Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1255FAE2802411F181082413CF1D38B0.roa
File: 1255FAE2802411F181082413CF1D38B0.roa (raw, json)
Hash identifier: 4cMRbAkrPO38w5cqWJ638Tb1wcrjiwc22vC/J8U8SRw=
Subject key identifier: 95:E5:FA:8D:AB:DB:76:44:67:AF:E2:72:E4:BE:06:1A:A4:EE:F0:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D90D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1255FAE2802411F181082413CF1D38B0.roa
Signing time: Wed 15 Jul 2026 08:06:24 +0000
ROA not before: Wed 15 Jul 2026 08:06:20 +0000
ROA not after: Sun 25 Jul 2027 08:06:20 +0000
asID: 212552
IP address blocks: 154.211.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121101 (0x1d90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 08:06:20 2026 GMT
Not After : Jul 25 08:06:20 2027 GMT
Subject: CN=6a573f80-510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:59:58:31:72:67:f0:0d:01:bb:67:70:02:
65:f5:45:c5:64:45:e5:dc:82:2a:7b:a7:55:15:c3:
b0:43:b0:c9:4e:c9:6a:e3:75:8a:7b:73:73:ce:fd:
5e:da:55:72:e2:57:9f:b5:42:9b:c3:22:56:17:97:
91:c5:f9:e0:79:b8:cd:6a:9f:99:ac:33:42:64:ae:
82:ea:6c:d8:c4:ef:8b:a1:8d:66:52:47:54:3a:18:
ae:38:6b:29:2f:cc:f1:a6:09:3c:f6:16:2f:f0:a6:
b0:92:01:f0:e0:b9:f2:f4:e7:ba:e5:73:4b:3a:90:
db:4a:d3:d8:be:a4:29:ce:14:a4:d1:86:73:ca:bf:
97:5b:e5:0a:bc:65:81:91:86:23:88:1a:6c:9d:f3:
d2:d3:23:d1:8f:68:55:57:36:dd:89:e1:a3:6f:b8:
da:3c:e6:7c:60:61:48:06:eb:2b:dd:e7:41:17:77:
93:79:4f:fb:7c:36:a5:5e:4c:0b:83:95:24:b9:e0:
fc:e1:73:10:08:3b:7b:94:4f:ea:27:5d:b2:bd:02:
c7:87:36:97:87:31:86:e8:6f:79:62:a9:07:7d:ba:
2a:a3:1a:ac:2e:0d:6a:a2:2e:ce:c5:8f:64:4b:b7:
fc:c1:ef:2e:06:c0:ef:f0:39:04:3c:a4:1e:7e:62:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:FA:8D:AB:DB:76:44:67:AF:E2:72:E4:BE:06:1A:A4:EE:F0:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1255FAE2802411F181082413CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:95:2b:dd:04:da:28:80:90:c9:f1:cb:b4:26:8f:6b:9b:da:
58:4a:d5:e8:89:11:ec:98:8d:96:98:cd:a9:20:d5:a2:35:f1:
24:74:1b:b3:42:be:db:32:f1:86:26:3f:9e:9d:52:81:3d:01:
b7:ad:0d:c8:81:63:e7:ab:5e:c6:af:4e:50:ee:ed:fc:77:2f:
55:30:e2:7d:11:d7:83:67:9a:ff:69:b9:08:40:42:c1:ff:fd:
03:09:74:fc:8c:b2:ca:47:7a:36:9d:4d:dc:e5:bf:46:3e:fa:
03:b4:44:b9:72:04:a0:e8:6b:ec:ea:1b:a7:22:7c:c7:13:2f:
e4:9a:68:fa:e2:49:7d:2a:5b:53:ce:69:0c:42:cf:a0:9b:99:
cc:03:f5:5e:70:a6:c5:67:e0:92:63:4d:ea:7b:be:a8:c1:ad:
7d:42:8d:ef:42:16:9a:eb:b0:c2:98:5d:b3:80:04:4f:a9:12:
d2:b5:d8:e2:e8:9f:eb:90:a7:16:12:a5:69:12:63:c4:d1:90:
76:fe:b9:2d:f2:7c:68:58:64:a4:15:6d:99:2a:ac:1d:c8:2d:
29:0f:41:ba:a0:69:6a:32:fa:95:2c:7b:23:e9:e0:7c:2c:4e:
58:d8:f2:44:c8:71:68:d5:d2:d2:26:53:7f:7e:48:7a:1a:2e:
c7:59:9e:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdkNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE1MDgwNjIwWhcNMjcwNzI1MDgwNjIwWjAYMRYw
FAYDVQQDEw02YTU3M2Y4MC01MTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApiZZWDFyZ/ANAbtncAJl9UXFZEXl3IIqe6dVFcOwQ7DJTslq43WKe3Nz
zv1e2lVy4leftUKbwyJWF5eRxfngebjNap+ZrDNCZK6C6mzYxO+LoY1mUkdUOhiu
OGspL8zxpgk89hYv8KawkgHw4Lny9Oe65XNLOpDbStPYvqQpzhSk0YZzyr+XW+UK
vGWBkYYjiBpsnfPS0yPRj2hVVzbdieGjb7jaPOZ8YGFIBusr3edBF3eTeU/7fDal
XkwLg5UkueD84XMQCDt7lE/qJ12yvQLHhzaXhzGG6G95YqkHfboqoxqsLg1qoi7O
xY9kS7f8we8uBsDv8DkEPKQefmJEVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJXl
+o2r23ZEZ6/icuS+Bhqk7vCRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMjU1RkFFMjgwMjQxMUYxODEwODI0MTNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMCMA0GCSqGSIb3DQEB
CwUAA4IBAQANlSvdBNoogJDJ8cu0Jo9rm9pYStXoiRHsmI2WmM2pINWiNfEkdBuz
Qr7bMvGGJj+enVKBPQG3rQ3IgWPnq17Gr05Q7u38dy9VMOJ9EdeDZ5r/abkIQELB
//0DCXT8jLLKR3o2nU3c5b9GPvoDtES5cgSg6Gvs6hunInzHEy/kmmj64kl9KltT
zmkMQs+gm5nMA/VecKbFZ+CSY03qe76owa19Qo3vQhaa67DCmF2zgARPqRLStdji
6J/rkKcWEqVpEmPE0ZB2/rkt8nxoWGSkFW2ZKqwdyC0pD0G6oGlqMvqVLHsj6eB8
LE5Y2PJEyHFo1dLSJlN/fkh6Gi7HWZ6G
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:30 2026 by rpki-client