Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DD694A716C11F189B154D5CE1D38B0.roa
File: 61DD694A716C11F189B154D5CE1D38B0.roa (raw, json)
Hash identifier: sKDRsylfUS6kUMHQNifLPsmBY5oY6gMlTwYHgWwHErk=
Subject key identifier: AF:C6:59:C0:24:D5:BF:A7:1C:BB:A6:B8:FA:02:2E:FD:75:61:19:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D56B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DD694A716C11F189B154D5CE1D38B0.roa
Signing time: Fri 26 Jun 2026 14:36:14 +0000
ROA not before: Fri 26 Jun 2026 14:36:09 +0000
ROA not after: Sun 02 Aug 2026 14:36:09 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120171 (0x1d56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 14:36:09 2026 GMT
Not After : Aug 2 14:36:09 2026 GMT
Subject: CN=6a3e8e5e-b265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:4e:ea:0f:cb:4b:c7:0f:46:0e:f2:8b:7c:
68:3a:19:c4:17:ff:0c:22:b7:89:76:d7:3c:f2:26:
39:8d:00:2b:b9:af:bf:7a:e2:54:2a:1b:fe:f1:57:
91:b0:95:48:2e:d2:60:e6:01:e4:a4:cc:fa:fe:19:
53:20:99:34:f4:02:f8:c8:c8:ae:c4:5a:1c:98:b7:
17:67:d1:2b:62:b0:b1:e3:d0:0d:68:da:78:77:da:
18:19:1a:5f:b5:94:08:e9:67:00:41:2b:20:da:03:
96:51:2e:a1:8e:25:01:6f:51:97:5a:ea:fa:2e:fa:
aa:6e:2e:cc:14:2f:49:cf:dd:40:f9:9d:d1:9c:38:
89:35:53:90:ab:82:a9:11:f1:c4:19:ea:bf:ff:3c:
73:11:29:b7:7c:9e:ed:4f:d4:21:a5:60:53:95:3b:
03:73:8a:5c:5d:da:5d:4e:b8:aa:ab:d7:d4:18:82:
90:7f:52:da:4c:d1:29:47:d9:7f:50:09:85:0a:38:
e5:57:84:2b:96:59:e3:b1:71:99:de:72:09:1f:2a:
16:63:fd:10:7d:0e:cf:7c:28:bf:74:5e:c5:e8:38:
7a:26:e5:73:e4:2b:08:e4:c3:45:43:8e:39:a1:0e:
8a:b8:79:70:3e:0d:1e:b8:00:4b:32:fc:fc:19:ca:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C6:59:C0:24:D5:BF:A7:1C:BB:A6:B8:FA:02:2E:FD:75:61:19:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DD694A716C11F189B154D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f9:4c:45:d9:d4:dd:6b:9d:10:cf:a9:b0:6a:26:6d:37:cc:
23:2d:8f:ef:8b:11:56:e6:a7:c7:37:9e:89:b0:57:e7:23:70:
32:e0:6e:50:58:05:50:7f:4e:6e:83:63:61:5c:87:5c:67:ec:
17:da:74:fa:ff:ca:00:bd:4a:cb:fb:e1:18:9b:33:50:16:19:
6a:dc:c1:a7:af:03:40:19:48:0c:8b:9b:d0:16:1a:53:1e:af:
a4:95:17:24:b7:21:ab:4c:e2:0c:56:e5:c0:af:37:af:ee:1e:
fd:78:7f:c6:60:0e:11:5d:c9:f7:e5:0c:61:eb:dc:f0:48:4a:
36:e6:6a:63:ac:32:64:12:72:fa:78:b3:36:1b:b5:ee:a8:24:
98:24:06:49:2c:83:ab:50:66:ee:49:3e:0b:c0:60:a7:0d:7e:
81:bd:7f:c1:82:c8:38:33:07:01:73:88:b0:16:67:01:d9:10:
9e:37:83:f7:96:1c:31:18:d6:bb:3f:00:d0:1c:a1:85:a1:8c:
7c:ac:95:e3:9c:82:32:28:19:9b:84:22:d3:db:80:33:92:5a:
53:7f:4d:5e:1d:1f:b0:bb:3c:d7:a0:9c:97:44:48:90:00:45:
e3:f2:bb:4e:f1:89:9e:4c:4b:38:4f:22:9e:f4:57:e4:f3:83:
55:bd:9d:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdVrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MTQzNjA5WhcNMjYwODAyMTQzNjA5WjAYMRYw
FAYDVQQDEw02YTNlOGU1ZS1iMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAopZO6g/LS8cPRg7yi3xoOhnEF/8MIreJdtc88iY5jQArua+/euJUKhv+
8VeRsJVILtJg5gHkpMz6/hlTIJk09AL4yMiuxFocmLcXZ9ErYrCx49ANaNp4d9oY
GRpftZQI6WcAQSsg2gOWUS6hjiUBb1GXWur6Lvqqbi7MFC9Jz91A+Z3RnDiJNVOQ
q4KpEfHEGeq//zxzESm3fJ7tT9QhpWBTlTsDc4pcXdpdTriqq9fUGIKQf1LaTNEp
R9l/UAmFCjjlV4QrllnjsXGZ3nIJHyoWY/0QfQ7PfCi/dF7F6Dh6JuVz5CsI5MNF
Q445oQ6KuHlwPg0euABLMvz8GcqF+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK/G
WcAk1b+nHLumuPoCLv11YRnrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MURENjk0QTcxNkMxMUYxODlCMTU0RDVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4MMA0GCSqGSIb3DQEB
CwUAA4IBAQDE+UxF2dTda50Qz6mwaiZtN8wjLY/vixFW5qfHN56JsFfnI3Ay4G5Q
WAVQf05ug2NhXIdcZ+wX2nT6/8oAvUrL++EYmzNQFhlq3MGnrwNAGUgMi5vQFhpT
Hq+klRcktyGrTOIMVuXArzev7h79eH/GYA4RXcn35Qxh69zwSEo25mpjrDJkEnL6
eLM2G7XuqCSYJAZJLIOrUGbuST4LwGCnDX6BvX/Bgsg4MwcBc4iwFmcB2RCeN4P3
lhwxGNa7PwDQHKGFoYx8rJXjnIIyKBmbhCLT24AzklpTf01eHR+wuzzXoJyXREiQ
AEXj8rtO8YmeTEs4TyKe9Ffk84NVvZ1x
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:10 2026 by rpki-client