Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B88714854E11F192359CC2CE1D38B0.roa
File: D0B88714854E11F192359CC2CE1D38B0.roa (raw, json)
Hash identifier: dUjTNjAZFfYU5ObHa3maVE5UDL6tdUUdCSTRbaGCZCo=
Subject key identifier: 78:40:24:63:ED:54:52:43:F5:DC:E9:B4:B2:AE:3E:6F:EB:32:26:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B88714854E11F192359CC2CE1D38B0.roa
Signing time: Tue 21 Jul 2026 21:54:58 +0000
ROA not before: Tue 21 Jul 2026 21:54:54 +0000
ROA not after: Tue 08 Sep 2026 21:54:54 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121536 (0x1dac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:54:54 2026 GMT
Not After : Sep 8 21:54:54 2026 GMT
Subject: CN=6a5feab2-34e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:32:44:2e:1a:4f:b2:08:a8:c0:dc:55:26:
dd:19:14:f1:ac:8f:04:4b:ed:b0:26:a2:d4:b9:42:
c9:63:74:bf:bd:86:02:ad:57:56:7d:4d:92:f5:d6:
13:16:24:6a:5b:e9:9e:1a:50:a5:f5:01:99:21:c6:
fa:d0:f2:af:76:bb:5d:4d:3c:a4:5b:c8:4e:02:0c:
a8:13:13:09:55:d2:e6:d5:bf:38:d9:24:3c:09:d3:
a4:36:9e:17:6a:f1:ec:7e:a7:40:22:c7:16:31:6e:
18:bc:5a:27:3b:be:4d:ed:29:6e:ca:d6:47:c1:13:
b9:1f:ce:b6:74:aa:2e:0c:89:f8:d8:6f:a1:a7:c5:
0f:f3:38:b3:63:44:0b:fb:03:0d:b7:ec:2b:71:b5:
38:2d:c1:7d:c5:b6:1b:fa:bd:e0:86:fc:81:1a:52:
98:cb:04:f9:e9:ce:55:4b:3e:59:ed:3a:cc:43:22:
d6:9f:e4:ec:27:cb:76:7a:13:13:0e:6f:ac:ba:d8:
29:13:9d:82:52:1d:90:30:87:96:7b:27:4b:1a:4f:
c2:a0:2d:c0:69:4d:08:ff:80:c4:0a:7a:a1:89:4b:
de:dd:a3:b3:e4:a7:34:e0:d4:cb:00:36:f4:d3:df:
85:fe:d6:d6:31:2b:4a:80:93:d5:55:81:46:95:4c:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:40:24:63:ED:54:52:43:F5:DC:E9:B4:B2:AE:3E:6F:EB:32:26:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B88714854E11F192359CC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ae:d7:ee:05:36:75:ed:63:8a:47:56:65:f8:d9:1e:5b:39:
2a:15:65:76:45:a7:d7:1d:57:7a:85:0c:9b:86:4f:10:96:d1:
0b:24:de:74:37:d1:02:2e:91:ef:43:d6:bc:ae:e6:49:67:18:
92:0d:5a:be:69:c6:cb:ac:7a:ba:8b:5c:ee:5e:50:67:8d:c4:
fa:3a:d6:c9:d1:09:74:7f:33:40:34:f4:5d:bb:ee:81:7f:d8:
55:e1:44:7c:7b:04:de:af:7a:a8:0a:cf:46:b9:be:85:be:3a:
79:56:4d:c0:7b:3c:35:7c:28:4e:76:b1:1e:85:59:84:ce:13:
a8:d0:df:7b:cd:de:29:24:f0:33:b0:4e:80:25:11:65:e0:c9:
dc:d0:e7:40:a0:f8:43:0f:ba:ef:8b:6e:12:d7:bd:9a:7d:d4:
73:86:ac:ab:b4:64:48:84:b1:c8:37:bd:e6:a0:15:c6:31:2c:
f1:03:5a:f0:94:f7:2f:85:54:29:f9:14:57:bd:3d:e1:0a:3a:
c9:f1:fd:58:14:a6:fa:8e:ec:db:96:13:ba:19:3b:ea:b1:c7:
48:bc:f8:61:c0:02:aa:f4:a9:9f:f4:72:05:4c:08:7d:e2:56:
a2:3c:7d:eb:e5:66:aa:b5:3a:21:50:58:5e:92:03:95:d9:0a:
02:dd:35:3a
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAdrAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIxMjE1NDU0WhcNMjYwOTA4MjE1NDU0WjAYMRYw
FAYDVQQDEw02YTVmZWFiMi0zNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyn4yRC4aT7IIqMDcVSbdGRTxrI8ES+2wJqLUuULJY3S/vYYCrVdWfU2S
9dYTFiRqW+meGlCl9QGZIcb60PKvdrtdTTykW8hOAgyoExMJVdLm1b842SQ8CdOk
Np4XavHsfqdAIscWMW4YvFonO75N7SluytZHwRO5H862dKouDIn42G+hp8UP8ziz
Y0QL+wMNt+wrcbU4LcF9xbYb+r3ghvyBGlKYywT56c5VSz5Z7TrMQyLWn+TsJ8t2
ehMTDm+sutgpE52CUh2QMIeWeydLGk/CoC3AaU0I/4DECnqhiUve3aOz5Kc04NTL
ADb009+F/tbWMStKgJPVVYFGlUzwYwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHhA
JGPtVFJD9dzptLKuPm/rMiYsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMEI4ODcxNDg1NEUxMUYxOTIzNTlDQzJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmlGEAwQBmlGKMA0GCSqG
SIb3DQEBCwUAA4IBAQAgrtfuBTZ17WOKR1Zl+NkeWzkqFWV2RafXHVd6hQybhk8Q
ltELJN50N9ECLpHvQ9a8ruZJZxiSDVq+acbLrHq6i1zuXlBnjcT6OtbJ0Ql0fzNA
NPRdu+6Bf9hV4UR8ewTer3qoCs9Gub6Fvjp5Vk3Aezw1fChOdrEehVmEzhOo0N97
zd4pJPAzsE6AJRFl4Mnc0OdAoPhDD7rvi24S172afdRzhqyrtGRIhLHIN73moBXG
MSzxA1rwlPcvhVQp+RRXvT3hCjrJ8f1YFKb6juzblhO6GTvqscdIvPhhwAKq9Kmf
9HIFTAh94laiPH3r5WaqtTohUFhekgOV2QoC3TU6
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:27 2026 by rpki-client