Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E2B862836111F195C0C90CCF1D38B0.roa
File: 16E2B862836111F195C0C90CCF1D38B0.roa (raw, json)
Hash identifier: 42QXix95JOpgbTaOjd/R+Oj694Bp2MdiIhjwhhEH3RU=
Subject key identifier: B4:C5:40:0C:98:8D:CB:9B:8A:7A:9A:55:A4:73:FE:2C:DD:C7:4E:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E2B862836111F195C0C90CCF1D38B0.roa
Signing time: Sun 19 Jul 2026 11:00:45 +0000
ROA not before: Sun 19 Jul 2026 11:00:41 +0000
ROA not after: Wed 21 Oct 2026 11:00:41 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121273 (0x1d9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 11:00:41 2026 GMT
Not After : Oct 21 11:00:41 2026 GMT
Subject: CN=6a5cae5d-7ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:15:58:03:7b:71:07:c4:56:44:9b:7c:2c:
93:66:d2:60:61:f5:1e:44:16:b4:bd:4d:1a:bf:3a:
67:e1:ab:af:55:d4:05:28:f8:59:4c:aa:76:d4:a8:
e0:4d:e8:0d:5a:57:95:ed:a2:60:8a:7c:c9:12:17:
9b:0a:2d:c3:c4:b7:56:fa:a8:9f:5b:68:09:67:d3:
35:d7:72:e2:7f:7b:f1:75:91:ff:95:6b:6f:25:ac:
ff:43:71:a2:22:45:7c:26:da:5b:58:56:f0:20:bb:
c5:05:ce:cc:a2:a9:08:83:e7:71:28:b8:3d:62:74:
57:4c:bc:83:0a:57:b1:ae:bb:00:4e:1d:89:81:f5:
ba:75:90:eb:d6:47:ef:5d:ff:d6:10:ee:08:8f:b1:
5c:29:7c:81:f5:2e:88:bc:89:5d:32:b8:ec:e7:1a:
3c:62:25:57:06:89:d9:26:19:7a:ac:60:8c:c3:6b:
1e:3e:dd:5b:77:c3:3c:ce:d0:1b:e4:73:0d:8f:27:
85:c8:ef:7a:1a:a9:50:45:0a:4c:2e:a5:7a:68:2a:
04:44:27:87:59:d8:ab:c8:6d:5a:77:f4:11:71:92:
9a:f2:1a:34:32:81:9f:e9:42:05:77:99:4f:7c:f5:
38:1c:7e:46:b8:6f:a5:3e:42:81:d1:b4:4e:14:80:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C5:40:0C:98:8D:CB:9B:8A:7A:9A:55:A4:73:FE:2C:DD:C7:4E:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E2B862836111F195C0C90CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:df:ba:ce:74:35:56:52:26:ec:d7:43:df:4e:a2:e3:1e:59:
68:10:3a:f5:b3:34:aa:1c:b8:90:9d:d9:72:1c:31:e5:a6:3f:
c7:84:5e:63:63:84:30:57:28:d8:81:d2:e2:ca:79:51:73:d4:
ed:4f:f4:9c:df:aa:cc:03:5b:0a:ff:26:44:13:78:8d:2e:b9:
5f:f6:0a:54:ec:ec:b9:45:fb:8e:4c:39:69:9e:56:dd:c9:88:
65:83:65:10:00:16:fa:0a:88:93:bf:b7:e5:11:28:01:a2:29:
fa:40:97:c7:72:aa:dd:01:d4:e1:8a:1f:37:86:cc:1c:b1:21:
a1:37:32:ac:a0:3a:88:31:d0:41:fd:57:66:d0:5c:cc:6f:43:
fc:18:31:b9:dc:4b:28:38:a6:df:a5:a8:29:a9:91:cd:9b:e0:
14:00:c8:4b:69:ff:3d:8f:f0:5f:b9:9c:5e:bd:e5:54:8b:b7:
60:17:6a:8c:46:eb:9a:25:8a:40:e3:76:b7:7c:e3:1b:b6:26:
55:0b:36:e0:14:16:17:7b:7a:be:62:e2:71:b1:ee:2d:10:58:
d8:55:88:c3:52:19:f7:a5:31:48:97:02:b6:5f:6d:48:19:c0:
af:5f:03:12:44:b0:7c:fc:b5:db:d8:0f:bc:96:6a:14:49:71:
db:29:31:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdm5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE5MTEwMDQxWhcNMjYxMDIxMTEwMDQxWjAYMRYw
FAYDVQQDEw02YTVjYWU1ZC03YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnSMVWAN7cQfEVkSbfCyTZtJgYfUeRBa0vU0avzpn4auvVdQFKPhZTKp2
1KjgTegNWleV7aJginzJEhebCi3DxLdW+qifW2gJZ9M113Lif3vxdZH/lWtvJaz/
Q3GiIkV8JtpbWFbwILvFBc7MoqkIg+dxKLg9YnRXTLyDClexrrsATh2JgfW6dZDr
1kfvXf/WEO4Ij7FcKXyB9S6IvIldMrjs5xo8YiVXBonZJhl6rGCMw2sePt1bd8M8
ztAb5HMNjyeFyO96GqlQRQpMLqV6aCoERCeHWdiryG1ad/QRcZKa8ho0MoGf6UIF
d5lPfPU4HH5GuG+lPkKB0bROFICppQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLTF
QAyYjcubinqaVaRz/izdx05LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNkUyQjg2MjgzNjExMUYxOTVDMEM5MENDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsatMA0GCSqGSIb3DQEB
CwUAA4IBAQB937rOdDVWUibs10PfTqLjHlloEDr1szSqHLiQndlyHDHlpj/HhF5j
Y4QwVyjYgdLiynlRc9TtT/Sc36rMA1sK/yZEE3iNLrlf9gpU7Oy5RfuOTDlpnlbd
yYhlg2UQABb6CoiTv7flESgBoin6QJfHcqrdAdThih83hswcsSGhNzKsoDqIMdBB
/Vdm0FzMb0P8GDG53EsoOKbfpagpqZHNm+AUAMhLaf89j/BfuZxeveVUi7dgF2qM
RuuaJYpA43a3fOMbtiZVCzbgFBYXe3q+YuJxse4tEFjYVYjDUhn3pTFIlwK2X21I
GcCvXwMSRLB8/LXb2A+8lmoUSXHbKTF8
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:53 2026 by rpki-client