Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87CE7B7A849B11F180DE78F8CE1D38B0.roa
File: 87CE7B7A849B11F180DE78F8CE1D38B0.roa (raw, json)
Hash identifier: 2Kd51dyTsBtbM27jhmSaUeaVV3gV4w53lPg1pmsdb/c=
Subject key identifier: AC:FA:A4:CD:AD:CB:CE:68:AD:0D:E2:B4:48:36:39:D8:AD:9D:D1:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87CE7B7A849B11F180DE78F8CE1D38B0.roa
Signing time: Tue 21 Jul 2026 00:31:36 +0000
ROA not before: Tue 21 Jul 2026 00:00:32 +0000
ROA not after: Wed 19 Aug 2026 00:00:32 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121412 (0x1da44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 00:00:32 2026 GMT
Not After : Aug 19 00:00:32 2026 GMT
Subject: CN=6a5ebde8-60e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:9b:20:f5:78:a3:1d:60:90:83:4e:2f:73:
1c:ed:88:c4:08:65:ea:19:95:98:eb:fa:18:22:5c:
24:0f:4c:04:a9:7f:06:91:a9:d9:d4:c2:e2:59:af:
37:82:de:23:6a:37:e2:01:69:d6:81:25:f5:2f:8f:
e1:49:bf:05:6d:7a:f3:3f:e4:f3:fd:cd:50:6b:32:
72:05:fb:5c:d0:6d:84:52:84:0a:a8:55:19:89:29:
15:5e:4e:21:36:d8:c7:ee:c5:be:29:5e:e4:75:a7:
f6:e7:65:ac:51:99:a2:2c:bf:84:61:fe:33:e7:8c:
aa:21:43:1f:43:fd:7d:b3:23:c7:4a:22:55:b4:c7:
4b:a2:28:81:57:2c:3d:6e:d8:f9:33:97:d7:75:6a:
b0:4b:2c:e3:03:97:a1:f9:59:7e:8b:21:de:4f:42:
f8:6f:9c:20:28:2d:20:10:f8:e2:64:9a:d8:c6:9e:
29:67:67:77:f1:70:6b:55:28:85:7f:ed:97:8c:b0:
54:e4:30:4f:25:29:c5:f7:4f:4b:41:f5:b2:9b:8b:
60:3f:ba:10:98:b0:9b:b5:7e:b6:27:6a:c3:05:96:
e9:c9:2a:04:c8:bb:9c:15:7f:0d:84:f2:04:ae:43:
5d:04:97:8b:7f:d2:5a:8d:d2:46:2c:f4:e8:4a:01:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:A4:CD:AD:CB:CE:68:AD:0D:E2:B4:48:36:39:D8:AD:9D:D1:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87CE7B7A849B11F180DE78F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:8a:d8:4f:7e:4b:39:b6:0f:03:aa:c3:73:f0:ff:a3:68:8d:
83:e1:d3:a5:19:8a:1f:3e:45:db:cb:9a:a0:4c:a9:33:98:c7:
f0:56:aa:a9:a3:d5:ea:7b:e3:2a:25:50:9f:f2:36:41:15:13:
02:48:a0:dd:64:5e:20:29:e6:d1:0b:cd:4b:aa:5a:81:75:9b:
0e:a8:57:9c:20:b8:d9:d9:6f:f2:5f:88:f9:2f:9d:86:d3:8d:
83:ce:43:60:fc:cc:7d:56:6f:ab:a5:8d:14:27:de:63:77:fd:
63:a6:d3:ed:27:e9:b4:4e:a7:c8:3d:80:22:3a:59:d2:11:1e:
12:9d:45:40:7d:63:33:2c:72:18:a6:ca:1b:33:38:a1:3b:f4:
30:cd:12:c4:a5:dd:3b:f7:6b:43:45:e3:fe:15:3f:5a:40:38:
22:c4:f9:0f:74:c6:a2:d7:f0:1c:99:56:28:eb:8b:f6:5b:48:
a8:d8:36:e8:ef:1b:cd:62:d9:ca:e8:1f:46:0f:e6:58:b4:24:
db:ea:67:e9:a1:96:42:58:91:74:b5:07:56:c6:a6:f0:52:21:
b8:24:1c:00:cb:c5:8a:04:ae:7d:b5:75:98:38:e2:c0:38:06:
c6:13:c6:04:80:d1:f2:8e:ea:05:c3:10:52:86:e8:10:ac:55:
58:ff:29:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdpEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIxMDAwMDMyWhcNMjYwODE5MDAwMDMyWjAYMRYw
FAYDVQQDEw02YTVlYmRlOC02MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA60abIPV4ox1gkINOL3Mc7YjECGXqGZWY6/oYIlwkD0wEqX8GkanZ1MLi
Wa83gt4jajfiAWnWgSX1L4/hSb8FbXrzP+Tz/c1QazJyBftc0G2EUoQKqFUZiSkV
Xk4hNtjH7sW+KV7kdaf252WsUZmiLL+EYf4z54yqIUMfQ/19syPHSiJVtMdLoiiB
Vyw9btj5M5fXdWqwSyzjA5eh+Vl+iyHeT0L4b5wgKC0gEPjiZJrYxp4pZ2d38XBr
VSiFf+2XjLBU5DBPJSnF909LQfWym4tgP7oQmLCbtX62J2rDBZbpySoEyLucFX8N
hPIErkNdBJeLf9JajdJGLPToSgGNsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKz6
pM2ty85orQ3itEg2OditndFaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84N0NFN0I3QTg0OUIxMUYxODBERTc4RjhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlKfMA0GCSqGSIb3DQEB
CwUAA4IBAQDQithPfks5tg8DqsNz8P+jaI2D4dOlGYofPkXby5qgTKkzmMfwVqqp
o9Xqe+MqJVCf8jZBFRMCSKDdZF4gKebRC81LqlqBdZsOqFecILjZ2W/yX4j5L52G
042DzkNg/Mx9Vm+rpY0UJ95jd/1jptPtJ+m0TqfIPYAiOlnSER4SnUVAfWMzLHIY
psobMzihO/QwzRLEpd0792tDReP+FT9aQDgixPkPdMai1/AcmVYo64v2W0io2Dbo
7xvNYtnK6B9GD+ZYtCTb6mfpoZZCWJF0tQdWxqbwUiG4JBwAy8WKBK59tXWYOOLA
OAbGE8YEgNHyjuoFwxBShugQrFVY/ymp
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:12 2026 by rpki-client