Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B39539C34AD11F1A197D6A7CE1D38B0.roa
File: 6B39539C34AD11F1A197D6A7CE1D38B0.roa (raw, json)
Hash identifier: +fZbhOaZFvpG21IQEoxSqBP846ujPEihLd11rMbJ9Ok=
Subject key identifier: E8:08:2A:80:5C:C3:FE:29:F0:24:05:ED:96:26:50:0E:C2:93:33:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C455
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B39539C34AD11F1A197D6A7CE1D38B0.roa
Signing time: Fri 10 Apr 2026 07:18:06 +0000
ROA not before: Fri 10 Apr 2026 07:18:01 +0000
ROA not after: Sun 10 May 2026 07:18:01 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115797 (0x1c455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 07:18:01 2026 GMT
Not After : May 10 07:18:01 2026 GMT
Subject: CN=69d8a42e-4e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:6f:fc:b1:92:b6:39:8c:e2:65:b5:9f:a1:
99:84:2d:c5:84:c6:09:66:38:49:85:a7:dc:2c:be:
ce:64:85:b1:0d:a7:cd:46:0d:41:45:91:a9:bd:be:
0d:3a:7f:4e:68:a2:96:b7:a7:f3:91:0a:1a:d4:65:
f7:83:3f:aa:5d:64:4b:4a:04:91:6d:ff:28:64:c7:
f4:fb:bd:be:5f:32:e3:34:06:4a:ad:90:94:2b:4a:
54:d0:03:16:df:12:44:d5:58:4d:7e:2b:3e:3d:c1:
14:a0:cd:2b:28:88:cd:17:0e:27:8a:ce:01:c0:01:
f4:e5:4a:d4:1d:2d:4e:e3:c3:22:cf:06:9f:e5:4c:
4f:d7:4d:12:9a:7d:35:d4:20:72:0f:0d:69:a3:f8:
1b:af:ff:68:d7:aa:78:64:23:d5:d9:2e:88:f0:22:
8f:14:60:6d:1c:7a:c2:c1:72:0b:e8:71:7e:52:0d:
3b:90:0d:09:d4:de:6f:e9:0c:e4:d7:24:67:64:53:
2a:7b:5d:bf:67:93:82:5c:fd:64:8b:13:93:bd:98:
53:bf:2b:e1:55:ba:67:7a:c5:b3:4c:d0:e1:13:06:
4b:ff:6f:4c:33:a0:ea:57:c9:a3:6d:eb:60:c2:96:
b0:c0:90:17:a0:80:15:36:c2:6e:5d:4f:5c:44:49:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:2A:80:5C:C3:FE:29:F0:24:05:ED:96:26:50:0E:C2:93:33:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B39539C34AD11F1A197D6A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:84:26:ea:d6:03:a2:21:d1:c6:e1:a6:d6:a4:6f:ff:f6:9d:
8b:1e:03:e7:80:e1:55:41:ca:5d:0b:ec:07:f2:f7:dd:e9:df:
b7:57:b8:54:0e:a0:4e:df:87:98:db:ac:b3:20:29:23:ff:13:
a8:be:bd:bd:b9:e5:82:21:26:79:7f:25:f6:3d:e6:98:a5:eb:
b3:50:5e:bf:d4:e3:dc:14:af:7f:0f:78:28:ba:f6:d2:3b:d3:
ad:d0:7a:42:c8:f3:6a:b2:a5:a2:a8:bb:62:2a:ba:6a:32:83:
06:22:7d:05:fc:ac:c3:c4:78:c2:ac:3a:94:72:01:e3:d2:b6:
0a:b8:a4:4e:89:a9:32:f7:34:43:f2:0d:9c:b9:32:c2:6d:48:
a1:ac:43:d4:d5:a0:a4:f6:3d:22:88:4e:92:0b:26:5b:4c:87:
ae:77:f3:19:17:e2:e7:12:90:e4:81:65:d2:0d:06:b9:a8:02:
25:ad:2b:c1:fd:ed:83:ba:b1:61:df:6f:a5:23:24:ac:f5:a2:
08:c3:ab:1f:7c:6d:ae:d9:bd:dd:16:f7:62:79:c8:b5:3f:8e:
1b:1d:3e:cc:c8:b2:59:ee:34:6d:7d:ca:f5:ad:39:9e:a3:f7:
ae:91:0d:a3:08:5e:71:31:9c:94:6d:9d:34:91:45:98:37:ef:
00:f4:f5:8a
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAcRVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEwMDcxODAxWhcNMjYwNTEwMDcxODAxWjAYMRYw
FAYDVQQDEw02OWQ4YTQyZS00ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuVxv/LGStjmM4mW1n6GZhC3FhMYJZjhJhafcLL7OZIWxDafNRg1BRZGp
vb4NOn9OaKKWt6fzkQoa1GX3gz+qXWRLSgSRbf8oZMf0+72+XzLjNAZKrZCUK0pU
0AMW3xJE1VhNfis+PcEUoM0rKIjNFw4nis4BwAH05UrUHS1O48Mizwaf5UxP100S
mn011CByDw1po/gbr/9o16p4ZCPV2S6I8CKPFGBtHHrCwXIL6HF+Ug07kA0J1N5v
6Qzk1yRnZFMqe12/Z5OCXP1kixOTvZhTvyvhVbpnesWzTNDhEwZL/29MM6DqV8mj
betgwpawwJAXoIAVNsJuXU9cREmHCwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFOgI
KoBcw/4p8CQF7ZYmUA7CkzPqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjM5NTM5QzM0QUQxMUYxQTE5N0Q2QTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmswAMAwDBAKa0AwDBAWa
0AADBACa1IADBACa1wADBACa2gADBACa3QAwDQYJKoZIhvcNAQELBQADggEBAMGE
JurWA6Ih0cbhptakb//2nYseA+eA4VVByl0L7Afy993p37dXuFQOoE7fh5jbrLMg
KSP/E6i+vb255YIhJnl/JfY95pil67NQXr/U49wUr38PeCi69tI7063QekLI82qy
paKou2IqumoygwYifQX8rMPEeMKsOpRyAePStgq4pE6JqTL3NEPyDZy5MsJtSKGs
Q9TVoKT2PSKITpILJltMh6538xkX4ucSkOSBZdINBrmoAiWtK8H97YO6sWHfb6Uj
JKz1ogjDqx98ba7Zvd0W92J5yLU/jhsdPszIslnuNG19yvWtOZ6j966RDaMIXnEx
nJRtnTSRRZg37wD09Yo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:07:05 2026 by rpki-client