Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89ED92E552E11F194C918DDCE1D38B0.roa
File: D89ED92E552E11F194C918DDCE1D38B0.roa (raw, json)
Hash identifier: QcmuZNipjo7Pyz4p2SqCmH+GKNBQ9bU35qCmvk2cR0I=
Subject key identifier: 54:B6:5B:97:AE:49:48:F8:34:B0:FC:02:91:81:FC:DB:EE:9D:3A:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89ED92E552E11F194C918DDCE1D38B0.roa
Signing time: Thu 21 May 2026 16:05:12 +0000
ROA not before: Thu 21 May 2026 16:05:07 +0000
ROA not after: Sat 08 Aug 2026 16:05:07 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118153 (0x1cd89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 16:05:07 2026 GMT
Not After : Aug 8 16:05:07 2026 GMT
Subject: CN=6a0f2d38-a640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:7f:71:3d:92:46:85:0b:23:44:cb:ad:f0:
f1:ea:59:0f:15:c8:1b:65:39:da:cc:3a:00:29:42:
e3:eb:ef:70:ff:95:0d:7d:42:a7:b6:87:87:b5:5b:
f3:5e:a5:da:de:12:c4:6d:79:f2:d6:a8:7d:22:b6:
d8:f9:fb:54:a2:ee:84:45:fb:01:93:c5:94:75:a3:
43:dd:ed:8f:4d:f9:db:e4:f8:ed:e3:5e:75:e1:2e:
04:b8:77:98:8b:a5:57:c1:d3:98:6c:af:03:83:e9:
48:82:fc:d8:8a:30:cd:ce:d2:97:d0:06:20:f6:af:
c7:e9:8a:ce:5c:0e:47:21:21:61:76:23:db:a2:76:
ac:9b:87:0f:f1:58:fe:ee:bf:ab:fd:78:bf:95:7f:
91:4b:fb:5e:ab:b3:53:f5:8e:d9:ff:4b:fc:0a:1b:
a5:f9:84:d8:44:00:ce:fe:66:f6:23:45:22:e2:63:
20:d7:90:27:32:71:78:14:5a:fa:ee:8c:1f:7a:29:
a6:7d:fe:73:94:4b:fd:b0:d7:70:72:51:d0:47:ba:
d9:c8:37:a4:e5:e6:a5:66:eb:e9:42:f9:95:55:44:
a3:77:0f:d4:ff:92:28:8a:cc:8c:86:76:2c:a0:4d:
4f:8c:c6:de:c3:45:66:b6:3a:70:bb:43:d2:0c:b3:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:5B:97:AE:49:48:F8:34:B0:FC:02:91:81:FC:DB:EE:9D:3A:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89ED92E552E11F194C918DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
59:53:0b:1d:59:0a:5c:03:60:cd:b8:63:32:6c:d4:29:cc:1d:
ae:c1:d7:07:bf:14:25:4b:4a:7c:c8:04:c4:ad:26:0d:00:ce:
28:41:fc:56:0f:e6:66:b6:0f:aa:8d:8c:31:11:1b:6f:b6:59:
d9:00:42:26:6b:8e:c7:f5:85:0c:d2:51:24:6a:72:6c:79:1e:
a1:c2:e7:ec:59:37:52:32:74:c2:d7:eb:9e:82:f1:fc:16:a7:
b7:c3:9d:78:0a:6e:a8:cf:4e:ed:54:5d:44:06:c6:d0:01:fa:
92:4c:5d:0d:dc:36:a7:c6:c1:5b:ec:a7:2c:31:94:55:e6:ca:
42:7e:27:1c:2f:cd:be:f2:ce:f0:e7:b8:b4:73:78:75:9c:93:
4b:2b:13:8e:06:b4:64:7e:3a:39:60:95:3a:2f:ca:b5:38:1e:
b4:23:c5:15:ca:85:e7:48:89:5b:bd:f8:4c:24:ab:22:fd:09:
3e:7a:1a:48:e7:8b:1b:fa:e9:80:ad:18:be:4c:da:95:68:99:
7d:9a:ae:19:1c:57:81:b5:19:36:c1:d3:78:0b:6d:f9:30:b6:
63:bc:50:7c:52:ef:c5:52:4c:2b:f2:0c:78:d9:12:c1:95:dd:
f3:3a:2e:1c:29:b1:10:40:20:36:d2:07:82:97:f4:97:4a:15:
ff:55:30:ae
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAc2JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIxMTYwNTA3WhcNMjYwODA4MTYwNTA3WjAYMRYw
FAYDVQQDEw02YTBmMmQzOC1hNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZZ/cT2SRoULI0TLrfDx6lkPFcgbZTnazDoAKULj6+9w/5UNfUKntoeH
tVvzXqXa3hLEbXny1qh9IrbY+ftUou6ERfsBk8WUdaND3e2PTfnb5Pjt41514S4E
uHeYi6VXwdOYbK8Dg+lIgvzYijDNztKX0AYg9q/H6YrOXA5HISFhdiPbonasm4cP
8Vj+7r+r/Xi/lX+RS/teq7NT9Y7Z/0v8Chul+YTYRADO/mb2I0Ui4mMg15AnMnF4
FFr67owfeimmff5zlEv9sNdwclHQR7rZyDek5ealZuvpQvmVVUSjdw/U/5IoisyM
hnYsoE1PjMbew0Vmtjpwu0PSDLMUhwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFFS2
W5euSUj4NLD8ApGB/NvunTryMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EODlFRDkyRTU1MkUxMUYxOTRDOTE4RERDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmt+oAwQDmt+wAwQCmt+8
MA0GCSqGSIb3DQEBCwUAA4IBAQBZUwsdWQpcA2DNuGMybNQpzB2uwdcHvxQlS0p8
yATErSYNAM4oQfxWD+Zmtg+qjYwxERtvtlnZAEIma47H9YUM0lEkanJseR6hwufs
WTdSMnTC1+uegvH8Fqe3w514Cm6oz07tVF1EBsbQAfqSTF0N3DanxsFb7KcsMZRV
5spCficcL82+8s7w57i0c3h1nJNLKxOOBrRkfjo5YJU6L8q1OB60I8UVyoXnSIlb
vfhMJKsi/Qk+ehpI54sb+umArRi+TNqVaJl9mq4ZHFeBtRk2wdN4C235MLZjvFB8
Uu/FUkwr8gx42RLBld3zOi4cKbEQQCA20geCl/SXShX/VTCu
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:04 2026 by rpki-client