Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC411C9A82BA11F186204013CF1D38B0.roa
File: DC411C9A82BA11F186204013CF1D38B0.roa (raw, json)
Hash identifier: Lx2TxVL9RAMprRw/Z81gCPX8LIUvjWZMdi0duCJgx0A=
Subject key identifier: AF:92:FA:4E:2C:10:4A:F2:7D:1C:12:F5:51:BB:83:DC:69:8D:44:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D988
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC411C9A82BA11F186204013CF1D38B0.roa
Signing time: Sat 18 Jul 2026 15:10:50 +0000
ROA not before: Sat 18 Jul 2026 15:10:46 +0000
ROA not after: Wed 21 Oct 2026 15:10:46 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121224 (0x1d988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 18 15:10:46 2026 GMT
Not After : Oct 21 15:10:46 2026 GMT
Subject: CN=6a5b977a-5796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:59:2d:61:97:cd:81:65:59:37:40:85:e5:
97:9d:2a:ab:02:f0:f9:45:c8:ce:30:33:44:8a:4b:
9f:78:d4:d5:ee:af:ce:54:95:9b:c6:c7:80:83:48:
b1:22:9e:03:67:38:37:cb:89:35:ad:b3:57:13:cb:
b7:52:a2:8f:74:a9:e4:bf:b3:85:c1:a9:cc:21:eb:
e2:19:d2:47:ed:d1:6e:a1:8a:bb:c9:74:b7:53:42:
ac:8b:30:30:f3:4f:69:79:c2:cd:03:40:e2:c4:3d:
67:42:22:bd:0c:07:a8:ff:83:bc:00:08:3c:aa:67:
ae:e6:50:10:55:46:a8:4f:71:6e:7d:fb:b1:35:16:
91:7d:5c:d0:0e:2c:ef:42:f3:7b:1a:7e:12:e3:e0:
56:fe:80:b3:4d:95:3d:1a:55:a0:a0:38:c5:8c:45:
2c:21:ef:77:c2:63:47:b6:f1:5b:69:1c:6a:91:4b:
a3:6a:ef:94:c3:01:98:c4:1d:cf:b5:03:e9:c9:3f:
4d:d5:2f:0d:6c:32:9d:f6:6d:83:1c:e1:b7:e5:43:
35:db:6a:03:e1:c3:f9:39:03:64:1c:4a:4d:cb:b0:
08:d8:ea:c9:17:5e:1f:be:2a:04:43:7c:f3:47:0d:
fe:ca:10:7c:25:39:1b:0d:bf:69:75:25:f0:12:56:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:FA:4E:2C:10:4A:F2:7D:1C:12:F5:51:BB:83:DC:69:8D:44:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC411C9A82BA11F186204013CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c1:c5:94:6e:dc:b7:10:ca:b8:a6:c9:34:3a:57:45:0f:d2:
c9:9f:c7:7a:0b:40:40:24:5e:0a:44:3b:0e:c2:0e:80:d8:cc:
44:e2:f2:d4:4b:e3:df:b0:d9:49:cc:b5:b4:1b:e2:7e:fa:9e:
0c:c5:5f:5e:35:43:70:fe:f0:e2:13:7f:62:53:96:60:83:53:
be:30:33:a8:d5:b2:6f:a9:dc:69:15:cb:a1:c5:0f:3c:c2:a4:
d4:3f:06:96:34:aa:6f:aa:3f:cb:63:e8:06:c4:06:94:87:c0:
49:0c:66:2f:8c:19:7d:c3:3a:93:f0:70:2d:21:08:3b:9c:37:
1d:5d:46:b1:b3:32:04:5e:6d:84:70:33:ad:2c:45:f7:9d:08:
6a:9d:a9:a8:99:f8:59:da:95:c8:91:77:f0:b9:34:dd:02:bc:
71:41:6e:c0:e6:4f:95:43:38:10:ef:ac:fd:ac:48:34:f0:ab:
d7:f6:1b:d6:ce:28:82:0d:63:1e:b7:3b:97:3d:d8:07:19:57:
68:49:5f:d6:42:4d:1b:14:72:e6:51:87:63:9a:c6:6c:6f:df:
5b:18:88:3d:cf:b8:6a:76:1f:5e:9f:d4:45:53:b8:95:e4:0f:
ad:db:83:1f:17:22:75:f5:7b:3b:03:33:ce:6f:74:64:da:a8:
e0:81:2d:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdmIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE4MTUxMDQ2WhcNMjYxMDIxMTUxMDQ2WjAYMRYw
FAYDVQQDEw02YTViOTc3YS01Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwfNZLWGXzYFlWTdAheWXnSqrAvD5RcjOMDNEikufeNTV7q/OVJWbxseA
g0ixIp4DZzg3y4k1rbNXE8u3UqKPdKnkv7OFwanMIeviGdJH7dFuoYq7yXS3U0Ks
izAw809pecLNA0DixD1nQiK9DAeo/4O8AAg8qmeu5lAQVUaoT3FuffuxNRaRfVzQ
DizvQvN7Gn4S4+BW/oCzTZU9GlWgoDjFjEUsIe93wmNHtvFbaRxqkUujau+UwwGY
xB3PtQPpyT9N1S8NbDKd9m2DHOG35UM122oD4cP5OQNkHEpNy7AI2OrJF14fvioE
Q3zzRw3+yhB8JTkbDb9pdSXwElYcDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK+S
+k4sEEryfRwS9VG7g9xpjUQ1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQzQxMUM5QTgyQkExMUYxODYyMDQwMTNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsatMA0GCSqGSIb3DQEB
CwUAA4IBAQC9wcWUbty3EMq4psk0OldFD9LJn8d6C0BAJF4KRDsOwg6A2MxE4vLU
S+PfsNlJzLW0G+J++p4MxV9eNUNw/vDiE39iU5Zgg1O+MDOo1bJvqdxpFcuhxQ88
wqTUPwaWNKpvqj/LY+gGxAaUh8BJDGYvjBl9wzqT8HAtIQg7nDcdXUaxszIEXm2E
cDOtLEX3nQhqnamomfhZ2pXIkXfwuTTdArxxQW7A5k+VQzgQ76z9rEg08KvX9hvW
ziiCDWMetzuXPdgHGVdoSV/WQk0bFHLmUYdjmsZsb99bGIg9z7hqdh9en9RFU7iV
5A+t24MfFyJ19Xs7AzPOb3Rk2qjggS2Z
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:54 2026 by rpki-client