Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB9A5CA5FF611F1B7533BF6CE1D38B0.roa
File: AAB9A5CA5FF611F1B7533BF6CE1D38B0.roa (raw, json)
Hash identifier: nGM68QrIDY7W39oYjYWYj2vzt7dWNT3ACwLHn+y/rbM=
Subject key identifier: 98:16:65:3D:CA:72:50:61:9D:02:06:44:B8:EE:CE:C3:38:0C:D3:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D18E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB9A5CA5FF611F1B7533BF6CE1D38B0.roa
Signing time: Thu 04 Jun 2026 09:20:46 +0000
ROA not before: Thu 04 Jun 2026 09:20:39 +0000
ROA not after: Fri 10 Jul 2026 09:20:39 +0000
asID: 138915
IP address blocks: 154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119182 (0x1d18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 09:20:39 2026 GMT
Not After : Jul 10 09:20:39 2026 GMT
Subject: CN=6a21436e-4f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:4e:fc:d2:9c:cf:29:68:82:6e:03:5f:6b:
39:89:e5:9e:86:60:dc:8d:3c:67:84:36:98:14:45:
a3:28:dc:47:3d:e6:01:34:00:35:c0:75:8a:78:13:
01:3f:31:5d:a2:eb:a5:df:e7:d6:4d:8f:2b:7a:32:
c9:48:d7:1e:fd:59:25:49:86:33:19:de:30:4c:bb:
26:69:4f:0a:8d:4d:b0:a4:06:1b:a6:fe:08:b4:34:
61:ce:3c:9c:9f:2a:da:08:a0:99:4e:6d:42:b8:40:
91:13:59:b4:b3:d6:a8:54:30:7a:72:63:84:d2:2c:
96:e4:cf:6a:11:6c:e0:ae:11:f5:a8:c3:f2:cf:24:
f4:9e:12:aa:4d:ca:3b:4e:e6:09:ae:3f:90:38:f4:
31:02:a7:a4:b3:9c:1a:06:00:e8:dc:bc:f1:dc:a1:
55:f6:5c:1b:6e:e5:1b:25:1c:76:91:7b:62:8a:00:
47:41:c9:fa:3d:1d:22:b1:9c:c1:de:15:77:4e:ba:
6f:21:b8:09:02:7a:a3:89:e8:dc:84:4a:f8:a6:92:
5c:1d:b3:7e:78:92:1b:d3:f8:d1:47:cc:ca:a1:59:
a0:2d:3b:6f:2e:5c:d0:d5:77:87:87:11:72:c5:c1:
3a:a0:d6:8d:04:f4:79:03:71:06:8f:aa:8a:f9:27:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:65:3D:CA:72:50:61:9D:02:06:44:B8:EE:CE:C3:38:0C:D3:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB9A5CA5FF611F1B7533BF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.44.0-154.223.49.255
154.223.51.0-154.223.57.255
Signature Algorithm: sha256WithRSAEncryption
3d:d2:78:e3:b9:c4:c9:fa:c1:a0:61:d7:1f:8f:0c:22:19:c1:
75:74:2d:27:22:b7:be:02:a7:6a:f3:dd:24:b2:9c:04:59:47:
b0:67:e5:3f:7c:df:9c:f3:d2:b8:16:de:d1:a3:af:f9:66:ba:
4f:2d:c1:dc:4e:8c:56:3d:3b:45:fc:f6:2f:07:44:e9:2e:1d:
16:ae:fa:a1:6b:df:94:4c:09:3e:2c:66:6a:e7:51:75:bf:ec:
59:4d:4c:29:95:97:78:09:70:a7:7a:cc:f6:94:d5:55:03:44:
0d:6d:1a:77:72:f4:78:1a:c1:07:16:2c:1f:da:8a:84:a5:84:
5a:26:14:c8:71:02:16:9d:29:b5:4d:82:3a:ec:2d:8d:15:7c:
6b:2d:64:fb:09:77:ae:79:45:71:ae:53:a2:b3:64:25:e8:27:
83:e1:d6:6e:01:cb:8a:b7:16:d7:45:e9:7d:e8:cb:9d:2f:09:
b3:08:ec:cb:56:4a:71:06:fe:a8:fa:93:0b:3f:35:52:08:75:
66:f0:92:be:24:f7:db:76:fa:4c:80:ad:91:61:f0:08:3f:c8:
6c:57:5f:3e:11:0b:04:5d:a3:2a:b5:6c:91:b9:51:9f:e8:0e:
3f:b6:af:8f:a4:44:b7:da:d8:5b:72:2d:5b:e4:b6:ff:e9:6e:
f5:56:87:06
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAdGOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA0MDkyMDM5WhcNMjYwNzEwMDkyMDM5WjAYMRYw
FAYDVQQDEw02YTIxNDM2ZS00ZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwtBO/NKczylogm4DX2s5ieWehmDcjTxnhDaYFEWjKNxHPeYBNAA1wHWK
eBMBPzFdouul3+fWTY8rejLJSNce/VklSYYzGd4wTLsmaU8KjU2wpAYbpv4ItDRh
zjycnyraCKCZTm1CuECRE1m0s9aoVDB6cmOE0iyW5M9qEWzgrhH1qMPyzyT0nhKq
Tco7TuYJrj+QOPQxAqeks5waBgDo3Lzx3KFV9lwbbuUbJRx2kXtiigBHQcn6PR0i
sZzB3hV3TrpvIbgJAnqjiejchEr4ppJcHbN+eJIb0/jRR8zKoVmgLTtvLlzQ1XeH
hxFyxcE6oNaNBPR5A3EGj6qK+ScykwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFJgW
ZT3KclBhnQIGRLjuzsM4DNOTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQUI5QTVDQTVGRjYxMUYxQjc1MzNCRjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAKa3ywDBAGa3zAwDAME
AJrfMwMEAZrfODANBgkqhkiG9w0BAQsFAAOCAQEAPdJ447nEyfrBoGHXH48MIhnB
dXQtJyK3vgKnavPdJLKcBFlHsGflP3zfnPPSuBbe0aOv+Wa6Ty3B3E6MVj07Rfz2
LwdE6S4dFq76oWvflEwJPixmaudRdb/sWU1MKZWXeAlwp3rM9pTVVQNEDW0ad3L0
eBrBBxYsH9qKhKWEWiYUyHECFp0ptU2COuwtjRV8ay1k+wl3rnlFca5TorNkJegn
g+HWbgHLircW10XpfejLnS8Jswjsy1ZKcQb+qPqTCz81Ugh1ZvCSviT323b6TICt
kWHwCD/IbFdfPhELBF2jKrVskblRn+gOP7avj6REt9rYW3ItW+S2/+lu9VaHBg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:47:35 2026 by rpki-client