Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A056A23A599E11F1A4541EEDCE1D38B0.roa
File: A056A23A599E11F1A4541EEDCE1D38B0.roa (raw, json)
Hash identifier: uTXkzEUbI6sCmJeTixP+Eb11JhcPkLFbCiqwzDSLp1E=
Subject key identifier: 4F:F0:43:43:44:B0:E5:C8:70:9E:7F:B3:20:74:D1:C6:9D:FB:F8:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A056A23A599E11F1A4541EEDCE1D38B0.roa
Signing time: Wed 27 May 2026 07:35:26 +0000
ROA not before: Wed 27 May 2026 07:35:19 +0000
ROA not after: Thu 03 Jun 2027 07:35:19 +0000
asID: 135423
IP address blocks: 154.205.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118756 (0x1cfe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 07:35:19 2026 GMT
Not After : Jun 3 07:35:19 2027 GMT
Subject: CN=6a169ebe-ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:0b:fb:60:14:04:63:56:91:34:1b:91:96:f9:
40:1b:64:fd:f6:49:b9:aa:fb:6f:75:e1:4f:d1:14:
9b:80:ab:28:3b:b2:6d:10:80:40:04:06:89:3f:b7:
89:e4:9b:33:7c:d6:98:27:12:f9:ec:8a:f1:ac:94:
d8:a8:f4:cd:95:03:54:d9:ca:38:82:91:7f:4b:ec:
2e:1d:29:38:5f:c9:12:c7:fa:54:ea:d2:61:45:be:
c8:b9:5f:27:1c:c8:02:27:6e:c4:f4:83:72:b6:76:
43:7b:25:71:e5:d4:d7:d3:91:4c:3d:10:5f:14:ee:
50:74:15:ca:ff:61:88:98:71:83:11:64:83:22:b7:
05:fd:e4:67:a1:1d:d3:69:4b:25:e2:9c:de:05:89:
9e:05:93:db:2f:86:6b:3e:62:dc:4a:40:93:4a:2a:
cd:6b:fe:d3:90:7d:f6:20:8a:e8:5e:9a:3c:62:c5:
63:5a:a1:fe:4c:53:cc:91:2d:70:95:12:e2:f4:6b:
9a:89:26:49:3b:c2:e4:95:6e:3b:6d:79:08:db:12:
39:f7:72:c4:a9:1c:0a:5d:77:f1:89:5f:61:bf:fb:
71:bd:51:c8:f3:91:9a:54:df:d4:bb:74:62:09:96:
d9:4a:72:b1:13:79:a2:f4:1f:43:81:33:f3:c0:c3:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F0:43:43:44:B0:E5:C8:70:9E:7F:B3:20:74:D1:C6:9D:FB:F8:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A056A23A599E11F1A4541EEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:88:8d:81:e8:27:0f:e2:40:a2:61:95:fa:40:37:97:a9:d0:
bb:56:d2:fc:57:05:cb:19:f4:67:f5:20:7f:46:1b:18:7f:a0:
e6:3b:c2:f4:3b:87:0c:1f:47:22:6e:6e:f0:8b:16:7f:01:84:
7d:30:0d:5d:1d:cf:ca:67:44:ce:c0:32:23:3f:78:2e:5f:ca:
5b:14:4a:13:51:e5:98:03:20:75:ba:ae:b3:b3:25:a3:ae:41:
b1:96:f5:40:4f:f6:55:bf:32:90:c7:3b:c3:4a:3c:8a:12:43:
a3:e0:73:4a:52:73:fb:9c:53:4a:01:c0:45:2c:4d:2b:57:eb:
d6:39:bd:a7:27:84:97:c5:3a:65:75:50:28:cc:4f:c8:4d:fa:
8a:83:c4:d8:4a:a0:3e:96:af:8b:11:79:cb:8b:cb:9c:93:32:
5f:a3:1d:1d:a8:95:f5:ad:d1:f0:6f:44:9a:27:ec:d5:07:1f:
5e:70:68:66:08:e8:01:6b:48:62:58:4b:ce:06:b0:ab:17:d8:
12:f4:ab:ef:73:5e:58:6f:60:87:2b:9c:6b:41:1a:52:da:89:
69:dc:70:22:30:25:28:c0:b8:53:40:a8:26:8c:cc:92:a1:7d:
98:a5:38:d1:3a:5e:a6:47:b2:c8:7b:96:db:85:49:d6:ac:4d:
b3:ef:12:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc/kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI3MDczNTE5WhcNMjcwNjAzMDczNTE5WjAYMRYw
FAYDVQQDEw02YTE2OWViZS1jZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/wv7YBQEY1aRNBuRlvlAG2T99km5qvtvdeFP0RSbgKsoO7JtEIBABAaJ
P7eJ5JszfNaYJxL57IrxrJTYqPTNlQNU2co4gpF/S+wuHSk4X8kSx/pU6tJhRb7I
uV8nHMgCJ27E9INytnZDeyVx5dTX05FMPRBfFO5QdBXK/2GImHGDEWSDIrcF/eRn
oR3TaUsl4pzeBYmeBZPbL4ZrPmLcSkCTSirNa/7TkH32IIroXpo8YsVjWqH+TFPM
kS1wlRLi9GuaiSZJO8LklW47bXkI2xI593LEqRwKXXfxiV9hv/txvVHI85GaVN/U
u3RiCZbZSnKxE3mi9B9DgTPzwMOq2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE/w
Q0NEsOXIcJ5/syB00cad+/jvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMDU2QTIzQTU5OUUxMUYxQTQ1NDFFRURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms0UMA0GCSqGSIb3DQEB
CwUAA4IBAQB6iI2B6CcP4kCiYZX6QDeXqdC7VtL8VwXLGfRn9SB/RhsYf6DmO8L0
O4cMH0cibm7wixZ/AYR9MA1dHc/KZ0TOwDIjP3guX8pbFEoTUeWYAyB1uq6zsyWj
rkGxlvVAT/ZVvzKQxzvDSjyKEkOj4HNKUnP7nFNKAcBFLE0rV+vWOb2nJ4SXxTpl
dVAozE/ITfqKg8TYSqA+lq+LEXnLi8uckzJfox0dqJX1rdHwb0SaJ+zVBx9ecGhm
COgBa0hiWEvOBrCrF9gS9Kvvc15Yb2CHK5xrQRpS2olp3HAiMCUowLhTQKgmjMyS
oX2YpTjROl6mR7LIe5bbhUnWrE2z7xJL
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:11 2026 by rpki-client