Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0312711281C011F1AAD8A6A7CE1D38B0.roa
File: 0312711281C011F1AAD8A6A7CE1D38B0.roa (raw, json)
Hash identifier: E86rhV4R0vrw8vy/NyXlyBfYl6+bnuqFmwm2BcbYZ4A=
Subject key identifier: CD:01:82:C9:98:47:42:4E:83:ED:94:BA:CE:96:C5:30:A1:1C:6B:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D967
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0312711281C011F1AAD8A6A7CE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:15:11 +0000
ROA not before: Fri 17 Jul 2026 09:15:07 +0000
ROA not after: Mon 24 Aug 2026 09:15:07 +0000
asID: 204770
IP address blocks: 154.88.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121191 (0x1d967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:15:07 2026 GMT
Not After : Aug 24 09:15:07 2026 GMT
Subject: CN=6a59f29f-4906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:71:84:fd:34:1f:1f:d5:63:93:e1:73:86:
f8:fa:4e:4a:47:1d:0c:f7:84:f2:a5:8f:82:ef:3d:
84:90:74:6a:c8:70:4c:a4:c9:2f:98:1f:38:07:62:
25:e1:e3:54:95:03:3c:02:28:32:9f:db:50:18:c6:
33:5b:77:9b:bc:26:01:62:b2:ff:e2:8d:06:f4:cf:
04:b6:4e:d9:8e:0a:68:20:2c:c9:4a:96:43:2d:55:
9c:92:bc:db:12:2c:23:b1:97:35:a4:54:d5:24:5e:
7e:6b:89:ed:d6:9f:9b:5b:6f:66:83:29:03:f3:2a:
e1:8b:73:2b:58:24:b4:e5:9b:b3:88:1a:b1:4a:04:
f5:62:52:dd:6a:05:e0:67:ef:82:11:6e:00:08:a6:
99:5a:8c:d5:57:6a:b0:94:85:8c:f7:d3:50:da:58:
75:9a:72:1f:eb:48:17:de:66:52:88:3a:8a:c3:ae:
d6:c5:70:f7:c1:19:e5:57:be:35:b5:c5:ff:22:08:
ba:4c:3f:91:df:8f:82:fa:5d:97:7e:67:e8:1a:c9:
ee:6f:c3:30:ce:6d:56:e3:15:aa:6b:6d:5b:31:9e:
0d:74:58:b3:c6:44:75:97:da:b1:1c:f1:55:58:5b:
a4:9e:0b:79:6a:bb:7f:29:f9:75:91:e8:b4:b6:f0:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:82:C9:98:47:42:4E:83:ED:94:BA:CE:96:C5:30:A1:1C:6B:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0312711281C011F1AAD8A6A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d6:f3:99:15:db:fa:04:ba:24:8e:f1:17:ba:82:ec:e7:b4:
d4:d7:7d:6c:51:2c:fa:2c:0e:72:c4:a6:5f:d5:ce:df:53:3a:
d5:87:d2:2d:cd:a1:d5:17:79:9c:67:b9:a3:f6:de:f5:da:94:
df:8a:ad:d8:ca:53:5f:26:0e:27:6d:7f:17:9f:82:a7:7d:61:
7a:91:8c:c4:d1:8c:eb:9d:e3:07:9e:fc:51:fa:f9:f5:9b:4a:
04:7e:2d:2d:30:5a:72:3a:dc:70:91:8f:64:ae:0b:dc:31:3f:
6a:af:ba:3f:5d:d0:05:af:55:00:dc:04:7d:6f:67:2d:f7:54:
d9:83:4a:c7:7b:37:79:38:90:33:2c:3b:3b:ba:b2:84:28:d3:
ea:25:cf:6a:11:ee:14:83:c9:b3:28:f1:07:ed:22:a4:7c:13:
4f:28:49:ae:9e:17:90:d1:76:46:8c:28:bb:a4:87:00:1c:0c:
34:25:9f:5f:e7:c6:96:7c:75:35:68:13:90:50:8d:1d:ff:fa:
4c:f3:70:e6:a4:1e:2e:2f:1c:94:e6:93:0a:b7:14:3b:21:7c:
b4:37:ef:85:50:4f:49:40:29:b1:d4:42:8e:ff:05:1b:f9:f9:
d8:9b:ff:c0:05:00:d6:c5:cd:f4:a3:68:d4:fa:3a:ce:27:93:
8f:c0:a0:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdlnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE3MDkxNTA3WhcNMjYwODI0MDkxNTA3WjAYMRYw
FAYDVQQDEw02YTU5ZjI5Zi00OTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsMdxhP00Hx/VY5Phc4b4+k5KRx0M94TypY+C7z2EkHRqyHBMpMkvmB84
B2Il4eNUlQM8Aigyn9tQGMYzW3ebvCYBYrL/4o0G9M8Etk7ZjgpoICzJSpZDLVWc
krzbEiwjsZc1pFTVJF5+a4nt1p+bW29mgykD8yrhi3MrWCS05ZuziBqxSgT1YlLd
agXgZ++CEW4ACKaZWozVV2qwlIWM99NQ2lh1mnIf60gX3mZSiDqKw67WxXD3wRnl
V741tcX/Igi6TD+R34+C+l2XfmfoGsnub8Mwzm1W4xWqa21bMZ4NdFizxkR1l9qx
HPFVWFukngt5art/Kfl1kei0tvASTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM0B
gsmYR0JOg+2Uus6WxTChHGv3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMzEyNzExMjgxQzAxMUYxQUFEOEE2QTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgDMA0GCSqGSIb3DQEB
CwUAA4IBAQB11vOZFdv6BLokjvEXuoLs57TU131sUSz6LA5yxKZf1c7fUzrVh9It
zaHVF3mcZ7mj9t712pTfiq3YylNfJg4nbX8Xn4KnfWF6kYzE0YzrneMHnvxR+vn1
m0oEfi0tMFpyOtxwkY9krgvcMT9qr7o/XdAFr1UA3AR9b2ct91TZg0rHezd5OJAz
LDs7urKEKNPqJc9qEe4Ug8mzKPEH7SKkfBNPKEmunheQ0XZGjCi7pIcAHAw0JZ9f
58aWfHU1aBOQUI0d//pM83DmpB4uLxyU5pMKtxQ7IXy0N++FUE9JQCmx1EKO/wUb
+fnYm//ABQDWxc30o2jU+jrOJ5OPwKCL
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:24 2026 by rpki-client