Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/852D104E62DF11F1B563B11BCF1D38B0.roa
File: 852D104E62DF11F1B563B11BCF1D38B0.roa (raw, json)
Hash identifier: 4PYOg8t8zUUiLrEWjfjX2XfQtDaBrauSKLog+3dxKBA=
Subject key identifier: AB:C1:33:F9:E9:E5:AC:A8:4B:B4:D6:8F:F2:B7:5B:E3:27:EA:87:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D232
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/852D104E62DF11F1B563B11BCF1D38B0.roa
Signing time: Mon 08 Jun 2026 02:12:38 +0000
ROA not before: Mon 08 Jun 2026 02:12:32 +0000
ROA not after: Tue 16 Jun 2026 02:12:32 +0000
asID: 399077
IP address blocks: 154.91.64.0/24 maxlen: 24
154.91.65.0/24 maxlen: 24
154.91.66.0/24 maxlen: 24
154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
154.91.97.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
154.91.104.0/24 maxlen: 24
154.91.105.0/24 maxlen: 24
154.91.106.0/24 maxlen: 24
154.91.107.0/24 maxlen: 24
154.91.108.0/24 maxlen: 24
154.91.109.0/24 maxlen: 24
154.91.110.0/24 maxlen: 24
154.91.111.0/24 maxlen: 24
154.91.112.0/24 maxlen: 24
154.91.113.0/24 maxlen: 24
154.91.114.0/24 maxlen: 24
154.91.115.0/24 maxlen: 24
154.91.116.0/24 maxlen: 24
154.91.117.0/24 maxlen: 24
154.91.118.0/24 maxlen: 24
154.91.119.0/24 maxlen: 24
154.91.120.0/24 maxlen: 24
154.91.121.0/24 maxlen: 24
154.91.122.0/24 maxlen: 24
154.91.123.0/24 maxlen: 24
154.91.124.0/24 maxlen: 24
154.91.125.0/24 maxlen: 24
154.91.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119346 (0x1d232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 02:12:32 2026 GMT
Not After : Jun 16 02:12:32 2026 GMT
Subject: CN=6a262516-3fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:c3:74:90:b9:98:29:d4:d3:1e:7a:24:3b:
35:06:29:27:e0:d7:0e:af:15:e6:94:de:14:cd:48:
e9:58:05:e6:9c:63:4f:e5:74:e5:6e:95:49:61:9c:
d4:ee:db:a5:78:63:b4:ba:30:38:5f:c0:4c:8a:b6:
76:a5:de:95:8b:78:75:67:aa:54:02:9c:36:68:7b:
bf:ba:b3:e1:e8:c9:65:76:04:46:ac:8f:d3:66:ae:
fa:77:f8:97:82:4d:b6:66:27:98:9c:a1:4d:de:c5:
39:f6:4c:c8:b2:ec:72:09:04:f8:89:8a:15:19:5c:
7a:c5:0c:ab:26:1e:19:f7:80:ad:89:aa:bc:38:41:
0d:b5:ba:7c:80:86:8b:25:22:d6:44:8c:f7:93:ec:
15:25:4e:95:48:d1:2a:6e:6d:3d:39:93:29:ca:bf:
5a:cf:5c:cb:14:75:ab:a0:ea:70:6f:23:51:50:a6:
dc:e7:3f:16:43:72:87:20:81:19:01:ae:d6:e3:f4:
16:7c:9e:cf:51:e3:31:7e:7f:79:a8:d7:db:e8:e1:
e2:73:20:aa:5f:ac:28:c1:9e:44:fb:41:99:75:53:
fd:2e:63:20:1a:3a:79:b8:73:9d:ba:15:49:ed:7a:
