Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9D8D1605FF411F1A16A99EDCE1D38B0.roa
File: E9D8D1605FF411F1A16A99EDCE1D38B0.roa (raw, json)
Hash identifier: Bo64GEZcYNslVREw6H5u70NaPTvcSYnfbUg9JOy1q5I=
Subject key identifier: D0:E2:E5:85:56:B3:6D:72:AA:E5:37:76:A3:97:72:07:05:04:97:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D18A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9D8D1605FF411F1A16A99EDCE1D38B0.roa
Signing time: Thu 04 Jun 2026 09:08:13 +0000
ROA not before: Thu 04 Jun 2026 09:08:08 +0000
ROA not after: Fri 10 Jul 2026 09:08:08 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119178 (0x1d18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 09:08:08 2026 GMT
Not After : Jul 10 09:08:08 2026 GMT
Subject: CN=6a21407d-517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:a1:86:63:b0:8e:1c:55:e0:21:56:88:31:
c8:66:a0:c9:df:75:b7:c0:cb:76:44:f9:ac:2c:26:
c1:37:1d:70:32:d5:39:02:89:04:dd:32:9d:3d:11:
24:bb:cd:b8:55:3e:ca:1e:82:86:14:ab:1e:fc:d8:
38:d3:9c:4f:2b:5e:50:46:73:b4:d8:8e:50:79:d4:
a3:52:b3:97:07:57:55:a8:72:12:54:55:67:f0:c3:
79:fc:b2:40:91:81:c8:22:6a:dd:55:15:6c:d8:44:
2e:7a:b3:70:5a:e0:35:05:5b:f2:d6:b2:e0:07:ad:
30:d8:17:af:07:31:3f:05:0a:a9:68:f3:31:3c:72:
f9:a8:41:76:94:3a:6d:0a:89:4f:c6:b5:e2:e4:e8:
86:0b:8c:75:b4:12:61:9e:a5:8a:29:27:11:8f:cf:
81:48:b0:5c:76:2a:90:5c:af:2c:98:d3:0a:2b:fc:
8b:6b:43:b6:40:88:28:72:a6:45:df:61:3c:78:c7:
4c:35:b2:6d:6f:8e:61:01:08:ab:2a:b1:2f:31:93:
e7:0a:17:62:62:30:4f:d1:cf:f3:aa:9e:dd:67:34:
01:95:a7:a3:63:5f:82:b6:86:a3:f8:e1:28:a5:44:
f5:33:e0:45:4a:3d:07:72:2a:0b:08:1a:7b:ac:1b:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:E5:85:56:B3:6D:72:AA:E5:37:76:A3:97:72:07:05:04:97:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9D8D1605FF411F1A16A99EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.24.255
154.223.26.0/24
154.223.28.0/23
Signature Algorithm: sha256WithRSAEncryption
54:96:2f:99:b5:a6:34:dc:f5:35:73:55:ed:d0:a2:4e:79:4b:
83:49:31:b8:f9:b3:cd:28:25:12:bf:e9:2e:e5:33:7c:3b:c3:
b5:5f:30:70:78:41:23:aa:3f:a1:0d:35:38:94:24:af:35:f4:
08:0a:c8:b3:3f:21:6c:2d:1e:f0:97:f1:5e:2b:4f:62:16:ee:
df:10:d2:91:78:2b:7d:d6:59:1e:8f:78:2d:54:cf:eb:3e:6d:
8c:9b:09:98:24:fc:de:e8:6f:64:6b:31:7a:9f:47:5f:b7:db:
f7:34:68:8d:fe:22:12:3e:21:49:72:32:97:c2:88:ec:c3:e9:
bd:cd:11:0d:8e:24:09:9b:fc:7c:54:34:22:28:b8:31:e5:39:
d2:86:2f:a5:03:68:3b:d9:8f:24:94:3d:0e:82:89:12:aa:68:
31:86:d9:72:5e:7f:56:98:80:03:6f:14:d6:cd:0d:51:d8:6b:
3c:3d:b1:a0:47:aa:ab:3b:29:cc:54:83:d6:0b:22:69:61:9c:
bc:61:d7:01:e1:49:1e:bf:f2:fd:04:d5:73:e5:e6:93:81:c7:
1d:4d:6b:09:97:6d:86:65:45:49:d1:30:e5:4e:de:19:56:f8:
3b:ee:ab:00:7d:8c:d6:88:79:77:16:63:c9:e8:71:f5:09:b6:
fb:b3:45:0c
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAdGKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA0MDkwODA4WhcNMjYwNzEwMDkwODA4WjAYMRYw
FAYDVQQDEw02YTIxNDA3ZC01MTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsAWhhmOwjhxV4CFWiDHIZqDJ33W3wMt2RPmsLCbBNx1wMtU5AokE3TKd
PREku824VT7KHoKGFKse/Ng405xPK15QRnO02I5QedSjUrOXB1dVqHISVFVn8MN5
/LJAkYHIImrdVRVs2EQuerNwWuA1BVvy1rLgB60w2BevBzE/BQqpaPMxPHL5qEF2
lDptColPxrXi5OiGC4x1tBJhnqWKKScRj8+BSLBcdiqQXK8smNMKK/yLa0O2QIgo
cqZF32E8eMdMNbJtb45hAQirKrEvMZPnChdiYjBP0c/zqp7dZzQBlaejY1+Ctoaj
+OEopUT1M+BFSj0HcioLCBp7rBt19wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFNDi
5YVWs21yquU3dqOXcgcFBJdIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOUQ4RDE2MDVGRjQxMUYxQTE2QTk5RURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBASa3xADBACa3xgDBACa
3xoDBAGa3xwwDQYJKoZIhvcNAQELBQADggEBAFSWL5m1pjTc9TVzVe3Qok55S4NJ
Mbj5s80oJRK/6S7lM3w7w7VfMHB4QSOqP6ENNTiUJK819AgKyLM/IWwtHvCX8V4r
T2IW7t8Q0pF4K33WWR6PeC1Uz+s+bYybCZgk/N7ob2RrMXqfR1+32/c0aI3+IhI+
IUlyMpfCiOzD6b3NEQ2OJAmb/HxUNCIouDHlOdKGL6UDaDvZjySUPQ6CiRKqaDGG
2XJef1aYgANvFNbNDVHYazw9saBHqqs7KcxUg9YLImlhnLxh1wHhSR6/8v0E1XPl
5pOBxx1NawmXbYZlRUnRMOVO3hlW+DvuqwB9jNaIeXcWY8nocfUJtvuzRQw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:53 2026 by rpki-client