Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/243447F8785611F1A49476E6CE1D38B0.roa
File: 243447F8785611F1A49476E6CE1D38B0.roa (raw, json)
Hash identifier: 8+bf6O7akmUn0KZZbge/xjgMn8FlNd9DREGve/kK8U8=
Subject key identifier: 46:7C:DE:4F:10:D0:1E:FF:29:DB:FB:AF:A9:43:99:75:43:CD:3E:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D70E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/243447F8785611F1A49476E6CE1D38B0.roa
Signing time: Sun 05 Jul 2026 09:44:40 +0000
ROA not before: Sun 05 Jul 2026 09:44:35 +0000
ROA not after: Thu 13 Aug 2026 09:44:35 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120590 (0x1d70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 09:44:35 2026 GMT
Not After : Aug 13 09:44:35 2026 GMT
Subject: CN=6a4a2788-9ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:d5:60:6f:44:41:c3:d2:b0:f7:d8:f9:a4:
58:10:2d:91:e0:a1:6f:cd:15:01:ce:04:3a:8d:ca:
b6:69:0b:5e:9b:31:d4:b2:97:d0:42:c8:4a:2e:20:
3c:e5:4d:e5:5f:0b:36:7b:a1:07:fe:22:73:91:ec:
a1:ba:c7:9b:df:62:82:38:63:3a:5b:0e:19:f1:c0:
49:b3:8e:f1:c3:30:43:28:a8:c7:69:e7:f8:9e:96:
5a:43:31:20:02:91:0f:a6:6c:3c:9d:5f:7e:3e:16:
b4:87:9c:6f:af:d9:ea:6b:a6:96:1f:f4:2e:d4:3f:
07:67:45:05:4f:54:d2:42:6a:cd:f4:02:e9:9b:91:
5b:bf:55:14:16:d1:2e:7a:1c:ed:61:b5:1c:0c:6f:
5b:fe:c2:d3:2e:02:27:a6:31:3b:e8:6f:6a:f3:cb:
4f:3b:5c:4d:cc:6f:06:10:27:a8:37:c0:45:da:29:
5f:c1:21:19:c4:d9:73:4e:3a:f6:6d:f7:02:70:1c:
6b:3b:ac:c6:af:0a:c4:23:22:a3:71:ab:ad:0c:ad:
94:e6:08:38:de:da:4b:fc:94:75:b6:58:64:ab:82:
07:2a:a2:28:85:1b:2a:1e:b3:04:d6:a3:f7:cd:b7:
ba:b7:9d:29:af:6c:a4:ec:5e:ad:c2:f7:b4:1e:59:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:DE:4F:10:D0:1E:FF:29:DB:FB:AF:A9:43:99:75:43:CD:3E:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/243447F8785611F1A49476E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:68:ee:4a:67:61:34:44:36:55:f2:4d:0f:6c:e8:ea:55:92:
cd:13:dc:7d:68:83:68:37:7b:ca:0e:1c:30:1c:6b:6d:45:8e:
03:73:8c:2d:c4:78:99:f3:34:6c:e4:85:f7:7c:4e:f2:2a:07:
ff:b2:4d:fa:45:71:de:39:4c:27:0e:67:d5:33:c8:ad:4f:a8:
0c:6f:10:60:4b:1f:ce:1c:3e:a5:01:fc:8d:ae:1e:fe:f2:27:
2b:af:8a:4f:94:60:6c:e1:58:ae:b0:a0:63:7b:4b:95:e4:df:
21:58:a4:a0:a3:22:8f:8a:bf:e8:8d:1d:f7:a0:05:da:e8:75:
25:a2:3c:9d:ef:03:7b:a2:f5:8b:cd:e6:8c:75:0f:fb:19:98:
75:87:3e:b7:e4:4f:33:b0:c9:dd:a6:45:8b:2c:67:f6:da:c8:
ed:3c:fd:61:0c:d3:18:12:d7:88:f9:b9:80:dd:46:1b:74:7e:
41:2a:3d:a4:a8:c5:69:d1:60:e6:17:11:ac:68:2e:1a:d6:a7:
5a:d4:d7:6e:6b:fa:db:30:0a:d0:46:b7:f5:61:d1:55:25:d7:
31:7f:fd:e8:40:df:56:65:a7:5a:37:70:12:bc:31:23:fd:42:
ac:04:7c:3a:a1:dd:34:c9:73:9a:2d:ed:e3:52:ac:dc:77:b3:
fc:fb:7f:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdcOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzA1MDk0NDM1WhcNMjYwODEzMDk0NDM1WjAYMRYw
FAYDVQQDEw02YTRhMjc4OC05YmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvXfVYG9EQcPSsPfY+aRYEC2R4KFvzRUBzgQ6jcq2aQtemzHUspfQQshK
LiA85U3lXws2e6EH/iJzkeyhuseb32KCOGM6Ww4Z8cBJs47xwzBDKKjHaef4npZa
QzEgApEPpmw8nV9+Pha0h5xvr9nqa6aWH/Qu1D8HZ0UFT1TSQmrN9ALpm5Fbv1UU
FtEuehztYbUcDG9b/sLTLgInpjE76G9q88tPO1xNzG8GECeoN8BF2ilfwSEZxNlz
Tjr2bfcCcBxrO6zGrwrEIyKjcautDK2U5gg43tpL/JR1tlhkq4IHKqIohRsqHrME
1qP3zbe6t50pr2yk7F6twve0HlnY+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEZ8
3k8Q0B7/Kdv7r6lDmXVDzT4bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNDM0NDdGODc4NTYxMUYxQTQ5NDc2RTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYLMA0GCSqGSIb3DQEB
CwUAA4IBAQBfaO5KZ2E0RDZV8k0PbOjqVZLNE9x9aINoN3vKDhwwHGttRY4Dc4wt
xHiZ8zRs5IX3fE7yKgf/sk36RXHeOUwnDmfVM8itT6gMbxBgSx/OHD6lAfyNrh7+
8icrr4pPlGBs4ViusKBje0uV5N8hWKSgoyKPir/ojR33oAXa6HUlojyd7wN7ovWL
zeaMdQ/7GZh1hz635E8zsMndpkWLLGf22sjtPP1hDNMYEteI+bmA3UYbdH5BKj2k
qMVp0WDmFxGsaC4a1qda1Ndua/rbMArQRrf1YdFVJdcxf/3oQN9WZadaN3ASvDEj
/UKsBHw6od00yXOaLe3jUqzcd7P8+3/U
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:49 2026 by rpki-client