Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E0C67FA860711F1B027B4ADCE1D38B0.roa
File: 8E0C67FA860711F1B027B4ADCE1D38B0.roa (raw, json)
Hash identifier: ubaKPMaUqGMtOCeoL9vmDGIju3UAZFRcLgO8s2be7YY=
Subject key identifier: D6:29:3F:D3:BB:B8:51:6F:7C:54:F2:1A:1A:2D:A1:C9:B3:46:4F:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E0C67FA860711F1B027B4ADCE1D38B0.roa
Signing time: Wed 22 Jul 2026 19:57:24 +0000
ROA not before: Wed 22 Jul 2026 19:57:19 +0000
ROA not after: Wed 16 May 2029 19:57:19 +0000
asID: 27947
IP address blocks: 154.198.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121580 (0x1daec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 19:57:19 2026 GMT
Not After : May 16 19:57:19 2029 GMT
Subject: CN=6a6120a3-2fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:03:d9:db:ae:d1:5b:e3:80:f0:91:b4:fc:
e6:53:70:c0:81:ab:3e:5c:df:e5:6b:cb:25:93:a6:
f9:81:c4:48:5a:4c:05:a0:d7:76:6b:16:0b:4c:2e:
67:6f:ec:58:bc:6b:d6:78:1c:ed:b1:4f:d8:5d:1e:
e7:dc:d7:1a:b4:a1:67:c7:f0:da:9f:13:86:8f:2f:
3f:ec:e0:52:3b:f6:27:db:9c:67:9e:ad:fa:ae:92:
51:1d:f0:1c:64:4f:03:66:2e:fd:8b:90:99:9c:98:
22:16:dd:76:83:4a:50:7c:c5:19:c1:e6:8d:f0:a7:
63:93:32:63:a0:7d:14:d2:8c:7a:2e:62:25:70:8c:
0c:c1:da:a3:31:08:f6:8e:8a:ed:1b:ed:16:29:e9:
2d:95:55:f3:54:ca:0e:8e:2d:3c:7a:48:12:6c:8f:
18:4e:5b:ce:30:5a:3b:0d:c6:86:1d:95:63:c9:4d:
4f:73:1b:79:bb:a2:c8:76:e7:95:d7:4d:b9:c7:ac:
48:c9:d3:21:e5:59:40:07:cc:14:63:ca:e2:e4:a3:
b4:23:54:1b:e8:03:60:9a:62:76:76:0b:d8:21:98:
e8:8f:95:58:fd:cd:d2:fb:15:61:df:b8:b7:f8:76:
e6:6a:96:08:3a:b4:28:7a:e7:37:80:15:59:8f:24:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:3F:D3:BB:B8:51:6F:7C:54:F2:1A:1A:2D:A1:C9:B3:46:4F:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E0C67FA860711F1B027B4ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3e:66:db:ad:3a:4a:3e:da:78:d8:3b:77:74:fe:43:e7:37:
f5:d6:b0:56:6c:74:d4:21:c3:95:1b:0f:07:ce:83:70:2d:c4:
50:71:dd:c0:d2:af:1d:eb:2d:a1:19:20:b3:32:ba:6c:28:58:
c3:94:0a:75:ed:e5:07:5e:24:a6:96:5d:4f:25:56:72:0d:05:
4f:3e:b7:46:c1:51:7a:d7:5d:3c:0c:8c:0d:d2:5f:fd:35:45:
42:7e:14:96:c4:cb:c1:c4:3c:c7:ca:0a:f2:25:7e:86:40:60:
a8:b2:a6:86:27:e2:ae:2b:35:3a:98:56:18:3c:e4:26:d3:33:
41:42:ca:9b:68:10:3d:8f:76:89:38:1d:66:e9:ee:1f:5b:6e:
64:e3:d0:92:47:11:86:33:2b:43:cb:9b:08:81:af:72:0c:4d:
75:1e:fd:36:db:e0:4c:53:b9:1d:66:4f:06:dd:8b:cf:aa:c8:
1c:14:16:be:9b:f9:c1:db:89:1a:9f:ed:0a:17:80:0e:dc:0f:
a2:13:99:eb:86:52:b8:b2:f8:76:4c:92:84:bf:c4:64:99:db:
ba:a3:a5:0f:0c:1d:38:ba:c7:3c:69:d0:a4:05:04:1e:07:3b:
e9:53:3f:af:ce:95:cb:d2:4a:09:c8:c3:c7:82:19:87:15:12:
6f:74:68:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdrsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIyMTk1NzE5WhcNMjkwNTE2MTk1NzE5WjAYMRYw
FAYDVQQDEw02YTYxMjBhMy0yZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAygcD2duu0VvjgPCRtPzmU3DAgas+XN/la8slk6b5gcRIWkwFoNd2axYL
TC5nb+xYvGvWeBztsU/YXR7n3NcatKFnx/DanxOGjy8/7OBSO/Yn25xnnq36rpJR
HfAcZE8DZi79i5CZnJgiFt12g0pQfMUZweaN8KdjkzJjoH0U0ox6LmIlcIwMwdqj
MQj2jortG+0WKektlVXzVMoOji08ekgSbI8YTlvOMFo7DcaGHZVjyU1Pcxt5u6LI
dueV1025x6xIydMh5VlAB8wUY8ri5KO0I1Qb6ANgmmJ2dgvYIZjoj5VY/c3S+xVh
37i3+HbmapYIOrQoeuc3gBVZjyTUsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNYp
P9O7uFFvfFTyGhotocmzRk+wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RTBDNjdGQTg2MDcxMUYxQjAyN0I0QURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsasMA0GCSqGSIb3DQEB
CwUAA4IBAQA/PmbbrTpKPtp42Dt3dP5D5zf11rBWbHTUIcOVGw8HzoNwLcRQcd3A
0q8d6y2hGSCzMrpsKFjDlAp17eUHXiSmll1PJVZyDQVPPrdGwVF61108DIwN0l/9
NUVCfhSWxMvBxDzHygryJX6GQGCosqaGJ+KuKzU6mFYYPOQm0zNBQsqbaBA9j3aJ
OB1m6e4fW25k49CSRxGGMytDy5sIga9yDE11Hv022+BMU7kdZk8G3YvPqsgcFBa+
m/nB24kan+0KF4AO3A+iE5nrhlK4svh2TJKEv8Rkmdu6o6UPDB04usc8adCkBQQe
BzvpUz+vzpXL0koJyMPHghmHFRJvdGiH
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:43 2026 by rpki-client