Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA8B7A9E510211F1B12E65FDCE1D38B0.roa
File: BA8B7A9E510211F1B12E65FDCE1D38B0.roa (raw, json)
Hash identifier: Wwvf/zkzJvwTUSp3mzryE8vN6bqjvldvByKmd3XOOoQ=
Subject key identifier: 6E:A6:27:99:BE:BC:99:E1:58:94:40:44:DC:76:0D:E9:E2:95:05:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA8B7A9E510211F1B12E65FDCE1D38B0.roa
Signing time: Sat 16 May 2026 08:39:19 +0000
ROA not before: Sat 16 May 2026 08:39:14 +0000
ROA not after: Tue 23 Jun 2026 08:39:14 +0000
asID: 200758
IP address blocks: 154.222.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117727 (0x1cbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 16 08:39:14 2026 GMT
Not After : Jun 23 08:39:14 2026 GMT
Subject: CN=6a082d37-d250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:d7:c9:84:d1:54:2b:02:db:4f:ab:57:07:
f9:47:95:f9:20:9e:c3:26:0c:ac:c1:b1:12:1f:03:
b1:21:c6:40:7b:d0:ca:be:3d:eb:fc:99:9f:6c:33:
80:4d:2b:23:0f:2e:1e:ad:20:a1:16:6b:22:6d:e2:
61:0b:97:ff:82:f6:b6:27:09:e4:7d:fd:26:b9:14:
51:4c:c0:5b:45:a5:19:02:d9:e5:37:16:07:7f:32:
30:3b:27:be:1a:af:d2:16:29:ed:8e:78:24:06:8f:
79:f0:92:96:e3:f6:1a:00:ec:3f:2d:c5:fe:2c:fc:
e5:8a:ce:ae:7c:07:e5:b0:71:b5:c2:3f:54:92:e9:
89:8e:ee:2d:26:81:45:ad:aa:82:ba:71:87:f8:26:
50:16:f6:5e:9e:43:11:2c:79:7b:41:03:56:57:6d:
00:d9:01:b0:70:d3:d6:ae:ff:b5:63:42:24:a5:6c:
59:ef:3b:dd:98:9d:19:34:00:40:a7:aa:bc:c3:8e:
0b:26:c9:fc:af:fd:2f:8f:d3:66:b0:2f:d1:e4:87:
2f:67:29:da:58:6d:85:b9:19:bc:2d:01:88:64:95:
e8:a0:88:b6:c1:08:73:38:9b:ae:e8:51:33:e3:dd:
d4:f1:dd:a4:15:7d:5b:96:26:19:cd:81:4e:fd:f9:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A6:27:99:BE:BC:99:E1:58:94:40:44:DC:76:0D:E9:E2:95:05:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA8B7A9E510211F1B12E65FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.8.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0c:2c:45:9b:d8:6c:01:96:ae:cb:98:d8:77:91:7b:10:ce:
12:3d:c7:d2:15:d7:a4:ac:fc:a6:8e:19:66:fd:1e:57:f1:aa:
f6:53:79:ca:9a:f5:fa:2b:1c:b2:dc:8f:b5:4f:ca:c5:cd:f6:
74:be:aa:14:f7:ac:eb:7b:68:dc:99:6b:f5:1a:82:39:df:65:
aa:a6:28:d3:ae:90:a5:82:c9:93:19:7d:13:52:70:52:21:0d:
d3:72:7a:c8:b2:c9:8f:87:88:cb:da:92:32:46:2d:7e:48:99:
fb:f2:81:ed:1e:34:70:ae:64:25:1b:ec:f8:99:a7:cc:85:99:
b7:1d:b4:1a:45:bd:82:1d:e5:f8:f8:d9:dc:fb:4f:f9:9d:74:
d8:74:05:48:1f:29:5c:2a:c1:39:73:d8:2c:84:ab:86:5c:f5:
74:dd:39:c6:b1:9a:d9:50:ee:75:49:af:0e:02:52:d3:e5:af:
c2:53:81:61:56:4a:ef:ca:83:e3:35:34:17:c0:c6:67:43:07:
8b:04:e4:c8:21:74:f9:07:30:11:51:56:94:55:17:00:1f:da:
4b:9a:1f:49:e0:c8:bc:da:d3:a1:52:4a:ac:27:92:06:9a:15:
b3:e3:68:4e:8e:7b:ab:b7:5c:0a:2e:fa:c3:b4:9b:4a:1b:0a:
ce:5c:be:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcvfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE2MDgzOTE0WhcNMjYwNjIzMDgzOTE0WjAYMRYw
FAYDVQQDEw02YTA4MmQzNy1kMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw1jXyYTRVCsC20+rVwf5R5X5IJ7DJgyswbESHwOxIcZAe9DKvj3r/Jmf
bDOATSsjDy4erSChFmsibeJhC5f/gva2Jwnkff0muRRRTMBbRaUZAtnlNxYHfzIw
Oye+Gq/SFintjngkBo958JKW4/YaAOw/LcX+LPzlis6ufAflsHG1wj9UkumJju4t
JoFFraqCunGH+CZQFvZenkMRLHl7QQNWV20A2QGwcNPWrv+1Y0IkpWxZ7zvdmJ0Z
NABAp6q8w44LJsn8r/0vj9NmsC/R5IcvZynaWG2FuRm8LQGIZJXooIi2wQhzOJuu
6FEz493U8d2kFX1bliYZzYFO/fm4mQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG6m
J5m+vJnhWJRARNx2DenilQWJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQThCN0E5RTUxMDIxMUYxQjEyRTY1RkRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4IMA0GCSqGSIb3DQEB
CwUAA4IBAQBxDCxFm9hsAZauy5jYd5F7EM4SPcfSFdekrPymjhlm/R5X8ar2U3nK
mvX6Kxyy3I+1T8rFzfZ0vqoU96zre2jcmWv1GoI532WqpijTrpClgsmTGX0TUnBS
IQ3TcnrIssmPh4jL2pIyRi1+SJn78oHtHjRwrmQlG+z4mafMhZm3HbQaRb2CHeX4
+Nnc+0/5nXTYdAVIHylcKsE5c9gshKuGXPV03TnGsZrZUO51Sa8OAlLT5a/CU4Fh
VkrvyoPjNTQXwMZnQweLBOTIIXT5BzARUVaUVRcAH9pLmh9J4Mi82tOhUkqsJ5IG
mhWz42hOjnurt1wKLvrDtJtKGwrOXL5N
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:46 2026 by rpki-client