Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF197BE377311F1AB7CB210CF1D38B0.roa
File: 6AF197BE377311F1AB7CB210CF1D38B0.roa (raw, json)
Hash identifier: 3QL5ey6dIwX+ON55GOL2qmGaQIQtu35/QFPjQ5A0pPU=
Subject key identifier: 12:2D:17:D6:94:BC:4E:03:0A:EB:C6:08:40:F7:B7:35:C3:67:2C:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C524
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF197BE377311F1AB7CB210CF1D38B0.roa
Signing time: Mon 13 Apr 2026 20:00:28 +0000
ROA not before: Mon 13 Apr 2026 20:00:22 +0000
ROA not after: Tue 19 May 2026 20:00:22 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116004 (0x1c524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 20:00:22 2026 GMT
Not After : May 19 20:00:22 2026 GMT
Subject: CN=69dd4b5c-a333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:ce:04:a0:7a:b5:59:8c:6d:7a:d6:66:34:
2b:7d:28:9a:40:dc:7b:ff:f7:b9:70:25:fd:92:f5:
0f:90:d2:0d:69:c0:50:13:08:e9:ed:ce:c6:b0:48:
ae:2a:9d:62:10:73:12:7a:ea:89:3b:22:bd:a1:dd:
62:fe:0b:0d:e4:74:03:dc:73:9d:39:76:0a:3f:f0:
63:d4:ec:0e:d2:f6:c2:8a:e9:47:f8:c9:60:5d:8d:
87:1e:60:89:7d:c1:29:2c:c5:3f:19:32:76:4a:58:
07:b1:ec:8e:b5:0c:c2:da:dd:f2:ba:4e:55:b7:d0:
de:1c:6d:e0:4f:bb:90:9a:13:e3:b3:16:86:12:f8:
39:46:e6:26:e7:ea:72:58:61:77:7c:17:a1:4e:dc:
67:6c:6b:c1:3e:71:dc:71:1e:b6:e1:d5:2c:c3:7b:
f3:2d:da:ed:4f:76:c1:66:4f:a1:a5:38:b6:8e:e1:
27:48:bc:8a:88:1a:71:65:81:8d:a6:43:aa:c5:53:
1f:4b:4e:dd:64:8e:a7:a3:42:29:c1:72:3b:2e:5b:
c4:3c:97:35:f9:a1:36:8a:19:82:d7:fe:9e:89:39:
6a:8b:ac:90:b1:17:38:7a:71:41:04:c0:4b:66:7b:
c1:27:96:16:85:42:6a:03:56:7b:3f:82:da:27:63:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2D:17:D6:94:BC:4E:03:0A:EB:C6:08:40:F7:B7:35:C3:67:2C:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF197BE377311F1AB7CB210CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ca:a6:f8:ec:60:72:b5:bc:fd:4f:96:e3:a3:12:74:49:ab:7c:
80:25:4c:8a:43:4d:d4:77:6a:d2:5a:f8:ef:92:3e:fb:38:30:
65:95:9e:d1:92:67:9e:0a:a7:44:3c:9c:8a:e9:e4:b8:1c:90:
ee:ef:4f:3b:d7:40:2a:ad:b8:2d:8c:9d:dd:5a:8f:ef:46:d1:
ff:61:d9:0e:28:64:61:18:4f:11:3d:49:e5:a4:a9:e1:48:c2:
b2:fd:8e:75:8b:b1:08:4b:bc:5b:ac:3a:b5:7b:e1:91:16:2b:
d4:26:80:7c:d4:f8:46:d5:73:d7:b9:d0:3d:18:16:6d:c8:ef:
4f:66:d3:74:33:a5:37:44:fd:0f:9d:7f:d7:d4:34:bb:b0:96:
80:ff:bf:6f:f0:4c:a3:1f:87:70:ac:b9:b7:c5:10:7a:12:00:
c5:a9:05:d1:86:6a:ef:0f:d4:e6:f1:c3:b5:96:a0:2e:81:d6:
55:bb:fa:e0:d9:70:b4:c6:7f:14:2c:cf:2b:a9:34:b9:e6:8d:
bf:04:6f:ab:72:6f:4c:ac:b5:67:ba:e0:c1:55:1f:9a:c7:4f:
8f:43:f3:18:61:a8:b5:12:d1:96:cb:3d:88:65:45:ee:f0:cc:
f0:1f:6f:2b:16:80:0f:90:5d:5a:ff:ea:a7:cc:eb:eb:87:44:
34:1e:88:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcUkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMjAwMDIyWhcNMjYwNTE5MjAwMDIyWjAYMRYw
FAYDVQQDEw02OWRkNGI1Yy1hMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApbnOBKB6tVmMbXrWZjQrfSiaQNx7//e5cCX9kvUPkNINacBQEwjp7c7G
sEiuKp1iEHMSeuqJOyK9od1i/gsN5HQD3HOdOXYKP/Bj1OwO0vbCiulH+MlgXY2H
HmCJfcEpLMU/GTJ2SlgHseyOtQzC2t3yuk5Vt9DeHG3gT7uQmhPjsxaGEvg5RuYm
5+pyWGF3fBehTtxnbGvBPnHccR624dUsw3vzLdrtT3bBZk+hpTi2juEnSLyKiBpx
ZYGNpkOqxVMfS07dZI6no0IpwXI7LlvEPJc1+aE2ihmC1/6eiTlqi6yQsRc4enFB
BMBLZnvBJ5YWhUJqA1Z7P4LaJ2NKNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBIt
F9aUvE4DCuvGCED3tzXDZyxGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QUYxOTdCRTM3NzMxMUYxQUI3Q0IyMTBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmt3AMA0GCSqGSIb3DQEB
CwUAA4IBAQDKpvjsYHK1vP1PluOjEnRJq3yAJUyKQ03Ud2rSWvjvkj77ODBllZ7R
kmeeCqdEPJyK6eS4HJDu708710AqrbgtjJ3dWo/vRtH/YdkOKGRhGE8RPUnlpKnh
SMKy/Y51i7EIS7xbrDq1e+GRFivUJoB81PhG1XPXudA9GBZtyO9PZtN0M6U3RP0P
nX/X1DS7sJaA/79v8EyjH4dwrLm3xRB6EgDFqQXRhmrvD9Tm8cO1lqAugdZVu/rg
2XC0xn8ULM8rqTS55o2/BG+rcm9MrLVnuuDBVR+ax0+PQ/MYYai1EtGWyz2IZUXu
8MzwH28rFoAPkF1a/+qnzOvrh0Q0Hohn
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:19 2026 by rpki-client