Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/419CABE06FCE11F1BBB32800CF1D38B0.roa
File: 419CABE06FCE11F1BBB32800CF1D38B0.roa (raw, json)
Hash identifier: RD9ZAQ7M9MlMYT/c47fhOkTj4rfxEX39GQK1wqX+uRk=
Subject key identifier: 68:53:37:06:23:5C:0F:E5:A1:E9:70:C5:22:BE:77:90:A8:6C:8D:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/419CABE06FCE11F1BBB32800CF1D38B0.roa
Signing time: Wed 24 Jun 2026 13:11:48 +0000
ROA not before: Wed 24 Jun 2026 13:11:44 +0000
ROA not after: Sat 01 Aug 2026 13:11:44 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120031 (0x1d4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 13:11:44 2026 GMT
Not After : Aug 1 13:11:44 2026 GMT
Subject: CN=6a3bd794-9bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:7c:79:55:25:b7:22:d7:77:f7:a7:e3:d2:
c6:6f:66:01:e1:1d:2d:2b:88:a3:df:c4:15:af:bb:
3c:7a:34:8b:90:dc:11:70:31:29:11:df:a9:5d:13:
14:50:95:12:4b:cc:0b:7a:44:8a:3e:0c:e1:9e:ed:
52:e1:97:0a:91:d8:82:cb:bc:db:c6:ec:ad:f4:ba:
ba:ff:e7:d9:f3:96:ad:8c:2a:c9:4f:f1:65:24:3f:
6c:23:21:b7:a3:c9:61:a9:00:2f:8d:1d:27:85:2b:
6b:1c:49:48:9f:da:f9:52:0f:f1:9b:48:00:d9:09:
99:50:f4:c4:d6:9f:45:c1:b9:6c:7d:71:3a:87:be:
7f:fb:db:4f:2f:2e:65:41:16:3d:b2:c4:12:6a:ad:
41:78:60:75:66:7e:91:c3:88:3c:eb:13:13:52:3f:
d9:ff:64:04:50:18:bb:35:cd:24:1a:6d:04:79:53:
22:1b:5c:74:24:06:b3:b4:a3:ef:6b:87:29:f1:74:
ff:39:59:8c:65:fe:99:25:db:88:8b:b0:a8:17:a9:
f7:6a:11:dd:b3:f4:26:ef:28:3c:b8:7e:61:96:9a:
4a:fd:d3:85:69:5f:89:b5:16:86:36:b8:e1:0a:47:
39:80:10:4e:f6:ec:c6:f6:d3:5b:9e:3b:28:aa:e5:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:53:37:06:23:5C:0F:E5:A1:E9:70:C5:22:BE:77:90:A8:6C:8D:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/419CABE06FCE11F1BBB32800CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:83:40:99:a7:6a:98:1b:ab:7d:47:16:70:18:87:98:84:00:
42:1b:0c:17:22:43:2f:28:1f:97:d5:d0:f1:be:69:60:a6:ea:
aa:4e:96:ca:8c:e0:1a:0f:b5:1b:51:c8:ea:e2:bf:b3:5f:f3:
06:04:48:87:b2:eb:1e:6e:f5:0b:9e:21:2f:9a:aa:0c:bf:57:
05:aa:22:89:5d:d0:d7:6e:76:d9:82:6c:3f:fd:3c:76:f9:7f:
5d:01:fd:6b:c3:8e:6d:69:61:2c:0e:67:51:02:0f:8a:0c:a3:
04:6a:11:e7:10:ee:d4:b2:a9:be:5f:b9:70:a1:e9:72:27:9a:
66:e6:7b:4c:4f:c4:6b:2e:b3:8f:7b:c7:bf:70:05:5b:20:37:
30:18:01:62:2b:bc:8d:4e:e9:97:9f:ad:36:5e:0c:36:95:ab:
4e:77:59:94:82:02:8a:e8:36:83:df:3f:d2:5b:46:7c:6a:d9:
e7:ba:50:20:26:c3:83:43:f1:1e:6e:5b:0e:52:6f:9e:2e:ac:
00:f2:39:ae:4d:05:c8:a2:22:2e:ff:1e:69:6c:46:6d:22:34:
9e:e9:4f:4d:c0:fe:02:cd:00:e0:6a:8c:9c:4d:d0:61:f2:70:
ec:4a:32:33:8e:4f:90:44:ba:3c:58:9f:82:8e:3b:d9:62:94:
f0:84:9d:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdTfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI0MTMxMTQ0WhcNMjYwODAxMTMxMTQ0WjAYMRYw
FAYDVQQDEw02YTNiZDc5NC05YmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoPd8eVUltyLXd/en49LGb2YB4R0tK4ij38QVr7s8ejSLkNwRcDEpEd+p
XRMUUJUSS8wLekSKPgzhnu1S4ZcKkdiCy7zbxuyt9Lq6/+fZ85atjCrJT/FlJD9s
IyG3o8lhqQAvjR0nhStrHElIn9r5Ug/xm0gA2QmZUPTE1p9FwblsfXE6h75/+9tP
Ly5lQRY9ssQSaq1BeGB1Zn6Rw4g86xMTUj/Z/2QEUBi7Nc0kGm0EeVMiG1x0JAaz
tKPva4cp8XT/OVmMZf6ZJduIi7CoF6n3ahHds/Qm7yg8uH5hlppK/dOFaV+JtRaG
NrjhCkc5gBBO9uzG9tNbnjsoquVLFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGhT
NwYjXA/loelwxSK+d5CobI27MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MTlDQUJFMDZGQ0UxMUYxQkJCMzI4MDBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQAGg0CZp2qYG6t9RxZwGIeYhABCGwwXIkMvKB+X1dDxvmlgpuqqTpbK
jOAaD7UbUcjq4r+zX/MGBEiHsusebvULniEvmqoMv1cFqiKJXdDXbnbZgmw//Tx2
+X9dAf1rw45taWEsDmdRAg+KDKMEahHnEO7Usqm+X7lwoelyJ5pm5ntMT8RrLrOP
e8e/cAVbIDcwGAFiK7yNTumXn602Xgw2latOd1mUggKK6DaD3z/SW0Z8atnnulAg
JsODQ/EeblsOUm+eLqwA8jmuTQXIoiIu/x5pbEZtIjSe6U9NwP4CzQDgaoycTdBh
8nDsSjIzjk+QRLo8WJ+CjjvZYpTwhJ3v
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:39 2026 by rpki-client