Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988E3164543D11F1882E721ECF1D38B0.roa
File: 988E3164543D11F1882E721ECF1D38B0.roa (raw, json)
Hash identifier: XB83QMfV5e5zjaw1mz3qr1IBGbV7zjwFenJxxwX/04E=
Subject key identifier: 15:F6:99:AE:20:C2:CB:DF:AA:9F:F7:01:AE:EA:EC:6B:8A:71:58:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988E3164543D11F1882E721ECF1D38B0.roa
Signing time: Wed 20 May 2026 11:18:16 +0000
ROA not before: Wed 20 May 2026 11:18:11 +0000
ROA not after: Sat 08 Aug 2026 11:18:11 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117950 (0x1ccbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 11:18:11 2026 GMT
Not After : Aug 8 11:18:11 2026 GMT
Subject: CN=6a0d9878-a42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:36:c1:93:d4:9f:04:61:1e:e5:7c:72:d9:
64:1c:70:2b:1f:52:e4:59:28:c0:eb:89:b1:70:5c:
32:18:23:54:ba:f1:fc:ee:c1:6a:ad:3b:fb:e8:36:
74:c2:10:0e:3e:9b:f0:45:66:21:6f:ac:ec:2b:40:
54:2e:66:06:f9:46:42:f8:08:25:e2:b8:d7:22:e5:
12:44:e9:df:b1:b9:6b:b7:a6:e6:ce:45:db:35:13:
69:5b:e6:68:26:1a:db:ce:6a:13:32:dd:50:4f:11:
b0:9a:86:18:1c:ae:63:60:fd:65:a0:db:ed:4f:bd:
6b:af:38:97:88:93:f0:c0:93:7b:c8:a8:3a:43:7b:
58:65:5d:8c:d7:39:42:63:e2:9f:fc:58:14:55:f2:
a0:41:0a:ee:21:4f:7a:fd:b3:90:0c:8b:d2:19:2e:
c3:2e:41:ad:39:2d:05:e1:da:7e:45:4e:73:37:54:
87:be:24:a1:b1:9d:c3:59:40:13:67:14:25:32:8a:
7e:02:34:77:b5:a3:6b:8c:95:c8:27:17:ed:95:4f:
c8:ca:1a:62:d3:ac:29:c4:5e:63:be:7c:31:7c:d2:
ff:20:55:b5:d1:3b:4f:1e:2e:c8:a7:ab:69:57:09:
c6:27:7d:23:7c:72:b0:f7:ae:fd:19:70:01:00:8e:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:99:AE:20:C2:CB:DF:AA:9F:F7:01:AE:EA:EC:6B:8A:71:58:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988E3164543D11F1882E721ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
54:1c:d6:cc:2f:36:c2:c4:33:72:50:82:07:6a:4d:e0:1f:73:
7d:aa:2c:23:a9:61:47:56:c7:5b:a0:9d:94:16:6c:11:05:6c:
59:35:38:66:24:ca:c1:04:21:2a:6c:bd:74:8b:c5:2b:a0:ba:
de:16:4e:24:06:e7:55:08:a5:98:34:c6:ff:9f:01:69:bc:23:
9f:de:8d:ad:93:9c:ad:d3:57:a7:1f:c5:8f:ff:94:10:6f:cf:
82:d5:4f:94:64:dc:6b:cb:36:c8:1d:9c:71:6d:32:4f:a1:ce:
42:da:cc:f5:9f:80:ed:1e:02:7f:de:95:e9:14:3f:10:9f:fc:
99:b7:0f:58:43:7b:a7:9d:64:c7:ad:22:3e:a3:83:f4:1e:54:
d9:cb:84:25:a5:43:71:93:db:ea:6e:68:62:d7:3a:ce:f0:db:
89:90:b3:9b:78:a4:e6:74:b0:7f:99:17:ea:a8:07:55:fa:d0:
93:87:48:ff:8e:2d:d2:75:4e:93:48:29:5d:21:f4:61:77:3b:
84:ba:fd:fb:4b:8e:09:23:6a:38:ee:87:7c:59:68:b6:b3:91:
71:38:3f:61:85:20:8a:b2:8f:4b:fa:6b:a5:78:7e:a9:e7:20:
41:f2:82:bb:50:d6:48:79:2b:4f:94:f5:d2:24:3a:60:29:b1:
d2:e2:5b:b0
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAcy+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIwMTExODExWhcNMjYwODA4MTExODExWjAYMRYw
FAYDVQQDEw02YTBkOTg3OC1hNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1zc2wZPUnwRhHuV8ctlkHHArH1LkWSjA64mxcFwyGCNUuvH87sFqrTv7
6DZ0whAOPpvwRWYhb6zsK0BULmYG+UZC+Agl4rjXIuUSROnfsblrt6bmzkXbNRNp
W+ZoJhrbzmoTMt1QTxGwmoYYHK5jYP1loNvtT71rrziXiJPwwJN7yKg6Q3tYZV2M
1zlCY+Kf/FgUVfKgQQruIU96/bOQDIvSGS7DLkGtOS0F4dp+RU5zN1SHviShsZ3D
WUATZxQlMop+AjR3taNrjJXIJxftlU/Iyhpi06wpxF5jvnwxfNL/IFW10TtPHi7I
p6tpVwnGJ30jfHKw9679GXABAI7RAwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFBX2
ma4gwsvfqp/3Aa7q7GuKcVi0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85ODhFMzE2NDU0M0QxMUYxODgyRTcyMUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmt+oAwQDmt+wAwQCmt+8
MA0GCSqGSIb3DQEBCwUAA4IBAQBUHNbMLzbCxDNyUIIHak3gH3N9qiwjqWFHVsdb
oJ2UFmwRBWxZNThmJMrBBCEqbL10i8UroLreFk4kBudVCKWYNMb/nwFpvCOf3o2t
k5yt01enH8WP/5QQb8+C1U+UZNxryzbIHZxxbTJPoc5C2sz1n4DtHgJ/3pXpFD8Q
n/yZtw9YQ3unnWTHrSI+o4P0HlTZy4QlpUNxk9vqbmhi1zrO8NuJkLObeKTmdLB/
mRfqqAdV+tCTh0j/ji3SdU6TSCldIfRhdzuEuv37S44JI2o47od8WWi2s5FxOD9h
hSCKso9L+muleH6p5yBB8oK7UNZIeStPlPXSJDpgKbHS4luw
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:53 2026 by rpki-client