Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08CD863E7D5411F19C9444ECCE1D38B0.roa
File: 08CD863E7D5411F19C9444ECCE1D38B0.roa (raw, json)
Hash identifier: 5BF0WJ9u8AVc2hYIWFXZpunO2BV+ptbm+1NNj3m3yh0=
Subject key identifier: 98:08:3A:6F:BA:AC:D2:A3:AB:19:BB:C5:65:60:7C:84:80:6D:6D:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D854
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08CD863E7D5411F19C9444ECCE1D38B0.roa
Signing time: Sat 11 Jul 2026 18:12:11 +0000
ROA not before: Sat 11 Jul 2026 18:12:06 +0000
ROA not after: Tue 18 Aug 2026 18:12:06 +0000
asID: 21859
IP address blocks: 154.193.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120916 (0x1d854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 18:12:06 2026 GMT
Not After : Aug 18 18:12:06 2026 GMT
Subject: CN=6a52877b-c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:bc:c6:77:f3:71:29:9f:82:23:cc:40:91:
aa:0f:7f:c6:e5:9a:40:ab:86:70:33:04:1b:24:c4:
52:e8:28:9a:7f:48:6e:7f:17:65:ba:4c:5f:5c:19:
3c:1d:92:64:6d:18:4d:91:10:a9:70:b8:f7:34:f9:
7b:02:6d:d2:13:a4:0b:9b:f4:59:b7:32:1c:d7:41:
f8:ea:62:6a:29:9b:d5:0f:ac:30:ac:1e:d7:69:4c:
c9:0d:d5:95:65:dd:be:99:a1:39:e5:f6:62:3c:62:
b2:e1:ef:1e:7b:a1:0c:c3:3e:b5:71:44:d2:37:26:
63:f1:58:a7:75:5c:81:10:73:68:92:11:3d:67:40:
07:fa:12:8d:46:3f:61:51:c9:f9:cd:2d:53:2e:c4:
1f:81:d8:b3:c8:22:2a:da:44:ab:f3:de:11:42:a1:
ae:d9:89:6c:53:10:cf:68:2d:50:ce:e2:3e:74:96:
0d:58:30:5b:4e:dc:fb:30:8b:25:82:4d:81:93:fd:
21:b4:01:e1:17:76:e8:7d:aa:f8:25:ea:a9:1c:89:
b8:0f:08:b6:e0:8e:c9:1f:05:f6:91:e7:58:39:0f:
ef:bd:37:ce:31:b9:c7:af:5f:0a:e6:6c:97:23:25:
13:9d:23:76:81:11:c9:3b:19:15:0f:c4:f0:08:1a:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:3A:6F:BA:AC:D2:A3:AB:19:BB:C5:65:60:7C:84:80:6D:6D:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08CD863E7D5411F19C9444ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:93:40:31:ba:d8:8a:7b:14:0b:1c:fd:ed:0f:a9:8f:bf:4f:
8b:7f:94:4c:70:8f:79:f2:6b:29:77:9b:68:75:e8:0a:37:6e:
f6:78:c0:b7:5f:76:50:1e:56:f3:9a:3c:4f:a2:16:b5:ed:86:
e9:ac:fc:68:40:04:e3:68:39:2a:91:6a:1a:b1:7b:08:f8:41:
2e:33:e2:c5:cb:fa:68:e7:96:9d:33:9b:79:c1:68:3f:7d:99:
f6:b3:2b:d8:20:9e:4a:4b:99:77:65:d4:b8:06:57:19:04:6c:
25:fd:af:dd:a1:d0:22:84:5b:27:25:2e:36:c3:c6:0b:c4:bc:
ac:47:02:2f:4e:6d:57:d8:51:08:f6:c6:11:be:5e:96:79:8d:
17:1e:8f:e4:dd:a8:d3:d8:d0:be:ca:2d:f8:3d:d2:fb:a6:0d:
b7:79:fe:fd:6c:80:c7:37:5e:9d:60:c4:4c:66:fc:c3:e4:18:
7f:0e:8e:be:5a:d1:73:dd:4e:ff:92:04:d0:fe:c0:46:08:bf:
03:bb:8e:45:8e:16:b8:b9:bf:81:b1:63:3d:c4:98:cb:ce:09:
90:34:ff:80:44:a4:14:ec:c8:4d:0c:0b:3b:48:ce:e0:b1:04:
6b:6e:d1:bb:10:9d:83:3c:df:a8:51:d2:07:59:c4:f0:2c:3e:
79:45:e2:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdhUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzExMTgxMjA2WhcNMjYwODE4MTgxMjA2WjAYMRYw
FAYDVQQDEw02YTUyODc3Yi1jNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArhq8xnfzcSmfgiPMQJGqD3/G5ZpAq4ZwMwQbJMRS6Ciaf0hufxdlukxf
XBk8HZJkbRhNkRCpcLj3NPl7Am3SE6QLm/RZtzIc10H46mJqKZvVD6wwrB7XaUzJ
DdWVZd2+maE55fZiPGKy4e8ee6EMwz61cUTSNyZj8VindVyBEHNokhE9Z0AH+hKN
Rj9hUcn5zS1TLsQfgdizyCIq2kSr894RQqGu2YlsUxDPaC1QzuI+dJYNWDBbTtz7
MIslgk2Bk/0htAHhF3bofar4JeqpHIm4Dwi24I7JHwX2kedYOQ/vvTfOMbnHr18K
5myXIyUTnSN2gRHJOxkVD8TwCBoHdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJgI
Om+6rNKjqxm7xWVgfISAbW2IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOENEODYzRTdENTQxMUYxOUM5NDQ0RUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsH4MA0GCSqGSIb3DQEB
CwUAA4IBAQBrk0AxutiKexQLHP3tD6mPv0+Lf5RMcI958mspd5todegKN272eMC3
X3ZQHlbzmjxPoha17YbprPxoQATjaDkqkWoasXsI+EEuM+LFy/po55adM5t5wWg/
fZn2syvYIJ5KS5l3ZdS4BlcZBGwl/a/dodAihFsnJS42w8YLxLysRwIvTm1X2FEI
9sYRvl6WeY0XHo/k3ajT2NC+yi34PdL7pg23ef79bIDHN16dYMRMZvzD5Bh/Do6+
WtFz3U7/kgTQ/sBGCL8Du45Fjha4ub+BsWM9xJjLzgmQNP+ARKQU7MhNDAs7SM7g
sQRrbtG7EJ2DPN+oUdIHWcTwLD55ReIv
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:14 2026 by rpki-client