Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DF34765AFC11F1BDCB25A5CE1D38B0.roa
File: 67DF34765AFC11F1BDCB25A5CE1D38B0.roa (raw, json)
Hash identifier: UGhpXQdU3y/zwGKeQWTiGlVBmkf+TRDfFcMdr0DEHt8=
Subject key identifier: BD:62:65:5D:7C:FB:13:05:F9:71:43:83:A8:63:66:3E:D3:07:0A:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D02D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DF34765AFC11F1BDCB25A5CE1D38B0.roa
Signing time: Fri 29 May 2026 01:19:15 +0000
ROA not before: Fri 29 May 2026 01:19:10 +0000
ROA not after: Sun 28 Jun 2026 01:19:10 +0000
asID: 54801
IP address blocks: 154.213.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118829 (0x1d02d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 01:19:10 2026 GMT
Not After : Jun 28 01:19:10 2026 GMT
Subject: CN=6a18e993-d2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:9f:d0:52:bb:30:c1:62:86:7a:83:03:92:
40:e7:3c:18:93:1b:86:24:39:98:92:be:19:d2:6e:
bd:d3:20:96:9b:88:d6:c9:20:11:21:ea:c7:6c:e9:
ec:97:d4:9f:bd:61:34:24:06:de:fd:b0:cd:cc:68:
c6:76:28:f4:15:21:eb:ff:aa:bd:fc:cd:a6:28:39:
1c:bc:7f:f2:2f:65:4e:31:80:df:29:06:7d:c6:a3:
0b:1c:75:38:9d:b9:6c:6f:cc:62:51:33:ca:c2:5c:
7e:79:01:f2:ab:7c:56:11:3f:08:71:66:bf:49:74:
3d:e7:1b:e0:c8:cb:6f:23:1f:19:f7:4e:ea:7e:5c:
01:b9:e1:e0:81:19:c4:ab:00:e7:8a:2d:3f:eb:5f:
a6:82:3d:db:1e:fe:72:28:83:02:c9:7f:78:2e:57:
16:da:14:51:91:cc:ce:a5:06:ef:05:6b:71:ce:7b:
9b:8c:43:08:40:5f:46:95:ae:3f:2b:0a:3c:e7:f3:
0d:8d:db:49:50:90:81:ee:06:fb:d4:51:ce:c4:25:
9e:03:04:27:77:8a:8a:b5:41:2d:66:21:d9:82:b5:
7b:30:3e:17:14:76:84:23:a2:cf:a1:26:9d:6b:1b:
c7:fa:ba:8e:32:61:b5:dd:3a:b0:34:c3:ac:3b:96:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:65:5D:7C:FB:13:05:F9:71:43:83:A8:63:66:3E:D3:07:0A:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DF34765AFC11F1BDCB25A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/22
Signature Algorithm: sha256WithRSAEncryption
49:1d:96:0b:de:24:53:b5:0a:8a:07:17:3f:a1:8c:87:af:17:
f9:7e:10:74:20:c5:c7:cc:42:ba:f3:55:a8:44:62:bd:ce:33:
91:7e:f8:6d:d7:05:7d:c7:9a:73:31:ce:3e:7c:b4:5d:f7:27:
ad:ef:23:ac:3f:f5:bf:27:bc:4a:23:55:a3:a4:c2:04:33:d4:
8f:47:30:cd:05:41:1e:d6:0c:9c:41:d3:fe:5f:f7:90:c6:73:
06:4a:a1:21:d2:24:65:dd:16:05:07:e2:e6:e3:d3:af:db:f3:
fc:05:0a:f0:1c:fe:e0:3c:87:33:3b:27:7b:e7:a3:b1:9d:c4:
e4:94:e1:7c:9b:89:ff:87:08:83:b5:60:b8:bd:56:12:78:4e:
a9:c3:e4:14:c4:f4:c3:2c:0d:a2:24:ed:7f:ed:24:c0:bb:4f:
f5:c7:cb:3e:1a:51:43:40:e5:96:70:21:31:41:11:24:86:f1:
39:11:91:ec:bb:c3:5d:3e:43:49:a2:8f:c7:79:0d:d7:27:d2:
7f:aa:c3:c7:99:c7:f4:2f:72:2d:3a:a5:e3:e1:f3:63:c6:96:
58:66:8b:b9:38:25:b1:2e:90:41:a4:5d:1c:c3:6e:31:7d:4a:
ea:d2:c9:14:16:51:2c:b5:1b:fb:3e:23:7e:7e:9e:4f:55:c0:
ed:e8:60:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdAtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDExOTEwWhcNMjYwNjI4MDExOTEwWjAYMRYw
FAYDVQQDEw02YTE4ZTk5My1kMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvVef0FK7MMFihnqDA5JA5zwYkxuGJDmYkr4Z0m690yCWm4jWySARIerH
bOnsl9SfvWE0JAbe/bDNzGjGdij0FSHr/6q9/M2mKDkcvH/yL2VOMYDfKQZ9xqML
HHU4nblsb8xiUTPKwlx+eQHyq3xWET8IcWa/SXQ95xvgyMtvIx8Z907qflwBueHg
gRnEqwDnii0/61+mgj3bHv5yKIMCyX94LlcW2hRRkczOpQbvBWtxznubjEMIQF9G
la4/Kwo85/MNjdtJUJCB7gb71FHOxCWeAwQnd4qKtUEtZiHZgrV7MD4XFHaEI6LP
oSadaxvH+rqOMmG13TqwNMOsO5aZnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL1i
ZV18+xMF+XFDg6hjZj7TBwqxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82N0RGMzQ3NjVBRkMxMUYxQkRDQjI1QTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtWwMA0GCSqGSIb3DQEB
CwUAA4IBAQBJHZYL3iRTtQqKBxc/oYyHrxf5fhB0IMXHzEK681WoRGK9zjORfvht
1wV9x5pzMc4+fLRd9yet7yOsP/W/J7xKI1WjpMIEM9SPRzDNBUEe1gycQdP+X/eQ
xnMGSqEh0iRl3RYFB+Lm49Ov2/P8BQrwHP7gPIczOyd756OxncTklOF8m4n/hwiD
tWC4vVYSeE6pw+QUxPTDLA2iJO1/7STAu0/1x8s+GlFDQOWWcCExQREkhvE5EZHs
u8NdPkNJoo/HeQ3XJ9J/qsPHmcf0L3ItOqXj4fNjxpZYZou5OCWxLpBBpF0cw24x
fUrq0skUFlEstRv7PiN+fp5PVcDt6GBd
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:28 2026 by rpki-client