Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A512B5BE7FC011F1A44A87A6CE1D38B0.roa
File: A512B5BE7FC011F1A44A87A6CE1D38B0.roa (raw, json)
Hash identifier: 3L1TzOeft4v8tWlzvwVAqlr0u92+RA/O+qOcmPwlznw=
Subject key identifier: 50:E2:47:92:E3:25:03:D1:85:0B:14:21:43:64:16:F8:82:0F:1A:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A512B5BE7FC011F1A44A87A6CE1D38B0.roa
Signing time: Tue 14 Jul 2026 20:14:41 +0000
ROA not before: Tue 14 Jul 2026 20:14:34 +0000
ROA not after: Fri 21 Aug 2026 20:14:34 +0000
asID: 32043
IP address blocks: 154.200.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121084 (0x1d8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 20:14:34 2026 GMT
Not After : Aug 21 20:14:34 2026 GMT
Subject: CN=6a5698b1-18f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:93:77:93:d8:2c:d3:6a:50:3b:38:13:fb:
76:1d:5f:29:1f:7b:4d:9c:52:de:66:b3:9f:5a:e4:
20:25:8c:62:e0:3b:68:ac:a2:ca:c8:74:de:a7:f3:
98:a1:94:3d:f8:dd:8d:19:96:1d:07:43:1d:77:1a:
22:9e:91:11:17:d6:4f:5a:3c:e4:11:ae:bc:54:68:
61:cb:2d:4d:ad:c4:67:8a:cb:67:8d:3a:e1:bb:f3:
92:e6:59:94:10:d3:b7:a8:5c:d3:c3:09:75:cf:a5:
f7:a8:4e:52:e1:2a:56:df:a5:cf:ae:30:92:61:f1:
2f:78:53:f0:e4:d1:ba:58:ba:c9:62:ce:10:f4:ec:
b8:cf:40:a9:11:67:8b:40:43:16:d8:96:10:11:56:
e1:53:e2:10:93:d0:0e:d7:9b:62:e1:18:25:93:3e:
19:90:f3:14:dc:aa:41:3c:03:95:25:94:8f:c5:96:
6a:72:36:37:c8:ad:7e:84:0d:c5:d0:0b:b7:eb:96:
e7:49:b2:3a:72:44:95:ac:2f:ef:9c:08:e6:b8:28:
df:7a:bc:e3:f5:22:cb:2f:78:68:13:d5:49:f0:39:
93:99:05:73:25:5e:b1:26:00:65:17:4e:8f:f6:d9:
85:04:33:a8:90:da:66:25:9a:35:fb:cb:d6:37:71:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:47:92:E3:25:03:D1:85:0B:14:21:43:64:16:F8:82:0F:1A:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A512B5BE7FC011F1A44A87A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
Signature Algorithm: sha256WithRSAEncryption
be:09:53:ff:ea:f2:14:94:17:9d:74:45:21:6f:3f:97:6f:3f:
7e:fc:20:72:dc:f1:e4:ee:47:ef:cd:9e:e9:21:63:90:34:e1:
20:f6:f6:73:5f:a0:12:e3:da:13:ce:8b:cc:1d:b1:e7:70:6f:
a6:2c:c8:7f:e7:84:15:eb:a4:76:a2:47:64:fe:9f:6b:f1:fc:
f1:1a:0c:c0:f0:0a:30:64:b0:4c:90:24:25:bf:f9:c9:f8:3b:
1a:10:4a:a8:44:a6:f9:ea:1b:92:26:95:de:b4:5e:e6:65:52:
f3:99:90:2f:54:3d:83:6b:99:3d:c0:04:0e:b5:7a:bc:ee:ff:
78:06:88:f7:a2:ed:44:e3:38:1d:a3:d0:c9:88:92:48:0c:d1:
d4:1b:d6:aa:b9:cb:04:ff:64:39:c3:38:b2:10:59:1b:65:2f:
ca:14:85:b8:b5:2a:a0:14:12:6e:3c:88:66:a5:9c:6f:b3:cc:
79:02:3e:76:86:84:86:b3:61:87:64:7e:af:7d:af:09:7b:d3:
aa:8f:eb:2d:16:c2:b0:0d:12:c8:fa:c3:0b:5c:2c:b3:c6:8d:
fe:3e:f8:ea:1f:23:cd:ef:0a:3f:a8:2e:d2:5a:4f:8c:2c:1e:
06:cc:45:69:a9:b6:15:6a:f3:d3:16:e5:8b:1d:5a:8f:57:e0:
d5:ca:ad:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdj8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MjAxNDM0WhcNMjYwODIxMjAxNDM0WjAYMRYw
FAYDVQQDEw02YTU2OThiMS0xOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuO2Td5PYLNNqUDs4E/t2HV8pH3tNnFLeZrOfWuQgJYxi4DtorKLKyHTe
p/OYoZQ9+N2NGZYdB0MddxoinpERF9ZPWjzkEa68VGhhyy1NrcRnistnjTrhu/OS
5lmUENO3qFzTwwl1z6X3qE5S4SpW36XPrjCSYfEveFPw5NG6WLrJYs4Q9Oy4z0Cp
EWeLQEMW2JYQEVbhU+IQk9AO15ti4Rglkz4ZkPMU3KpBPAOVJZSPxZZqcjY3yK1+
hA3F0Au365bnSbI6ckSVrC/vnAjmuCjferzj9SLLL3hoE9VJ8DmTmQVzJV6xJgBl
F06P9tmFBDOokNpmJZo1+8vWN3Fk9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFDi
R5LjJQPRhQsUIUNkFviCDxoaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNTEyQjVCRTdGQzAxMUYxQTQ0QTg3QTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmshuMA0GCSqGSIb3DQEB
CwUAA4IBAQC+CVP/6vIUlBeddEUhbz+Xbz9+/CBy3PHk7kfvzZ7pIWOQNOEg9vZz
X6AS49oTzovMHbHncG+mLMh/54QV66R2okdk/p9r8fzxGgzA8AowZLBMkCQlv/nJ
+DsaEEqoRKb56huSJpXetF7mZVLzmZAvVD2Da5k9wAQOtXq87v94Boj3ou1E4zgd
o9DJiJJIDNHUG9aqucsE/2Q5wziyEFkbZS/KFIW4tSqgFBJuPIhmpZxvs8x5Aj52
hoSGs2GHZH6vfa8Je9Oqj+stFsKwDRLI+sMLXCyzxo3+PvjqHyPN7wo/qC7SWk+M
LB4GzEVpqbYVavPTFuWLHVqPV+DVyq2f
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:17:47 2026 by rpki-client