Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93254E1A7C5B11F18A3AB60ACF1D38B0.roa
File: 93254E1A7C5B11F18A3AB60ACF1D38B0.roa (raw, json)
Hash identifier: 2vX7U8WDl8S/6S/Lk6XtmQJFBJDLDKWsebUe4d5PM04=
Subject key identifier: D7:59:82:21:D7:8C:8C:93:83:57:8F:DB:23:42:7C:54:6C:FF:BE:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D813
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93254E1A7C5B11F18A3AB60ACF1D38B0.roa
Signing time: Fri 10 Jul 2026 12:33:38 +0000
ROA not before: Fri 10 Jul 2026 12:33:34 +0000
ROA not after: Mon 10 Aug 2026 12:33:34 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120851 (0x1d813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 12:33:34 2026 GMT
Not After : Aug 10 12:33:34 2026 GMT
Subject: CN=6a50e6a2-3492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:05:24:fe:21:68:4f:12:6b:bb:fd:e3:83:
4d:6e:1f:dc:f2:44:d1:b5:1d:79:7f:83:8c:43:0b:
c7:60:e5:6f:cd:3b:d9:c2:8d:91:67:ee:9a:bb:d6:
1f:0c:9e:3b:dc:6e:a3:06:c9:93:d5:e7:f7:8f:02:
39:d8:d9:f7:15:a7:1c:3f:17:52:15:fc:b7:33:cd:
2f:c8:b3:6f:2d:cd:78:6e:ec:ae:03:09:d7:ef:c1:
63:ee:ff:93:38:3f:ef:08:c8:e9:56:3c:fb:a6:71:
e5:48:d7:96:0c:60:e5:ad:b8:56:99:26:5f:57:4b:
a7:fe:84:5f:e9:4c:d8:f0:b2:88:cf:81:21:54:ce:
c0:d3:14:0f:08:bc:06:f0:b3:38:a0:8d:eb:71:27:
63:3c:2c:42:43:0d:79:bd:86:d4:6b:ba:3e:b7:8e:
af:26:09:b5:9d:48:3b:e2:3c:0a:26:dd:3a:a0:f4:
5b:2f:f5:d6:b3:85:db:31:cb:d9:7d:60:af:47:52:
5b:fd:25:4e:a8:e6:1c:f6:98:cc:53:25:23:ca:3b:
a5:d8:a9:50:67:58:b6:14:3c:75:0f:ec:78:9c:5a:
88:e5:05:4b:ea:26:de:8e:c1:17:4a:74:c4:9a:2a:
80:81:96:cc:28:11:b3:3a:bc:5b:04:33:c5:58:68:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:82:21:D7:8C:8C:93:83:57:8F:DB:23:42:7C:54:6C:FF:BE:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93254E1A7C5B11F18A3AB60ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:cd:93:51:50:ea:04:86:7f:c6:57:05:53:28:3b:60:06:77:
2f:18:0f:1b:d3:05:c5:51:01:32:eb:89:d1:7b:51:b7:48:ca:
7e:51:c8:5c:0d:a8:0c:9f:e6:29:6f:b1:f0:d3:7b:2a:71:83:
23:fe:0d:61:0a:23:42:39:91:77:2b:5b:93:f4:1c:4b:2e:97:
fd:4b:cc:48:88:82:75:d3:66:c3:7e:7f:55:81:f6:c7:b4:ef:
87:f1:16:0a:ad:19:01:ac:11:c4:0d:0b:62:c3:ad:e5:cb:a7:
ed:96:ae:32:fe:52:60:b0:12:93:66:2e:e9:aa:c9:6a:cf:6b:
d1:34:ba:4b:84:9a:bf:66:29:bd:c6:df:6d:b3:bf:6c:b8:43:
cf:51:58:46:b9:b7:0f:4e:ba:0b:0a:eb:f3:e7:c1:c8:05:36:
4f:78:50:08:5c:7a:3e:b3:c2:63:95:0d:97:7a:54:60:bb:97:
d9:e5:de:09:96:fe:23:b3:e0:01:f9:22:9c:9c:b9:ac:b2:d6:
e8:05:98:fd:8a:47:1c:7d:3f:f9:42:52:08:17:03:cf:21:17:
30:e0:99:30:ef:1e:24:60:cb:0e:85:c7:f2:94:b5:55:6a:d8:
10:e6:7e:ea:f8:1c:5e:45:4a:0e:18:85:64:33:b5:80:19:c9:
48:f4:d7:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdgTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEwMTIzMzM0WhcNMjYwODEwMTIzMzM0WjAYMRYw
FAYDVQQDEw02YTUwZTZhMi0zNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6QcFJP4haE8Sa7v944NNbh/c8kTRtR15f4OMQwvHYOVvzTvZwo2RZ+6a
u9YfDJ473G6jBsmT1ef3jwI52Nn3FaccPxdSFfy3M80vyLNvLc14buyuAwnX78Fj
7v+TOD/vCMjpVjz7pnHlSNeWDGDlrbhWmSZfV0un/oRf6UzY8LKIz4EhVM7A0xQP
CLwG8LM4oI3rcSdjPCxCQw15vYbUa7o+t46vJgm1nUg74jwKJt06oPRbL/XWs4Xb
McvZfWCvR1Jb/SVOqOYc9pjMUyUjyjul2KlQZ1i2FDx1D+x4nFqI5QVL6ibejsEX
SnTEmiqAgZbMKBGzOrxbBDPFWGj7ewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNdZ
giHXjIyTg1eP2yNCfFRs/76LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MzI1NEUxQTdDNUIxMUYxOEEzQUI2MEFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8zZNRUOoEhn/GVwVTKDtgBncvGA8b0wXFUQEy64nRe1G3SMp+Uchc
DagMn+Ypb7Hw03sqcYMj/g1hCiNCOZF3K1uT9BxLLpf9S8xIiIJ102bDfn9VgfbH
tO+H8RYKrRkBrBHEDQtiw63ly6ftlq4y/lJgsBKTZi7pqslqz2vRNLpLhJq/Zim9
xt9ts79suEPPUVhGubcPTroLCuvz58HIBTZPeFAIXHo+s8JjlQ2XelRgu5fZ5d4J
lv4js+AB+SKcnLmsstboBZj9ikccfT/5QlIIFwPPIRcw4Jkw7x4kYMsOhcfylLVV
atgQ5n7q+BxeRUoOGIVkM7WAGclI9Ncd
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:16 2026 by rpki-client