Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C38F4A6264B211F189ED58BFCE1D38B0.roa
File: C38F4A6264B211F189ED58BFCE1D38B0.roa (raw, json)
Hash identifier: wDE2tRJeccgraa4yXD9n/m1wTUletF2Yl7J4ScV0AKI=
Subject key identifier: BD:45:1F:98:6E:8B:91:B9:1A:1F:5E:E5:12:70:0C:5C:1A:10:00:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D26C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C38F4A6264B211F189ED58BFCE1D38B0.roa
Signing time: Wed 10 Jun 2026 09:57:18 +0000
ROA not before: Wed 10 Jun 2026 09:57:13 +0000
ROA not after: Thu 10 Jun 2027 09:57:13 +0000
asID: 150150
IP address blocks: 154.89.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119404 (0x1d26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 09:57:13 2026 GMT
Not After : Jun 10 09:57:13 2027 GMT
Subject: CN=6a2934fd-4866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:a4:52:80:e5:28:df:dc:e7:f1:a0:9f:35:
9e:26:a4:46:68:37:69:e0:fd:c9:f5:f3:7c:18:f3:
66:30:b7:46:7b:6a:f6:ec:81:f8:f5:8a:30:6d:1e:
27:44:0d:bc:50:ed:c4:a9:58:8e:e7:78:05:2d:38:
27:52:90:b5:8d:47:60:a5:07:62:b3:a2:7c:2e:3c:
5a:0f:d4:97:c8:06:2c:55:04:67:a7:e4:7a:d1:41:
f2:8b:85:35:53:f7:af:28:9a:aa:b6:42:e5:68:ef:
47:57:ca:26:47:c7:9a:98:a5:13:cd:d9:51:7a:66:
a7:44:18:28:d9:a8:24:f4:66:7f:75:b3:a3:81:81:
db:27:f9:56:c9:81:68:5c:dd:88:bf:ab:08:be:77:
9c:9b:34:31:19:66:60:b1:8c:a7:d1:54:7d:84:67:
0d:e6:08:16:b0:a3:55:cb:c3:59:4d:25:e3:5b:41:
eb:85:48:3a:1f:9a:20:5a:1c:4c:ec:bf:25:8d:ba:
1b:5d:6d:8e:17:e7:18:42:5f:30:8e:dc:0e:7d:2d:
75:6b:6c:dc:5c:18:8e:34:74:17:98:cd:ea:9d:3d:
e2:db:30:14:b5:79:4d:c6:80:6d:58:35:24:a1:71:
2d:bb:b2:d4:25:b0:72:cc:43:e3:e5:32:b0:49:2d:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:1F:98:6E:8B:91:B9:1A:1F:5E:E5:12:70:0C:5C:1A:10:00:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C38F4A6264B211F189ED58BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:75:0c:6e:65:ff:f7:e8:42:6f:a3:9d:e3:45:7c:85:84:c2:
ce:f4:5d:58:81:49:09:c3:e3:7d:47:15:e7:e2:2b:6d:6e:75:
f2:b0:07:7f:88:be:f7:fd:50:52:bd:e8:b5:95:35:68:38:4a:
f0:e0:a6:b1:c0:c6:4f:ef:1f:a8:3b:08:ad:bb:7e:73:b0:2e:
b4:06:37:f2:35:83:81:ef:16:67:34:61:27:03:8b:6d:d3:39:
de:24:46:40:8e:48:4e:34:82:1a:44:1b:6e:8a:ae:98:c7:57:
9f:54:7a:78:6c:04:e4:6e:0e:72:6a:62:06:cd:3b:72:19:34:
4b:52:97:38:d1:61:71:d9:e7:33:69:2e:d9:2e:33:ef:62:c9:
1a:a1:fd:68:cb:4f:9b:30:32:f2:14:9b:40:dc:45:28:1b:42:
e4:0c:d2:f2:a8:a4:67:35:20:21:1f:7c:b9:e7:ab:83:b3:22:
03:39:c4:d5:f6:0a:c3:c9:54:a0:f4:7d:95:a4:8b:3b:50:54:
6e:8c:0a:cc:dd:b6:21:b2:ce:87:60:87:e1:a0:9f:5d:95:a1:
31:28:60:16:08:24:d1:e9:2e:d6:b6:3b:0d:8b:47:57:8a:24:
94:3e:74:1a:dd:dd:39:1a:99:6d:e5:0f:8a:73:af:29:49:3b:
ef:71:28:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdJsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjEwMDk1NzEzWhcNMjcwNjEwMDk1NzEzWjAYMRYw
FAYDVQQDEw02YTI5MzRmZC00ODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlXSkUoDlKN/c5/GgnzWeJqRGaDdp4P3J9fN8GPNmMLdGe2r27IH49Yow
bR4nRA28UO3EqViO53gFLTgnUpC1jUdgpQdis6J8LjxaD9SXyAYsVQRnp+R60UHy
i4U1U/evKJqqtkLlaO9HV8omR8eamKUTzdlRemanRBgo2agk9GZ/dbOjgYHbJ/lW
yYFoXN2Iv6sIvnecmzQxGWZgsYyn0VR9hGcN5ggWsKNVy8NZTSXjW0HrhUg6H5og
WhxM7L8ljbobXW2OF+cYQl8wjtwOfS11a2zcXBiONHQXmM3qnT3i2zAUtXlNxoBt
WDUkoXEtu7LUJbByzEPj5TKwSS1rFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL1F
H5hui5G5Gh9e5RJwDFwaEAA4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzhGNEE2MjY0QjIxMUYxODlFRDU4QkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlkAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgdQxuZf/36EJvo53jRXyFhMLO9F1YgUkJw+N9RxXn4ittbnXysAd/
iL73/VBSvei1lTVoOErw4KaxwMZP7x+oOwitu35zsC60BjfyNYOB7xZnNGEnA4tt
0zneJEZAjkhONIIaRBtuiq6Yx1efVHp4bATkbg5yamIGzTtyGTRLUpc40WFx2ecz
aS7ZLjPvYskaof1oy0+bMDLyFJtA3EUoG0LkDNLyqKRnNSAhH3y556uDsyIDOcTV
9grDyVSg9H2VpIs7UFRujArM3bYhss6HYIfhoJ9dlaExKGAWCCTR6S7WtjsNi0dX
iiSUPnQa3d05Gplt5Q+Kc68pSTvvcSi2
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:57:15 2026 by rpki-client