Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27DCE920739A11F1B3A1861ACF1D38B0.roa
File: 27DCE920739A11F1B3A1861ACF1D38B0.roa (raw, json)
Hash identifier: PanwL0kZWLchP52f9pJyIbnphFj6Ry7v2BkzrTfo5F8=
Subject key identifier: 71:3B:65:D3:5A:1D:5C:94:27:F2:E7:4B:DC:AE:69:FD:C0:C3:12:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27DCE920739A11F1B3A1861ACF1D38B0.roa
Signing time: Mon 29 Jun 2026 09:08:56 +0000
ROA not before: Mon 29 Jun 2026 09:08:51 +0000
ROA not after: Wed 29 Jul 2026 09:08:51 +0000
asID: 60171
IP address blocks: 154.214.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120306 (0x1d5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 09:08:51 2026 GMT
Not After : Jul 29 09:08:51 2026 GMT
Subject: CN=6a423628-359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:22:32:f0:5a:db:cb:e2:36:70:e7:0a:66:
50:39:eb:d8:37:0e:b5:2d:14:43:19:1b:c0:ae:89:
07:94:02:c0:64:4a:68:0e:10:73:4a:0f:b5:6f:6e:
c1:c5:0e:ef:3f:12:5f:c0:12:6f:ef:26:89:43:1c:
2c:e3:94:a0:19:1b:c9:e1:c5:1e:41:e0:bc:27:68:
33:7f:a6:f8:38:91:c6:1c:21:bc:9d:92:7a:28:7c:
9f:95:cf:f8:6b:f2:e5:15:86:ef:f7:0c:db:73:dd:
6e:9d:6a:21:e6:8c:95:65:69:5a:ef:6e:39:82:57:
0a:f4:b9:2b:88:f2:03:74:ad:9b:72:ed:79:21:dc:
8b:e3:27:c4:cc:8f:ed:94:cb:59:c9:67:88:0d:df:
9b:09:e3:bc:a5:c3:6c:f7:6b:1c:94:85:68:c1:0f:
6b:f3:cb:e5:f9:25:2e:9b:59:ab:48:d9:09:69:d1:
f4:a0:70:c1:50:b6:5d:f3:05:5c:98:ad:71:1c:1e:
cf:eb:45:a0:b8:80:cb:22:26:0d:71:63:68:77:4e:
3d:c6:7c:d1:1f:f5:b7:3b:89:f6:47:5d:6e:bc:45:
25:7c:5b:bd:b8:c4:df:a3:9d:b7:4f:41:fe:8d:c7:
95:5f:7e:7d:7c:69:51:f9:63:62:8d:ae:15:de:c3:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:65:D3:5A:1D:5C:94:27:F2:E7:4B:DC:AE:69:FD:C0:C3:12:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27DCE920739A11F1B3A1861ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:56:bd:7e:b9:27:87:cb:31:0b:8c:ba:84:96:0a:49:de:14:
81:5e:8d:a6:a4:56:8b:e1:3f:0c:e3:cf:9c:92:37:81:25:18:
5b:aa:f3:0e:ea:3f:95:c7:44:f1:31:40:ea:10:bc:bd:67:21:
f8:9e:e0:53:ce:17:9f:98:2e:03:dd:32:a2:36:73:70:a0:fc:
20:b9:69:bb:b2:cf:ac:e5:5a:05:88:6f:bf:0e:36:b2:cb:04:
a9:2e:a4:e5:d3:60:70:e6:13:a8:95:db:e8:53:a2:ee:a6:83:
4a:13:a2:10:72:9f:cf:83:b0:67:5f:90:5d:cc:98:06:c1:aa:
08:0a:2a:aa:a8:1f:d7:bc:51:a0:27:83:22:bb:2b:70:ba:c1:
6e:d7:ee:5f:24:63:d5:81:10:d9:c0:67:79:be:1b:d5:b7:90:
46:51:7d:09:55:15:3c:0b:85:48:bc:51:10:3e:20:9b:cb:f7:
da:e4:61:91:42:21:e8:00:b7:5c:52:cb:47:ca:70:96:48:12:
1b:43:c0:37:8e:d3:6f:dc:a3:24:41:b5:5d:42:09:5e:e2:57:
1a:23:02:c4:8e:b3:3f:2f:eb:dd:f2:ba:a2:47:99:7d:92:a1:
0f:44:c9:0a:fc:a9:2f:62:61:6f:65:b0:2c:ba:bd:b3:cc:80:
14:1c:d9:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdXyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI5MDkwODUxWhcNMjYwNzI5MDkwODUxWjAYMRYw
FAYDVQQDEw02YTQyMzYyOC0zNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsM4iMvBa28viNnDnCmZQOevYNw61LRRDGRvArokHlALAZEpoDhBzSg+1
b27BxQ7vPxJfwBJv7yaJQxws45SgGRvJ4cUeQeC8J2gzf6b4OJHGHCG8nZJ6KHyf
lc/4a/LlFYbv9wzbc91unWoh5oyVZWla7245glcK9LkriPIDdK2bcu15IdyL4yfE
zI/tlMtZyWeIDd+bCeO8pcNs92sclIVowQ9r88vl+SUum1mrSNkJadH0oHDBULZd
8wVcmK1xHB7P60WguIDLIiYNcWNod049xnzRH/W3O4n2R11uvEUlfFu9uMTfo523
T0H+jceVX359fGlR+WNija4V3sO+JwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHE7
ZdNaHVyUJ/LnS9yuaf3AwxKpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yN0RDRTkyMDczOUExMUYxQjNBMTg2MUFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPVr1+uSeHyzELjLqElgpJ3hSBXo2mpFaL4T8M48+ckjeBJRhbqvMO
6j+Vx0TxMUDqELy9ZyH4nuBTzhefmC4D3TKiNnNwoPwguWm7ss+s5VoFiG+/Djay
ywSpLqTl02Bw5hOoldvoU6LupoNKE6IQcp/Pg7BnX5BdzJgGwaoICiqqqB/XvFGg
J4MiuytwusFu1+5fJGPVgRDZwGd5vhvVt5BGUX0JVRU8C4VIvFEQPiCby/fa5GGR
QiHoALdcUstHynCWSBIbQ8A3jtNv3KMkQbVdQgle4lcaIwLEjrM/L+vd8rqiR5l9
kqEPRMkK/KkvYmFvZbAsur2zzIAUHNm+
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:33 2026 by rpki-client