af:13:c8:00:d7:e1:08:ac:6c:9a:bd:1b:1b:ff:66:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:33:F9:E9:E5:AC:A8:4B:B4:D6:8F:F2:B7:5B:E3:27:EA:87:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/852D104E62DF11F1B563B11BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0-154.91.126.255
Signature Algorithm: sha256WithRSAEncryption
b8:48:0d:47:a5:d0:36:9a:64:00:74:8a:a6:06:84:79:8c:22:
fb:0d:c8:da:6f:aa:30:c8:b8:43:73:c0:ee:4e:b6:22:cb:79:
6b:9c:3d:35:3c:29:74:8c:7e:c4:14:0c:8e:11:fc:53:fc:d3:
a7:6c:00:c9:1e:76:cc:31:83:9d:4e:39:2b:43:5e:6f:a8:e7:
79:15:46:d8:7f:ed:51:67:00:64:c3:42:8f:b8:49:d3:f4:1d:
63:d5:1f:8e:f0:c6:ce:84:b1:2c:9a:47:f7:96:f7:60:20:a4:
07:53:f3:4b:da:4b:87:52:0c:74:6d:0c:8b:0d:ac:e3:46:fd:
01:34:69:71:06:a8:93:b4:6e:8e:c3:04:5e:49:55:44:64:e6:
f6:26:90:44:f1:e5:4f:d3:f6:c3:65:0c:d7:13:00:86:17:5e:
66:e2:31:b3:46:4b:0f:52:67:3a:66:dd:63:ce:c1:84:f4:63:
27:82:a8:ec:2b:90:0a:1d:e1:cd:e1:1b:7a:d7:dd:0f:d8:47:
e5:0b:09:10:c4:97:e0:16:db:a9:1c:f8:eb:16:cc:f1:f8:aa:
70:75:cc:13:48:8d:1f:57:9d:1b:83:3b:fa:4e:1d:f6:e2:16:
c1:af:60:97:79:cf:a4:9a:af:35:56:39:d9:b7:80:ae:61:d0:
5e:ff:c9:07
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdIyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA4MDIxMjMyWhcNMjYwNjE2MDIxMjMyWjAYMRYw
FAYDVQQDEw02YTI2MjUxNi0zZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqdDDdJC5mCnU0x56JDs1Bikn4NcOrxXmlN4UzUjpWAXmnGNP5XTlbpVJ
YZzU7tuleGO0ujA4X8BMirZ2pd6Vi3h1Z6pUApw2aHu/urPh6MlldgRGrI/TZq76
d/iXgk22ZieYnKFN3sU59kzIsuxyCQT4iYoVGVx6xQyrJh4Z94Ctiaq8OEENtbp8
gIaLJSLWRIz3k+wVJU6VSNEqbm09OZMpyr9az1zLFHWroOpwbyNRUKbc5z8WQ3KH
IIEZAa7W4/QWfJ7PUeMxfn95qNfb6OHicyCqX6wowZ5E+0GZdVP9LmMgGjp5uHOd
uhVJ7XqvE8gA1+EIrGyavRsb/2YIxQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKvB
M/np5ayoS7TWj/K3W+Mn6of1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NTJEMTA0RTYyREYxMUYxQjU2M0IxMUJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaaW0ADBACaW34wDQYJ
KoZIhvcNAQELBQADggEBALhIDUel0DaaZAB0iqYGhHmMIvsNyNpvqjDIuENzwO5O
tiLLeWucPTU8KXSMfsQUDI4R/FP806dsAMkedswxg51OOStDXm+o53kVRth/7VFn
AGTDQo+4SdP0HWPVH47wxs6EsSyaR/eW92AgpAdT80vaS4dSDHRtDIsNrONG/QE0
aXEGqJO0bo7DBF5JVURk5vYmkETx5U/T9sNlDNcTAIYXXmbiMbNGSw9SZzpm3WPO
wYT0YyeCqOwrkAod4c3hG3rX3Q/YR+ULCRDEl+AW26kc+OsWzPH4qnB1zBNIjR9X
nRuDO/pOHfbiFsGvYJd5z6SarzVWOdm3gK5h0F7/yQc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:42 2026 by rpki-client