Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6F0768370511F19F5C8BFECE1D38B0.roa
File: 6A6F0768370511F19F5C8BFECE1D38B0.roa (raw, json)
Hash identifier: XF2QUguFfCrN8TGMmJH2FTYpVOLRKB6+b2OKnBNIi9Y=
Subject key identifier: 47:53:85:71:AB:95:FD:DB:91:36:CC:4D:70:D0:A7:A3:0F:E2:88:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6F0768370511F19F5C8BFECE1D38B0.roa
Signing time: Mon 13 Apr 2026 06:53:03 +0000
ROA not before: Mon 13 Apr 2026 06:52:57 +0000
ROA not after: Sat 16 May 2026 06:52:57 +0000
asID: 17497
IP address blocks: 154.197.16.0/21 maxlen: 24
154.197.16.0/24 maxlen: 24
154.197.17.0/24 maxlen: 24
154.197.18.0/24 maxlen: 24
154.197.19.0/24 maxlen: 24
154.197.20.0/24 maxlen: 24
154.197.21.0/24 maxlen: 24
154.197.22.0/24 maxlen: 24
154.197.23.0/24 maxlen: 24
154.217.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115935 (0x1c4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 06:52:57 2026 GMT
Not After : May 16 06:52:57 2026 GMT
Subject: CN=69dc92cf-de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:77:2d:91:e7:f3:ae:56:7e:08:d6:42:1c:
09:0a:2b:f5:ec:5e:09:f0:a8:1a:18:ed:87:1c:4f:
88:45:60:d4:5c:25:1f:dc:59:13:e1:f4:76:24:e8:
82:ae:d3:e3:70:85:9d:c1:ca:11:23:c8:47:14:9c:
3e:b3:3d:24:47:ce:e6:0b:aa:a3:78:52:f5:65:83:
9e:15:b4:a9:a6:d5:2c:22:79:72:b6:6f:28:31:cf:
bd:be:4c:60:f6:dc:3c:c5:d5:b0:f6:eb:11:54:14:
16:3c:5a:18:76:ce:fc:9d:e2:c6:c0:12:d7:32:44:
56:50:fb:b0:31:af:9c:6e:6b:c8:ba:74:e8:b0:95:
26:58:d8:2f:e7:11:39:d1:e1:bd:09:9f:00:43:28:
8f:a5:66:89:b0:de:d8:30:ea:6c:fd:40:72:15:af:
97:34:ea:8a:9b:b5:5a:fb:20:b1:26:e7:98:c4:28:
ee:63:72:95:74:67:57:03:c5:0d:67:a1:7a:30:5e:
9c:7f:12:7d:28:16:82:49:7e:95:86:38:f9:1d:45:
5e:c8:b0:2b:5e:8e:7d:a6:25:ca:60:38:d2:9e:37:
45:5b:d9:77:ba:a3:3e:e5:89:72:e8:ff:01:ad:c9:
cf:92:ab:48:69:e7:47:27:af:b1:24:5b:62:6f:19:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:85:71:AB:95:FD:DB:91:36:CC:4D:70:D0:A7:A3:0F:E2:88:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6F0768370511F19F5C8BFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.16.0/21
154.217.192.0/20
Signature Algorithm: sha256WithRSAEncryption
15:ef:6f:b5:13:4d:93:50:f9:25:4f:ee:aa:91:47:6a:74:07:
4d:0a:c2:d2:e1:c7:aa:d7:84:5b:9a:0f:0a:41:85:f9:c1:36:
0a:f3:fb:b2:3c:47:97:23:fa:c4:c4:05:82:e0:8f:a0:ea:0a:
bc:2c:a3:8a:c0:5a:b9:4e:b6:d6:0c:1d:f6:21:ad:81:44:eb:
3e:b6:ad:88:59:82:1e:c0:85:87:7d:58:6f:3b:c1:49:da:5c:
90:0b:36:64:c1:9f:87:b9:ba:96:bc:e2:87:c1:e9:6d:9d:42:
3e:a4:77:33:ec:bb:f6:58:d1:c6:8d:c1:59:a8:5e:85:67:1f:
92:f9:fb:5e:11:6f:67:3a:bf:48:cb:7f:18:67:55:4b:c1:59:
8f:45:75:b4:a0:d4:e5:d1:fe:15:55:10:72:9b:4a:7c:3c:4e:
7c:7d:5e:1b:ad:37:12:bc:b5:c5:85:21:b0:5e:15:c3:a4:af:
56:dc:1e:f8:21:ec:89:2c:4c:f9:61:2b:a5:ae:7d:78:d4:95:
db:2f:d8:2f:8d:ae:9b:cc:7a:86:34:d4:2f:4d:34:75:56:a7:
3e:b5:13:4a:90:0a:3f:06:34:b2:01:41:31:50:a9:f1:e1:89:
15:9e:99:fb:45:f6:a5:51:75:0c:c7:f8:a7:3d:08:e8:e0:7e:
c2:21:a5:6f
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcTfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMDY1MjU3WhcNMjYwNTE2MDY1MjU3WjAYMRYw
FAYDVQQDEw02OWRjOTJjZi1kZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoqN3LZHn865WfgjWQhwJCiv17F4J8KgaGO2HHE+IRWDUXCUf3FkT4fR2
JOiCrtPjcIWdwcoRI8hHFJw+sz0kR87mC6qjeFL1ZYOeFbSpptUsInlytm8oMc+9
vkxg9tw8xdWw9usRVBQWPFoYds78neLGwBLXMkRWUPuwMa+cbmvIunTosJUmWNgv
5xE50eG9CZ8AQyiPpWaJsN7YMOps/UByFa+XNOqKm7Va+yCxJueYxCjuY3KVdGdX
A8UNZ6F6MF6cfxJ9KBaCSX6Vhjj5HUVeyLArXo59piXKYDjSnjdFW9l3uqM+5Yly
6P8BrcnPkqtIaedHJ6+xJFtibxk+wwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEdT
hXGrlf3bkTbMTXDQp6MP4ohgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QTZGMDc2ODM3MDUxMUYxOUY1QzhCRkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmsUQAwQEmtnAMA0GCSqG
SIb3DQEBCwUAA4IBAQAV72+1E02TUPklT+6qkUdqdAdNCsLS4ceq14Rbmg8KQYX5
wTYK8/uyPEeXI/rExAWC4I+g6gq8LKOKwFq5TrbWDB32Ia2BROs+tq2IWYIewIWH
fVhvO8FJ2lyQCzZkwZ+HubqWvOKHweltnUI+pHcz7Lv2WNHGjcFZqF6FZx+S+fte
EW9nOr9Iy38YZ1VLwVmPRXW0oNTl0f4VVRBym0p8PE58fV4brTcSvLXFhSGwXhXD
pK9W3B74IeyJLEz5YSulrn141JXbL9gvja6bzHqGNNQvTTR1Vqc+tRNKkAo/BjSy
AUExUKnx4YkVnpn7RfalUXUMx/inPQjo4H7CIaVv
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:24:35 2026 by rpki-client