Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88170396850811F1898B2FA3CE1D38B0.roa
File: 88170396850811F1898B2FA3CE1D38B0.roa (raw, json)
Hash identifier: 8zmxl6TThiT+nrgY75iWvrf8DoD5XNKNpFFWaOEjrQc=
Subject key identifier: E9:DD:07:9D:A4:82:96:26:68:1E:30:7C:E3:B7:86:EA:4E:22:9C:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88170396850811F1898B2FA3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 13:31:52 +0000
ROA not before: Tue 21 Jul 2026 13:31:48 +0000
ROA not after: Sun 16 Aug 2026 13:31:48 +0000
asID: 17497
IP address blocks: 154.197.17.0/24 maxlen: 24
154.197.18.0/24 maxlen: 24
154.197.19.0/24 maxlen: 24
154.197.20.0/24 maxlen: 24
154.197.21.0/24 maxlen: 24
154.197.22.0/24 maxlen: 24
154.197.23.0/24 maxlen: 24
154.197.26.0/23 maxlen: 24
154.197.26.0/24 maxlen: 24
154.197.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121506 (0x1daa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 13:31:48 2026 GMT
Not After : Aug 16 13:31:48 2026 GMT
Subject: CN=6a5f74c8-d2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:b4:d0:e7:16:f0:4b:15:c7:f3:fa:62:e5:
10:db:45:f2:3d:27:15:36:ce:20:a1:11:59:83:cc:
95:7c:33:a3:7f:59:31:ab:71:b8:ea:2f:79:d7:22:
dd:50:34:50:92:31:2f:e8:06:c5:6a:75:70:17:b3:
e3:01:c5:08:89:1a:11:51:2e:69:60:97:fe:d2:be:
0b:08:f2:cd:da:f4:85:50:1e:bd:53:76:d4:72:74:
4c:fd:36:0f:9c:09:6d:3f:b5:d8:0c:a4:58:ee:62:
91:bc:1c:0f:6a:97:d4:02:2a:8c:c8:26:e6:11:5c:
99:eb:bf:bb:31:54:62:10:23:d0:81:e6:f8:97:59:
9b:e0:03:0e:cc:fd:86:a1:c5:b7:66:15:15:64:92:
4e:55:e7:00:2d:67:02:66:c2:f2:58:ac:32:27:1c:
01:a7:f9:29:ca:5c:07:f7:1c:fb:70:09:ee:55:11:
10:b5:10:f9:9f:45:ec:70:a7:e6:b5:d8:81:b5:6e:
36:dd:fe:cc:57:fc:7c:86:c2:30:72:d4:ec:44:0d:
86:32:9f:11:04:7c:ae:76:c4:37:83:a3:d2:4f:99:
59:fe:f1:05:ca:ba:07:b6:49:90:f0:53:79:30:92:
d9:99:50:2d:a2:b3:25:ee:b5:99:ef:44:57:b7:71:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:07:9D:A4:82:96:26:68:1E:30:7C:E3:B7:86:EA:4E:22:9C:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88170396850811F1898B2FA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.17.0-154.197.23.255
154.197.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:5c:c5:6d:dd:18:fd:0f:c0:b6:44:f8:aa:82:59:2d:66:76:
54:92:1d:cf:75:41:22:19:bc:fe:0a:1c:d6:90:e0:b5:3e:5f:
9e:f7:85:f9:81:ec:28:56:1d:b7:53:7e:a5:ac:4d:4b:6f:26:
4f:8d:2a:03:14:97:99:98:c7:80:85:41:5e:ee:0d:5b:bf:4c:
e3:70:c9:51:aa:e2:05:34:98:a8:94:5a:b4:0c:0f:e2:83:94:
b3:a3:7d:52:9b:e7:28:7a:f1:f0:a0:2b:02:74:d5:d0:13:c4:
5a:2c:a2:02:94:76:6e:64:e6:01:67:a0:2f:ce:aa:ed:14:eb:
aa:cf:52:9d:a4:fb:e3:39:41:c8:f9:18:b4:a3:e1:0c:e3:0b:
54:b3:67:69:ea:66:ed:01:4c:84:ee:0f:10:be:23:34:57:88:
1d:0c:d2:41:cb:77:da:22:9b:ae:77:44:c4:30:7a:d6:e5:e8:
1c:65:b3:99:cc:9f:69:b2:c0:f1:47:ce:a2:3b:02:72:52:83:
ae:65:85:2e:b2:08:24:7e:d8:9b:6e:ef:39:63:12:cb:ee:8c:
fc:00:6a:1d:2c:5d:90:59:09:93:f5:bf:ac:f8:98:43:87:1f:
d2:17:30:04:aa:b3:35:9f:28:ff:05:32:36:b1:02:b3:82:68:
d6:79:f9:9c
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdqiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIxMTMzMTQ4WhcNMjYwODE2MTMzMTQ4WjAYMRYw
FAYDVQQDEw02YTVmNzRjOC1kMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnG600OcW8EsVx/P6YuUQ20XyPScVNs4goRFZg8yVfDOjf1kxq3G46i95
1yLdUDRQkjEv6AbFanVwF7PjAcUIiRoRUS5pYJf+0r4LCPLN2vSFUB69U3bUcnRM
/TYPnAltP7XYDKRY7mKRvBwPapfUAiqMyCbmEVyZ67+7MVRiECPQgeb4l1mb4AMO
zP2GocW3ZhUVZJJOVecALWcCZsLyWKwyJxwBp/kpylwH9xz7cAnuVREQtRD5n0Xs
cKfmtdiBtW423f7MV/x8hsIwctTsRA2GMp8RBHyudsQ3g6PST5lZ/vEFyroHtkmQ
8FN5MJLZmVAtorMl7rWZ70RXt3FMNQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOnd
B52kgpYmaB4wfOO3hupOIpxKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84ODE3MDM5Njg1MDgxMUYxODk4QjJGQTNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaxREDBAOaxRADBAGa
xRowDQYJKoZIhvcNAQELBQADggEBAFxcxW3dGP0PwLZE+KqCWS1mdlSSHc91QSIZ
vP4KHNaQ4LU+X573hfmB7ChWHbdTfqWsTUtvJk+NKgMUl5mYx4CFQV7uDVu/TONw
yVGq4gU0mKiUWrQMD+KDlLOjfVKb5yh68fCgKwJ01dATxFosogKUdm5k5gFnoC/O
qu0U66rPUp2k++M5Qcj5GLSj4QzjC1SzZ2nqZu0BTITuDxC+IzRXiB0M0kHLd9oi
m653RMQwetbl6Bxls5nMn2mywPFHzqI7AnJSg65lhS6yCCR+2Jtu7zljEsvujPwA
ah0sXZBZCZP1v6z4mEOHH9IXMASqszWfKP8FMjaxArOCaNZ5+Zw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:27:45 2026 by rpki-client