO+pDBS5FSXKSg7UYQhVYQKvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC9k
MjxByWyEeAxclTHYU4CzsGyVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NkJFRkIxQTU4RkIxMUYxOTFDRkY0MDZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYMMA0GCSqGSIb3DQEB
CwUAA4IBAQAPAi8dznf67My6tg8WL2V0Vxhh/Iy1qRoWA4vnzV3D8f1/NUveWn3w
6ewBJ9DTGdH20+SK313cns14zEvrdAmfLlrm4qXU79h8F6/2ou77qB0qTOE2YR+V
qddmIeploSnUgbMUvMyMU7857QPTcTOTerXcl4KWq7Hz3pLAmkyaZv1sKnb2rjEO
+RtgJVoJJj7xQG1AogMJJkpZfsG+lMACKtCPlohWe9PF/IqZnVlHA5IyQQZx7Zfw
pwMVqZn38hHEMtQbcHiSnvgMpewWDOvd66i/5H62FO8cK1gSBRC0bY5e3SPP9D6V
JvJgyD+uZiybIWPyno14/Gl5vAkq/sgt
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:49 2026 by rpki-client