Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8782D987D9B11F19C4FB2A2CE1D38B0.roa
File: D8782D987D9B11F19C4FB2A2CE1D38B0.roa (raw, json)
Hash identifier: utsNIBsJyC0eLBbcIdanzy6S/aooBhb4KLFPZSg9l5k=
Subject key identifier: 83:EF:65:0B:6F:69:86:00:4A:82:7F:7C:31:91:1B:BE:D7:EE:41:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D877
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8782D987D9B11F19C4FB2A2CE1D38B0.roa
Signing time: Sun 12 Jul 2026 02:46:13 +0000
ROA not before: Sun 12 Jul 2026 02:46:09 +0000
ROA not after: Mon 10 Aug 2026 02:46:09 +0000
asID: 17497
IP address blocks: 154.193.25.0/24 maxlen: 24
154.193.26.0/24 maxlen: 24
154.193.27.0/24 maxlen: 24
154.193.28.0/24 maxlen: 24
154.193.29.0/24 maxlen: 24
154.193.30.0/24 maxlen: 24
154.193.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120951 (0x1d877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 02:46:09 2026 GMT
Not After : Aug 10 02:46:09 2026 GMT
Subject: CN=6a52fff5-8890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:e4:b5:f7:39:f0:3f:aa:48:a1:80:c0:45:
88:a0:df:0f:ed:f1:4f:f2:7b:ce:a6:a5:ea:55:28:
fa:04:f8:8b:5f:f8:b2:95:d2:a3:8f:d4:57:ef:56:
43:2e:4b:65:a4:63:ee:cd:69:10:a0:26:22:af:6b:
04:3b:8d:a5:e2:bd:3c:48:14:00:49:5d:fb:b9:b5:
68:82:b0:ae:0a:7e:09:fa:85:11:17:0e:3b:50:b4:
88:8a:4f:f4:e9:b3:a6:e7:5b:35:3d:31:ce:97:8d:
be:a4:16:67:fc:a8:32:58:1d:8f:e4:6a:59:4d:b4:
4c:12:cb:d9:3f:31:73:8f:d3:e9:d4:0d:80:35:d8:
e2:3a:34:53:9c:ab:71:9d:5a:55:74:d6:e9:6c:4f:
c4:7f:b6:02:24:fe:66:41:fd:7a:69:35:3a:0b:05:
d7:48:03:14:bc:19:85:fb:22:a5:dc:88:e5:91:09:
d0:2b:5a:55:38:2e:de:c7:ba:0f:57:83:a8:b9:7d:
0c:2d:7f:80:50:a0:b6:27:87:96:9b:3e:ee:f1:da:
a6:68:b9:e7:5b:3b:b6:66:19:6a:ab:25:f1:75:98:
e3:18:3f:60:1f:00:91:1d:6a:47:35:29:3b:8b:5f:
bf:be:91:2d:03:44:90:31:df:85:40:5c:12:e5:3f:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:65:0B:6F:69:86:00:4A:82:7F:7C:31:91:1B:BE:D7:EE:41:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8782D987D9B11F19C4FB2A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.25.0-154.193.31.255
Signature Algorithm: sha256WithRSAEncryption
8d:4e:c6:b7:62:cc:b9:4d:25:7b:ad:b9:ab:29:73:24:ea:6c:
7b:9a:3a:b2:22:80:a3:50:26:ea:3d:b0:46:76:69:28:68:80:
ae:b3:90:ff:51:c3:0b:76:e9:d2:f4:ee:12:20:93:fc:d1:de:
2c:40:84:53:30:cc:db:cc:54:dd:c9:67:a3:b1:02:25:cf:80:
a1:be:a3:28:07:6a:3b:e9:20:bd:38:1e:a2:1c:cc:cd:68:1e:
b2:2b:ad:24:31:cd:0e:23:61:a4:a3:0a:59:d3:54:e2:d9:ec:
ea:56:cf:b1:97:31:4b:24:f3:fe:c8:be:f5:07:b9:92:78:ad:
ed:32:b5:bc:db:21:a1:14:79:16:95:aa:cb:d5:5b:e8:63:f2:
20:62:de:be:96:0a:08:b3:41:fc:9b:f7:30:8a:ce:ba:a4:63:
8a:11:db:c1:5c:28:60:ae:f7:7a:0e:fd:6c:c8:0e:a5:7a:16:
40:16:eb:05:6b:9a:aa:e3:23:2a:07:c8:07:74:68:68:4f:01:
a7:c0:d3:0d:da:19:0b:3c:d9:e7:d6:79:b3:7d:01:b5:cc:2e:
41:ed:f8:02:0d:5a:90:6a:60:b0:ef:1b:81:15:41:9a:27:d7:
95:58:8c:d4:fa:96:fd:9f:21:6e:c0:34:9b:e0:74:0f:4b:2f:
89:8a:5f:ca
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdh3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEyMDI0NjA5WhcNMjYwODEwMDI0NjA5WjAYMRYw
FAYDVQQDEw02YTUyZmZmNS04ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsbvktfc58D+qSKGAwEWIoN8P7fFP8nvOpqXqVSj6BPiLX/iyldKjj9RX
71ZDLktlpGPuzWkQoCYir2sEO42l4r08SBQASV37ubVogrCuCn4J+oURFw47ULSI
ik/06bOm51s1PTHOl42+pBZn/KgyWB2P5GpZTbRMEsvZPzFzj9Pp1A2ANdjiOjRT
nKtxnVpVdNbpbE/Ef7YCJP5mQf16aTU6CwXXSAMUvBmF+yKl3IjlkQnQK1pVOC7e
x7oPV4OouX0MLX+AUKC2J4eWmz7u8dqmaLnnWzu2ZhlqqyXxdZjjGD9gHwCRHWpH
NSk7i1+/vpEtA0SQMd+FQFwS5T8I6wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIPv
ZQtvaYYASoJ/fDGRG77X7kGSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EODc4MkQ5ODdEOUIxMUYxOUM0RkIyQTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACawRkDBAWawQAwDQYJ
KoZIhvcNAQELBQADggEBAI1OxrdizLlNJXutuaspcyTqbHuaOrIigKNQJuo9sEZ2
aShogK6zkP9Rwwt26dL07hIgk/zR3ixAhFMwzNvMVN3JZ6OxAiXPgKG+oygHajvp
IL04HqIczM1oHrIrrSQxzQ4jYaSjClnTVOLZ7OpWz7GXMUsk8/7IvvUHuZJ4re0y
tbzbIaEUeRaVqsvVW+hj8iBi3r6WCgizQfyb9zCKzrqkY4oR28FcKGCu93oO/WzI
DqV6FkAW6wVrmqrjIyoHyAd0aGhPAafA0w3aGQs82efWebN9AbXMLkHt+AINWpBq
YLDvG4EVQZon15VYjNT6lv2fIW7ANJvgdA9LL4mKX8o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:51 2026 by rpki-client