Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F8E6484C5711F185C25A19CF1D38B0.roa
File: 91F8E6484C5711F185C25A19CF1D38B0.roa (raw, json)
Hash identifier: 6vMmZy8WEGCPiDfgtQUajZrdvG8HlKP9GuaqGBa0cCM=
Subject key identifier: 65:50:29:1C:E0:A1:BF:67:40:FE:E7:F6:C4:B3:84:60:1C:80:EA:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F8E6484C5711F185C25A19CF1D38B0.roa
Signing time: Sun 10 May 2026 10:04:02 +0000
ROA not before: Sun 10 May 2026 10:03:58 +0000
ROA not after: Wed 10 Jun 2026 10:03:58 +0000
asID: 32167
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 12:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117427 (0x1cab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 10:03:58 2026 GMT
Not After : Jun 10 10:03:58 2026 GMT
Subject: CN=6a005812-afe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:e1:3e:71:4e:de:a5:39:eb:1d:93:c1:81:
75:b0:c3:2e:04:48:f0:ef:f7:d7:29:b5:c9:f3:93:
b3:6c:e5:0a:33:1f:49:36:b0:ef:49:df:d6:b9:c1:
7c:47:0b:55:a8:fd:c5:5a:8c:d0:fe:b9:b0:dd:85:
cf:9f:62:99:a3:18:64:91:48:a4:65:fa:d2:cf:9f:
22:5d:47:1c:af:2e:50:22:7a:2a:3e:33:f7:cc:47:
74:87:9a:a4:75:9a:ec:b2:c9:4d:b0:f7:e4:2d:bd:
34:a1:23:dd:48:ae:2c:f1:5c:61:03:86:12:a9:b8:
c7:17:23:2f:30:83:05:53:1c:59:b3:a4:cd:67:b2:
86:ed:b2:e8:55:84:9e:75:8b:b8:9a:d2:8a:b5:9f:
32:9d:67:1d:78:eb:42:e3:90:2a:c7:39:25:af:a2:
36:a6:31:94:1a:a3:17:04:94:da:70:8f:97:d8:21:
0b:58:a9:99:e0:c1:a5:4f:f5:8b:76:35:01:00:78:
ff:73:18:b4:6f:d0:22:3b:61:00:dd:57:45:d5:88:
9b:cd:79:70:55:39:11:29:0e:3a:34:f9:67:7c:9f:
d6:71:fe:21:f5:35:2b:23:10:9f:c5:44:4c:5b:65:
22:6e:59:d4:99:b9:6c:bb:ee:1b:20:39:32:29:53:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:29:1C:E0:A1:BF:67:40:FE:E7:F6:C4:B3:84:60:1C:80:EA:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F8E6484C5711F185C25A19CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c1:3c:71:0a:82:5e:3b:54:03:63:4c:cc:a3:3b:bc:a4:fd:
f1:29:f0:89:61:5a:45:3a:67:26:91:6d:76:c8:ce:68:a3:87:
a4:49:53:e6:63:6c:02:a7:6c:64:7e:67:13:68:94:a0:63:2e:
4a:cd:9d:c1:72:1c:c5:67:fb:74:b1:54:81:76:61:f9:5f:1a:
c6:67:c1:52:a2:b0:2c:56:21:f6:a3:65:25:84:4b:55:a6:1c:
ae:1f:26:45:63:cb:f7:ac:2b:2f:02:74:23:2a:7b:b6:cb:e1:
71:28:c2:f6:08:4e:eb:19:68:f0:df:6a:ae:13:44:9d:30:d2:
df:b8:83:35:96:66:a6:86:cf:13:30:18:50:38:93:1b:39:1f:
28:ff:6a:97:04:ef:14:25:c5:f6:43:85:78:78:8f:05:7d:79:
b0:17:0a:8f:0f:19:24:bc:ea:5f:a0:59:ce:3d:47:26:fc:8d:
93:72:ba:bd:b7:a7:91:dc:ed:45:ef:7f:e4:c0:e4:b3:1e:ab:
bf:90:f2:c3:3d:3e:a0:88:24:a3:bb:7b:c6:04:0a:b8:cb:72:
60:43:ca:17:d0:e5:ba:74:51:70:8a:99:ab:ec:e0:2d:c5:2a:
7d:26:bd:ac:ae:21:a6:c8:f2:76:88:eb:48:11:ec:db:c4:6b:
56:f5:f8:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcqzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTEwMTAwMzU4WhcNMjYwNjEwMTAwMzU4WjAYMRYw
FAYDVQQDEw02YTAwNTgxMi1hZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtHbhPnFO3qU56x2TwYF1sMMuBEjw7/fXKbXJ85OzbOUKMx9JNrDvSd/W
ucF8RwtVqP3FWozQ/rmw3YXPn2KZoxhkkUikZfrSz58iXUccry5QInoqPjP3zEd0
h5qkdZrssslNsPfkLb00oSPdSK4s8VxhA4YSqbjHFyMvMIMFUxxZs6TNZ7KG7bLo
VYSedYu4mtKKtZ8ynWcdeOtC45Aqxzklr6I2pjGUGqMXBJTacI+X2CELWKmZ4MGl
T/WLdjUBAHj/cxi0b9AiO2EA3VdF1YibzXlwVTkRKQ46NPlnfJ/Wcf4h9TUrIxCf
xURMW2UiblnUmblsu+4bIDkyKVN2nQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGVQ
KRzgob9nQP7n9sSzhGAcgOqJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MUY4RTY0ODRDNTcxMUYxODVDMjVBMTlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlNiMA0GCSqGSIb3DQEB
CwUAA4IBAQAxwTxxCoJeO1QDY0zMozu8pP3xKfCJYVpFOmcmkW12yM5oo4ekSVPm
Y2wCp2xkfmcTaJSgYy5KzZ3BchzFZ/t0sVSBdmH5XxrGZ8FSorAsViH2o2UlhEtV
phyuHyZFY8v3rCsvAnQjKnu2y+FxKML2CE7rGWjw32quE0SdMNLfuIM1lmamhs8T
MBhQOJMbOR8o/2qXBO8UJcX2Q4V4eI8FfXmwFwqPDxkkvOpfoFnOPUcm/I2Tcrq9
t6eR3O1F73/kwOSzHqu/kPLDPT6giCSju3vGBAq4y3JgQ8oX0OW6dFFwipmr7OAt
xSp9Jr2sriGmyPJ2iOtIEezbxGtW9fig
-----END CERTIFICATE-----
Generated at Tue May 12 21:27:58 2026 by rpki-client