Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0ACC80A619011F19571CFB5CE1D38B0.roa
File: A0ACC80A619011F19571CFB5CE1D38B0.roa (raw, json)
Hash identifier: PoRDSx22QfRcPySXPc9jedM9fHwM9DvTgEkp62KJXHk=
Subject key identifier: 23:1F:37:5E:7B:A5:54:62:45:9A:20:C2:1A:86:F7:40:70:BD:F9:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D21A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0ACC80A619011F19571CFB5CE1D38B0.roa
Signing time: Sat 06 Jun 2026 10:15:23 +0000
ROA not before: Sat 06 Jun 2026 10:15:18 +0000
ROA not after: Fri 24 Jul 2026 10:15:18 +0000
asID: 9009
IP address blocks: 154.91.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119322 (0x1d21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 10:15:18 2026 GMT
Not After : Jul 24 10:15:18 2026 GMT
Subject: CN=6a23f33b-899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:05:b7:e9:29:55:b2:d8:f0:00:79:ab:5e:
a9:c7:51:59:99:b5:36:d3:b2:ab:e4:6d:47:51:ec:
a2:74:be:3f:49:7f:99:23:f4:17:89:b4:8e:06:6d:
59:aa:a8:08:a3:fd:d5:21:3b:35:28:4e:4d:52:4f:
07:4e:cd:8d:40:9c:dc:32:f5:ca:98:6e:db:4e:41:
5d:5a:9f:cd:49:d7:b4:df:07:4d:16:42:ed:8e:39:
34:59:a8:94:74:37:d3:aa:55:aa:12:bd:34:fc:b3:
05:df:96:31:06:cc:81:b3:aa:c2:af:87:a7:98:59:
2d:b3:2d:81:32:e4:20:f0:85:18:af:00:18:5c:e6:
38:6c:fe:62:4a:ad:15:85:a8:14:3d:0a:eb:e7:f3:
2c:9b:e3:8f:76:4f:e7:85:db:7b:1c:c0:d4:7d:e9:
10:42:d3:0d:af:a6:df:d9:b0:75:e6:cf:53:a4:83:
8b:b5:e5:d6:ca:a6:62:b1:6f:7b:48:ff:33:49:88:
34:72:a2:ee:e5:2e:95:f6:2c:19:ae:09:01:ba:5e:
45:0d:43:cf:d5:bb:50:9d:66:a8:06:c4:42:d1:8e:
80:46:77:05:50:49:65:55:54:92:ad:ed:01:40:93:
ca:fc:e7:3a:32:fb:c9:87:b7:d0:2d:fe:0d:01:96:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:37:5E:7B:A5:54:62:45:9A:20:C2:1A:86:F7:40:70:BD:F9:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0ACC80A619011F19571CFB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.157.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b4:1b:11:51:2b:9b:b4:a4:d8:a1:c8:9f:5c:04:05:ff:22:
15:ad:0c:e4:52:4c:14:4a:aa:62:c0:8a:69:d7:75:dd:45:f0:
5c:20:14:27:da:03:bc:6c:84:ba:d4:da:8f:fa:e3:f1:33:26:
80:5d:cc:bf:f4:2f:18:94:23:f1:36:f5:cc:38:48:4b:3f:21:
86:3e:e8:48:07:9e:77:1d:69:99:23:62:25:9b:c2:b8:de:bb:
a5:93:59:39:85:69:88:07:81:5b:8a:37:5a:fe:f0:7f:07:16:
7e:1a:bb:b4:84:29:62:ac:d0:be:4c:ad:6c:17:9a:d1:a4:b2:
b3:3a:7c:9d:ac:eb:ae:90:bd:0a:d3:69:d2:fd:5a:d4:05:00:
49:84:d5:0d:e3:42:e3:b6:d6:cc:7e:d8:ee:e9:24:92:57:9b:
15:c9:63:b3:5e:29:45:56:f5:90:3a:ab:bb:90:e5:2b:d1:59:
2e:32:4b:33:7f:46:b6:a1:4e:d2:6b:24:9a:91:d7:13:e6:70:
84:05:32:07:18:11:28:7d:b5:30:21:63:60:f5:6b:f6:ba:39:
19:92:a4:c4:9d:28:1e:7a:10:82:da:7b:71:b5:09:69:51:66:
1f:3d:10:d1:e6:34:ec:31:43:23:71:56:29:5a:09:ff:56:8e:
85:4d:0b:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdIaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MTAxNTE4WhcNMjYwNzI0MTAxNTE4WjAYMRYw
FAYDVQQDEw02YTIzZjMzYi04OTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzCUFt+kpVbLY8AB5q16px1FZmbU207Kr5G1HUeyidL4/SX+ZI/QXibSO
Bm1ZqqgIo/3VITs1KE5NUk8HTs2NQJzcMvXKmG7bTkFdWp/NSde03wdNFkLtjjk0
WaiUdDfTqlWqEr00/LMF35YxBsyBs6rCr4enmFktsy2BMuQg8IUYrwAYXOY4bP5i
Sq0VhagUPQrr5/Msm+OPdk/nhdt7HMDUfekQQtMNr6bf2bB15s9TpIOLteXWyqZi
sW97SP8zSYg0cqLu5S6V9iwZrgkBul5FDUPP1btQnWaoBsRC0Y6ARncFUEllVVSS
re0BQJPK/Oc6MvvJh7fQLf4NAZYRFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCMf
N157pVRiRZogwhqG90BwvflfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMEFDQzgwQTYxOTAxMUYxOTU3MUNGQjVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmludMA0GCSqGSIb3DQEB
CwUAA4IBAQCItBsRUSubtKTYocifXAQF/yIVrQzkUkwUSqpiwIpp13XdRfBcIBQn
2gO8bIS61NqP+uPxMyaAXcy/9C8YlCPxNvXMOEhLPyGGPuhIB553HWmZI2Ilm8K4
3rulk1k5hWmIB4Fbijda/vB/BxZ+Gru0hClirNC+TK1sF5rRpLKzOnydrOuukL0K
02nS/VrUBQBJhNUN40LjttbMftju6SSSV5sVyWOzXilFVvWQOqu7kOUr0VkuMksz
f0a2oU7SaySakdcT5nCEBTIHGBEofbUwIWNg9Wv2ujkZkqTEnSgeehCC2ntxtQlp
UWYfPRDR5jTsMUMjcVYpWgn/Vo6FTQsI
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:51 2026 by rpki-client