Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8365BC24CE011F1B5829ECFCE1D38B0.roa
File: B8365BC24CE011F1B5829ECFCE1D38B0.roa (raw, json)
Hash identifier: XP6pogASnnChU7mLwum7QrBSi4VoqGIDtbeDzMwef6w=
Subject key identifier: A6:58:A8:68:45:D1:6D:07:46:B8:E5:01:70:6D:D8:F4:CC:D3:D6:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CADC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8365BC24CE011F1B5829ECFCE1D38B0.roa
Signing time: Mon 11 May 2026 02:25:47 +0000
ROA not before: Mon 11 May 2026 02:25:43 +0000
ROA not after: Thu 21 May 2026 02:25:43 +0000
asID: 17497
IP address blocks: 154.90.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117468 (0x1cadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 02:25:43 2026 GMT
Not After : May 21 02:25:43 2026 GMT
Subject: CN=6a013e2b-cfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b0:a8:c3:e4:fd:9f:46:ad:27:bf:c6:54:64:
e1:b5:92:e4:1e:bd:1f:11:30:b9:2f:94:4e:a9:5e:
2c:8f:78:79:6b:0f:27:fb:a4:ce:03:ad:6b:b8:95:
c8:db:0d:a3:73:07:40:74:53:29:0d:02:d4:c7:c7:
3a:bc:f3:2c:ca:66:2b:6a:48:35:ab:69:dd:de:70:
f5:74:e1:d2:2a:e2:48:4b:5a:eb:8a:fe:8e:fc:d4:
11:9c:ba:60:34:ef:16:b3:ac:9c:6c:16:2c:5c:66:
5e:3f:57:17:23:4b:b3:b2:c3:c6:5e:92:c0:88:56:
35:fd:89:75:53:14:54:05:3e:1f:3a:1c:9e:2a:6d:
c8:1c:c8:d2:ff:4c:76:6f:02:9e:b9:56:55:e8:8d:
e3:87:d6:9c:ee:dc:8d:d6:9c:a3:9f:e5:67:65:72:
6b:c0:88:70:72:d6:69:eb:71:8a:7e:f7:4d:28:1a:
91:4f:8f:ad:c4:f2:a3:9b:5b:68:16:41:26:5c:52:
15:4f:8d:a8:5d:b1:5e:4b:b1:e9:48:f4:03:32:18:
1f:aa:56:5f:2a:e1:aa:60:8f:f2:41:20:db:62:f6:
5f:fd:ef:74:7d:99:0c:df:fe:1b:b6:80:78:54:7b:
76:62:a3:da:14:58:7f:d5:ac:ee:06:20:78:41:ab:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:A8:68:45:D1:6D:07:46:B8:E5:01:70:6D:D8:F4:CC:D3:D6:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8365BC24CE011F1B5829ECFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:d2:8e:ec:18:55:79:d3:fa:13:27:62:95:74:28:d0:00:37:
a7:a8:57:fb:95:49:42:5a:9d:71:60:c6:6e:66:e8:cc:f8:c3:
4d:04:5e:4d:18:47:a7:1f:4e:1b:9c:45:2a:fe:53:22:f7:bb:
8d:8a:a3:ed:21:a0:0c:b4:fb:d4:bb:96:1e:ad:e5:b0:5e:37:
34:e2:74:33:44:f3:3c:7d:c8:73:ee:26:fa:24:ab:48:c0:2c:
90:c2:9e:f6:db:32:26:34:90:58:15:f7:7b:83:1b:03:6a:09:
a5:93:ad:2f:e1:52:d4:a7:46:53:77:64:55:f0:2a:42:f1:2c:
07:2f:1e:20:2a:da:50:b3:af:87:e6:0f:c4:47:b1:34:6d:f8:
db:bd:b3:11:32:71:27:21:16:77:6c:07:82:d8:28:17:5c:b0:
f7:e2:05:ae:b9:44:0c:0f:f5:37:f7:08:a3:c8:56:9e:82:b9:
67:8e:db:82:ea:0e:84:32:b4:d4:66:c1:68:b5:45:48:d3:fe:
58:a6:b9:5c:e7:b7:c3:bd:db:b8:99:a9:e2:12:78:96:5c:5e:
3a:72:7e:b6:34:c2:5f:5c:24:f5:2a:7e:4b:ff:48:14:a9:43:
34:bc:b3:ed:d0:aa:c4:a1:17:63:de:8a:5a:af:58:83:5b:74:
51:ec:fd:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcrcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTExMDIyNTQzWhcNMjYwNTIxMDIyNTQzWjAYMRYw
FAYDVQQDEw02YTAxM2UyYi1jZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8LCow+T9n0atJ7/GVGThtZLkHr0fETC5L5ROqV4sj3h5aw8n+6TOA61r
uJXI2w2jcwdAdFMpDQLUx8c6vPMsymYrakg1q2nd3nD1dOHSKuJIS1rriv6O/NQR
nLpgNO8Ws6ycbBYsXGZeP1cXI0uzssPGXpLAiFY1/Yl1UxRUBT4fOhyeKm3IHMjS
/0x2bwKeuVZV6I3jh9ac7tyN1pyjn+VnZXJrwIhwctZp63GKfvdNKBqRT4+txPKj
m1toFkEmXFIVT42oXbFeS7HpSPQDMhgfqlZfKuGqYI/yQSDbYvZf/e90fZkM3/4b
toB4VHt2YqPaFFh/1azuBiB4QatRhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKZY
qGhF0W0HRrjlAXBt2PTM09ZXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CODM2NUJDMjRDRTAxMUYxQjU4MjlFQ0ZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlqKMA0GCSqGSIb3DQEB
CwUAA4IBAQCk0o7sGFV50/oTJ2KVdCjQADenqFf7lUlCWp1xYMZuZujM+MNNBF5N
GEenH04bnEUq/lMi97uNiqPtIaAMtPvUu5YereWwXjc04nQzRPM8fchz7ib6JKtI
wCyQwp722zImNJBYFfd7gxsDagmlk60v4VLUp0ZTd2RV8CpC8SwHLx4gKtpQs6+H
5g/ER7E0bfjbvbMRMnEnIRZ3bAeC2CgXXLD34gWuuUQMD/U39wijyFaegrlnjtuC
6g6EMrTUZsFotUVI0/5Yprlc57fDvdu4maniEniWXF46cn62NMJfXCT1Kn5L/0gU
qUM0vLPt0KrEoRdj3opar1iDW3RR7P0t
-----END CERTIFICATE-----
Generated at Wed May 13 11:50:03 2026 by rpki-client