Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D2AFD4E854E11F1894484BECE1D38B0.roa
File: 1D2AFD4E854E11F1894484BECE1D38B0.roa (raw, json)
Hash identifier: +KdeQurplqP+bBHwo9hCzjs0rRWVsqj19JOebB4haUw=
Subject key identifier: AC:F4:D5:71:41:BE:8F:F9:C7:E8:5D:3E:79:3C:20:BB:82:F4:AD:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DABE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D2AFD4E854E11F1894484BECE1D38B0.roa
Signing time: Tue 21 Jul 2026 21:49:57 +0000
ROA not before: Tue 21 Jul 2026 21:49:53 +0000
ROA not after: Tue 08 Sep 2026 21:49:53 +0000
asID: 202036
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121534 (0x1dabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:49:53 2026 GMT
Not After : Sep 8 21:49:53 2026 GMT
Subject: CN=6a5fe985-0b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:e7:32:fa:8a:9b:02:9a:6d:98:a2:b6:54:
e3:4d:58:28:14:65:f3:a6:38:e0:08:52:63:02:f9:
df:c8:df:e0:cd:ad:c7:02:bf:01:6f:fd:29:14:b1:
d4:be:b4:70:c7:91:ec:4b:69:c9:f7:f2:3f:02:25:
ad:c2:20:78:92:77:17:a8:20:b9:6f:6c:f6:bc:06:
ba:19:61:5c:cb:a2:87:d6:d3:d6:08:1d:a9:28:a4:
a8:b3:a9:e7:07:ef:22:22:a3:88:f0:a6:90:ed:db:
dc:ba:8e:dc:f4:b3:40:99:97:19:b0:fe:67:3a:88:
9d:f7:c8:66:05:a8:c2:95:c7:8c:e8:9b:3c:33:3b:
bc:72:7b:e9:f9:5f:43:1d:04:ef:3b:85:f3:11:e8:
2c:e8:39:84:55:17:ef:69:eb:1f:e7:b0:24:8e:df:
b7:66:b9:d4:b0:c1:a1:18:c8:68:78:aa:dc:7d:4e:
75:f5:62:d4:b1:72:70:a1:d9:c7:37:05:5a:84:ce:
9e:a1:a6:81:8c:06:e9:bf:e5:48:94:07:de:d7:00:
ff:0a:d6:e2:9b:9b:2f:b0:9d:d6:a9:ea:a9:37:10:
fa:bf:60:e7:39:b4:1a:66:71:6e:44:a4:87:50:46:
89:d5:d8:04:93:45:a7:ce:23:fd:04:01:f5:f3:f0:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F4:D5:71:41:BE:8F:F9:C7:E8:5D:3E:79:3C:20:BB:82:F4:AD:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D2AFD4E854E11F1894484BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
00:57:c9:8b:da:83:0c:e6:78:47:68:df:a2:64:f0:d5:97:e3:
95:46:ac:9e:59:c1:3e:d1:04:d6:9a:ac:80:5b:90:c3:57:72:
1c:41:c9:2a:83:42:90:d1:59:20:de:b5:f2:bc:18:15:7b:42:
d7:ba:77:de:cd:b9:ee:3c:09:44:13:0e:3c:eb:68:03:08:65:
c0:72:d9:23:b5:ee:58:bc:1c:41:47:d2:bb:bc:bd:61:12:97:
65:c5:6a:b3:82:0e:c1:fa:4f:42:03:b3:e5:77:79:52:11:04:
ff:ea:d3:cd:5d:c4:83:6d:55:64:71:46:d8:df:85:b8:2c:75:
40:e0:94:af:f2:86:31:c0:8f:9c:36:a3:d1:35:b6:21:53:e3:
89:0e:e9:a1:a6:dd:63:ff:97:06:f8:a2:77:b7:23:17:2f:b2:
be:6a:cd:94:78:83:58:ff:9d:68:1f:ac:8d:68:7b:0e:92:7d:
a9:c1:cf:5b:5d:28:70:a1:85:5f:1d:cd:58:f1:1e:20:a2:d6:
e7:fa:eb:65:d3:a7:e1:1b:61:cf:d2:e5:26:3f:75:78:a8:27:
fe:e1:ec:9d:8b:be:c3:a7:7d:6b:b7:ad:da:6e:f5:0b:1b:44:
8c:a6:15:6c:04:5f:0b:ee:88:bf:4b:12:7d:94:05:3e:e3:4b:
79:ee:36:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdq+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIxMjE0OTUzWhcNMjYwOTA4MjE0OTUzWjAYMRYw
FAYDVQQDEw02YTVmZTk4NS0wYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyuXnMvqKmwKabZiitlTjTVgoFGXzpjjgCFJjAvnfyN/gza3HAr8Bb/0p
FLHUvrRwx5HsS2nJ9/I/AiWtwiB4kncXqCC5b2z2vAa6GWFcy6KH1tPWCB2pKKSo
s6nnB+8iIqOI8KaQ7dvcuo7c9LNAmZcZsP5nOoid98hmBajClceM6Js8Mzu8cnvp
+V9DHQTvO4XzEegs6DmEVRfvaesf57Akjt+3ZrnUsMGhGMhoeKrcfU519WLUsXJw
odnHNwVahM6eoaaBjAbpv+VIlAfe1wD/Ctbim5svsJ3WqeqpNxD6v2DnObQaZnFu
RKSHUEaJ1dgEk0WnziP9BAH18/Am1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKz0
1XFBvo/5x+hdPnk8ILuC9K1EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRDJBRkQ0RTg1NEUxMUYxODk0NDg0QkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlNoMA0GCSqGSIb3DQEB
CwUAA4IBAQAAV8mL2oMM5nhHaN+iZPDVl+OVRqyeWcE+0QTWmqyAW5DDV3IcQckq
g0KQ0Vkg3rXyvBgVe0LXunfezbnuPAlEEw4862gDCGXActkjte5YvBxBR9K7vL1h
EpdlxWqzgg7B+k9CA7Pld3lSEQT/6tPNXcSDbVVkcUbY34W4LHVA4JSv8oYxwI+c
NqPRNbYhU+OJDumhpt1j/5cG+KJ3tyMXL7K+as2UeINY/51oH6yNaHsOkn2pwc9b
XShwoYVfHc1Y8R4gotbn+utl06fhG2HP0uUmP3V4qCf+4eydi77Dp31rt63abvUL
G0SMphVsBF8L7oi/SxJ9lAU+40t57jZH
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:01 2026 by rpki-client