Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7646847D5211F186BE2BE4CE1D38B0.roa
File: AB7646847D5211F186BE2BE4CE1D38B0.roa (raw, json)
Hash identifier: TOITimqXSapPHBzwLqZetLki3fiOCWXMuVDPwHuw/FE=
Subject key identifier: 1B:C9:19:70:CA:56:F0:5E:74:27:44:0C:0A:6D:B9:48:88:D2:1C:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D850
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7646847D5211F186BE2BE4CE1D38B0.roa
Signing time: Sat 11 Jul 2026 18:02:25 +0000
ROA not before: Sat 11 Jul 2026 18:02:20 +0000
ROA not after: Tue 18 Aug 2026 18:02:20 +0000
asID: 153706
IP address blocks: 154.193.208.0/24 maxlen: 24
154.193.209.0/24 maxlen: 24
154.193.210.0/24 maxlen: 24
154.193.211.0/24 maxlen: 24
154.193.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120912 (0x1d850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 18:02:20 2026 GMT
Not After : Aug 18 18:02:20 2026 GMT
Subject: CN=6a528530-6fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:90:97:a0:f4:1b:96:45:79:4a:ed:8f:36:
db:91:be:97:21:01:83:da:ff:b6:7a:81:10:df:d7:
3c:4a:78:7a:45:8b:3d:58:45:16:45:d2:f3:2d:63:
db:c1:05:d4:3a:ba:eb:f3:72:2e:34:8b:d5:45:7c:
93:36:06:88:68:6b:72:a4:e3:fc:88:4a:64:1d:ed:
00:0d:37:c7:2c:3e:22:a1:4f:36:3c:c3:b4:54:3b:
cf:07:41:9e:91:09:06:fb:d8:42:22:09:af:5e:6f:
c3:71:5a:25:3d:cd:9d:b0:50:5f:b1:98:be:f2:79:
d5:98:fe:94:64:04:9d:14:6c:3b:3b:54:f3:cd:cd:
97:26:77:6b:64:50:06:f5:1d:c4:45:dc:cd:2c:c5:
6b:92:02:59:05:b7:ad:0f:8d:cc:66:2d:5e:3f:42:
a3:c7:4e:0b:0e:4e:f5:e6:92:33:8c:ac:32:f0:b4:
8d:72:92:68:7a:be:ce:7d:b0:98:14:ea:db:b4:67:
c2:3b:10:2b:2d:0b:a4:9f:4b:b0:82:09:a0:1f:f4:
17:08:75:7d:83:8e:cf:05:38:59:a2:b4:0c:f8:87:
18:01:c8:79:c4:f0:3f:9e:e7:a7:89:1e:86:be:5e:
e8:1a:72:ab:9e:5d:2f:0b:6e:cc:24:36:c3:42:dd:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:19:70:CA:56:F0:5E:74:27:44:0C:0A:6D:B9:48:88:D2:1C:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7646847D5211F186BE2BE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.208.0/22
154.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:df:7b:c5:bb:eb:3b:05:e1:6e:1f:c5:c0:05:63:8e:53:9f:
a5:9d:c3:9e:01:9e:c4:6a:46:80:a4:24:c5:33:9c:e9:9f:8c:
56:3a:1c:19:2d:47:36:d5:63:67:06:44:7b:72:0f:90:4a:ad:
00:52:59:a2:26:69:6d:8c:4d:c8:e1:08:18:1f:04:60:85:59:
d5:3d:b8:99:a1:27:95:a9:d0:12:67:cb:78:3f:6b:44:e1:9c:
25:63:88:66:9f:ec:03:d2:01:b8:73:91:90:5a:62:eb:63:68:
ca:24:16:ed:d8:76:8a:2d:c8:84:87:5a:82:66:07:a2:87:c5:
55:0f:42:f8:15:19:36:7d:ec:e0:89:5c:af:13:57:e1:1f:74:
fd:72:0c:08:c8:16:d4:ef:06:d5:5d:81:44:e5:4e:50:d8:45:
c6:32:0f:42:ba:06:a2:b5:8e:4c:3a:5e:a2:8a:29:73:ee:09:
8b:17:2e:45:7e:6e:35:14:63:ac:98:72:60:c0:06:88:69:93:
4f:10:d7:86:4f:99:79:9b:2f:f8:d8:8b:20:9f:7d:f8:bb:ee:
9d:ba:3b:15:4c:ee:4b:c3:44:3b:41:73:00:7e:c2:f2:2a:81:
f0:e8:ca:ac:93:6e:28:50:4f:28:d8:19:ef:7d:9a:08:be:36:
ad:a1:9b:d2
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAdhQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzExMTgwMjIwWhcNMjYwODE4MTgwMjIwWjAYMRYw
FAYDVQQDEw02YTUyODUzMC02ZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxZOQl6D0G5ZFeUrtjzbbkb6XIQGD2v+2eoEQ39c8Snh6RYs9WEUWRdLz
LWPbwQXUOrrr83IuNIvVRXyTNgaIaGtypOP8iEpkHe0ADTfHLD4ioU82PMO0VDvP
B0GekQkG+9hCIgmvXm/DcVolPc2dsFBfsZi+8nnVmP6UZASdFGw7O1Tzzc2XJndr
ZFAG9R3ERdzNLMVrkgJZBbetD43MZi1eP0Kjx04LDk715pIzjKwy8LSNcpJoer7O
fbCYFOrbtGfCOxArLQukn0uwggmgH/QXCHV9g47PBThZorQM+IcYAch5xPA/nuen
iR6Gvl7oGnKrnl0vC27MJDbDQt37IQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBvJ
GXDKVvBedCdEDAptuUiI0hxKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjc2NDY4NDdENTIxMUYxODZCRTJCRTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsHQAwQAmsH3MA0GCSqG
SIb3DQEBCwUAA4IBAQBP33vFu+s7BeFuH8XABWOOU5+lncOeAZ7EakaApCTFM5zp
n4xWOhwZLUc21WNnBkR7cg+QSq0AUlmiJmltjE3I4QgYHwRghVnVPbiZoSeVqdAS
Z8t4P2tE4ZwlY4hmn+wD0gG4c5GQWmLrY2jKJBbt2HaKLciEh1qCZgeih8VVD0L4
FRk2fezgiVyvE1fhH3T9cgwIyBbU7wbVXYFE5U5Q2EXGMg9CugaitY5MOl6iiilz
7gmLFy5Ffm41FGOsmHJgwAaIaZNPENeGT5l5my/42Isgn334u+6dujsVTO5Lw0Q7
QXMAfsLyKoHw6Mqsk24oUE8o2BnvfZoIvjatoZvS
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:49 2026 by rpki-client