Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78D6E8681B311F1952220DFCE1D38B0.roa
File: D78D6E8681B311F1952220DFCE1D38B0.roa (raw, json)
Hash identifier: eePsC94k1HYjLJDmPcYRoMFI8a85PlUQ9iCxMr3DD5o=
Subject key identifier: BC:CE:96:5C:76:B0:98:F7:60:F0:07:91:C6:CF:FE:01:ED:89:11:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D94B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78D6E8681B311F1952220DFCE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:48:04 +0000
ROA not before: Fri 17 Jul 2026 07:48:00 +0000
ROA not after: Mon 24 Aug 2026 07:48:00 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121163 (0x1d94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:48:00 2026 GMT
Not After : Aug 24 07:48:00 2026 GMT
Subject: CN=6a59de34-98b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:76:f7:1b:04:ce:eb:f7:29:d9:f2:14:5e:
cb:71:d9:b7:53:9d:be:fb:2f:12:94:78:60:c0:7d:
d6:bf:b3:83:31:30:de:50:0f:5e:e1:e7:64:b8:8e:
6c:3a:51:dd:93:5e:0b:b4:38:97:c5:7f:29:45:53:
25:b1:71:5e:9a:a7:91:89:94:62:14:77:1a:2c:4d:
2d:d8:2e:59:e9:4a:d4:96:69:81:32:c1:05:53:dc:
45:27:70:f6:39:17:a2:62:d8:fe:83:00:a2:19:fc:
22:eb:7c:1d:82:20:a0:b0:a8:8b:1c:12:4e:62:ab:
c3:34:e6:37:f6:44:03:11:68:2b:e2:7c:87:f3:6a:
0d:91:09:52:d9:b0:54:7c:05:02:f5:6c:d9:54:9b:
31:7a:87:7f:67:ac:bd:ca:51:8e:fb:dc:c8:66:7b:
7a:b1:18:c4:d1:e7:a2:71:29:56:28:10:0d:a3:cb:
ec:b3:1d:86:df:2d:b7:6f:a9:69:af:60:15:47:30:
52:5e:21:14:05:ed:36:73:8e:a6:04:f6:64:42:c8:
de:fa:90:f6:92:ad:22:cf:c6:d5:91:76:6f:fa:2a:
f4:bb:5c:74:47:ca:81:bb:da:6b:0f:78:40:9b:56:
ed:e6:bf:57:77:72:78:48:5c:2c:24:ea:ea:87:ac:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CE:96:5C:76:B0:98:F7:60:F0:07:91:C6:CF:FE:01:ED:89:11:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78D6E8681B311F1952220DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
7c:c3:8c:ae:5a:91:d6:11:e5:77:db:db:e1:d3:c4:28:c4:9f:
16:d2:2d:8a:5b:2f:6c:44:de:98:27:19:02:c4:5e:bd:9b:39:
e4:78:cc:7c:d2:8a:e9:b8:ba:b8:dd:0f:ea:26:45:9e:f1:64:
f3:7a:f2:06:f6:72:91:94:37:5c:c1:cb:b3:64:4a:d5:a3:4a:
b8:be:b3:ca:a8:63:d8:f4:ee:a9:40:6c:38:45:fe:c9:da:30:
58:70:89:d2:4b:66:e0:2f:24:48:01:c5:88:ab:f2:19:e9:b5:
80:68:dc:01:2c:be:6e:73:70:08:93:f2:5c:7e:c6:71:06:de:
29:2e:e9:12:6b:57:aa:cf:9a:be:fd:69:c3:5e:7a:05:45:90:
03:f9:4c:58:70:c4:f2:99:b2:2b:65:23:31:48:f7:f5:b1:ee:
4f:f5:81:60:0f:33:e3:33:4f:d8:2b:6b:c1:4e:9e:08:3c:f8:
bf:51:ab:ac:39:6b:22:92:75:67:e9:22:b4:4b:84:1b:b4:21:
67:88:12:65:94:4d:bc:f3:72:25:1b:f2:31:e4:97:a9:1e:6b:
ab:91:03:92:be:80:1b:bf:f5:e8:97:c5:74:84:c3:fd:d6:e9:
d2:65:f3:59:6c:12:36:ac:0c:99:61:51:74:ed:95:ca:8f:00:
8c:0a:d2:f2
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdlLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE3MDc0ODAwWhcNMjYwODI0MDc0ODAwWjAYMRYw
FAYDVQQDEw02YTU5ZGUzNC05OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr0J29xsEzuv3KdnyFF7Lcdm3U52++y8SlHhgwH3Wv7ODMTDeUA9e4edk
uI5sOlHdk14LtDiXxX8pRVMlsXFemqeRiZRiFHcaLE0t2C5Z6UrUlmmBMsEFU9xF
J3D2OReiYtj+gwCiGfwi63wdgiCgsKiLHBJOYqvDNOY39kQDEWgr4nyH82oNkQlS
2bBUfAUC9WzZVJsxeod/Z6y9ylGO+9zIZnt6sRjE0eeicSlWKBANo8vssx2G3y23
b6lpr2AVRzBSXiEUBe02c46mBPZkQsje+pD2kq0iz8bVkXZv+ir0u1x0R8qBu9pr
D3hAm1bt5r9Xd3J4SFwsJOrqh6yJdwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLzO
llx2sJj3YPAHkcbP/gHtiRHOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENzhENkU4NjgxQjMxMUYxOTUyMjIwREZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaWZADBASaWcAwDQYJ
KoZIhvcNAQELBQADggEBAHzDjK5akdYR5Xfb2+HTxCjEnxbSLYpbL2xE3pgnGQLE
Xr2bOeR4zHzSium4urjdD+omRZ7xZPN68gb2cpGUN1zBy7NkStWjSri+s8qoY9j0
7qlAbDhF/snaMFhwidJLZuAvJEgBxYir8hnptYBo3AEsvm5zcAiT8lx+xnEG3iku
6RJrV6rPmr79acNeegVFkAP5TFhwxPKZsitlIzFI9/Wx7k/1gWAPM+MzT9gra8FO
ngg8+L9Rq6w5ayKSdWfpIrRLhBu0IWeIEmWUTbzzciUb8jHkl6kea6uRA5K+gBu/
9eiXxXSEw/3W6dJl81lsEjasDJlhUXTtlcqPAIwK0vI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:18 2026 by rpki-client