Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AFE516C58F811F1BD95AFF6CE1D38B0.roa
File: 9AFE516C58F811F1BD95AFF6CE1D38B0.roa (raw, json)
Hash identifier: 4m/4RS+5kMn2UjkaJvxAbFYKNqzFwHiBXtWo3cRAMrk=
Subject key identifier: DE:C1:AB:68:80:28:D8:A6:B3:BC:51:E8:B4:83:EC:F3:57:0B:97:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AFE516C58F811F1BD95AFF6CE1D38B0.roa
Signing time: Tue 26 May 2026 11:47:00 +0000
ROA not before: Tue 26 May 2026 11:46:54 +0000
ROA not after: Fri 03 Jul 2026 11:46:54 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118715 (0x1cfbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 11:46:54 2026 GMT
Not After : Jul 3 11:46:54 2026 GMT
Subject: CN=6a158834-0d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:11:00:b6:f6:3c:85:a3:de:8e:d6:9e:9f:
e3:90:2e:61:6c:8d:37:5c:71:15:b2:e6:2c:10:4d:
a5:2f:c1:76:cb:ba:a4:9e:4e:65:93:3e:9b:5d:9e:
02:72:b9:8c:d4:be:ee:b4:78:03:48:32:13:c5:8a:
9d:92:d9:ce:b7:98:ef:77:da:e0:2f:fe:7b:79:07:
cc:6a:87:83:e1:36:75:bf:99:da:03:a0:ad:e2:e7:
82:0c:c5:b2:c7:7e:9a:a8:e6:40:8c:62:a9:76:2e:
98:04:25:b3:3e:13:b4:ec:e2:ae:ea:80:54:64:22:
f2:53:1f:a1:e6:9a:93:bd:b7:b2:38:af:d1:8f:ee:
dc:9c:ed:50:94:31:24:e9:13:18:19:1a:d6:3d:12:
7f:43:bf:c4:a4:15:45:28:c6:22:36:85:ea:90:fc:
e3:23:03:ea:59:25:60:43:8d:33:77:d7:cb:ee:57:
2a:44:41:2f:e2:94:dc:79:fd:38:db:82:2e:82:6a:
e9:db:d5:50:df:c8:cb:ad:b3:f8:6b:a9:14:ea:14:
2c:4b:06:85:71:a3:ea:0e:43:2b:24:2b:b8:e0:cc:
94:1a:93:77:96:d0:c6:c0:cc:2f:87:4e:cb:56:82:
4e:d3:94:6d:ee:f4:26:dc:cb:0c:61:f2:f7:d4:cb:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:AB:68:80:28:D8:A6:B3:BC:51:E8:B4:83:EC:F3:57:0B:97:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AFE516C58F811F1BD95AFF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2e:03:37:c1:35:9d:a8:84:47:c7:f2:fa:65:96:c4:b0:7a:
f8:ba:ec:57:a6:23:f5:03:95:82:35:be:83:38:ff:ef:21:af:
0d:ba:76:cc:bc:c2:c6:74:81:fc:66:da:53:bd:d6:46:05:21:
c8:b5:54:19:f3:49:9d:e9:ba:44:c9:5a:e8:c3:e6:03:7c:36:
70:18:86:d8:2c:2e:c8:6b:9a:19:58:cd:d5:79:5f:5f:27:79:
3b:46:82:3e:3a:dc:b4:02:70:b0:37:c0:76:20:f3:c0:a7:df:
e5:8e:a0:7c:1d:bd:f0:18:42:7b:fb:2f:b1:0c:93:8f:13:ef:
2e:a0:38:cf:1b:7c:f5:34:d1:a3:34:af:12:aa:79:bd:8e:60:
53:b5:fc:5b:33:87:87:ad:07:56:c0:9e:de:8a:1b:0f:8e:84:
22:d6:0b:5c:1c:e3:83:0c:1b:36:85:b2:08:67:66:c3:23:6e:
58:f6:76:a7:dd:b5:6f:51:7d:04:01:24:35:40:e4:e4:90:57:
76:2e:99:eb:0f:3c:3a:ac:83:7d:4a:7e:0c:23:7d:34:0f:4a:
7c:54:25:4f:65:e7:c5:07:46:ec:a3:6b:51:51:d3:a3:d0:42:
48:6c:23:ef:6e:90:14:74:fe:68:41:6d:26:2e:8d:4e:1b:cb:
06:25:cb:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc+7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI2MTE0NjU0WhcNMjYwNzAzMTE0NjU0WjAYMRYw
FAYDVQQDEw02YTE1ODgzNC0wZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArq0RALb2PIWj3o7Wnp/jkC5hbI03XHEVsuYsEE2lL8F2y7qknk5lkz6b
XZ4CcrmM1L7utHgDSDITxYqdktnOt5jvd9rgL/57eQfMaoeD4TZ1v5naA6Ct4ueC
DMWyx36aqOZAjGKpdi6YBCWzPhO07OKu6oBUZCLyUx+h5pqTvbeyOK/Rj+7cnO1Q
lDEk6RMYGRrWPRJ/Q7/EpBVFKMYiNoXqkPzjIwPqWSVgQ40zd9fL7lcqREEv4pTc
ef0424Iugmrp29VQ38jLrbP4a6kU6hQsSwaFcaPqDkMrJCu44MyUGpN3ltDGwMwv
h07LVoJO05Rt7vQm3MsMYfL31MtItwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN7B
q2iAKNims7xR6LSD7PNXC5dZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QUZFNTE2QzU4RjgxMUYxQkQ5NUFGRjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4MMA0GCSqGSIb3DQEB
CwUAA4IBAQAQLgM3wTWdqIRHx/L6ZZbEsHr4uuxXpiP1A5WCNb6DOP/vIa8NunbM
vMLGdIH8ZtpTvdZGBSHItVQZ80md6bpEyVrow+YDfDZwGIbYLC7Ia5oZWM3VeV9f
J3k7RoI+Oty0AnCwN8B2IPPAp9/ljqB8Hb3wGEJ7+y+xDJOPE+8uoDjPG3z1NNGj
NK8Sqnm9jmBTtfxbM4eHrQdWwJ7eihsPjoQi1gtcHOODDBs2hbIIZ2bDI25Y9nan
3bVvUX0EASQ1QOTkkFd2LpnrDzw6rIN9Sn4MI300D0p8VCVPZefFB0bso2tRUdOj
0EJIbCPvbpAUdP5oQW0mLo1OG8sGJcvA
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:55 2026 by rpki-client