Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF8E1BC8755D11F1860206CFCE1D38B0.roa
File: EF8E1BC8755D11F1860206CFCE1D38B0.roa (raw, json)
Hash identifier: xL7x47hYA+y+6zqRgF0Xg2Njn6/QZtWJKYW3ZfB7daw=
Subject key identifier: D5:2F:9D:BE:47:4D:23:FF:7E:16:64:10:1B:83:86:4B:F8:D1:7F:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D642
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF8E1BC8755D11F1860206CFCE1D38B0.roa
Signing time: Wed 01 Jul 2026 15:02:54 +0000
ROA not before: Wed 01 Jul 2026 15:02:49 +0000
ROA not after: Sun 09 Aug 2026 15:02:49 +0000
asID: 8254
IP address blocks: 154.219.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120386 (0x1d642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 15:02:49 2026 GMT
Not After : Aug 9 15:02:49 2026 GMT
Subject: CN=6a452c1e-eb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:91:95:be:73:9e:32:e4:cb:1d:a1:b4:1c:
bd:0e:07:3c:f2:d6:d1:f0:ed:df:d0:ab:89:d2:31:
cd:6e:09:27:3b:02:c1:7c:71:13:2f:9c:fb:42:19:
48:e2:75:13:8c:10:bd:9c:e0:0e:02:e3:77:75:b9:
14:7f:31:c0:a6:d8:dc:aa:34:68:3d:21:f5:66:43:
a6:ca:07:eb:22:8c:a0:54:7c:47:5f:62:9b:ce:d6:
ed:41:16:70:03:8b:04:15:0b:52:98:02:e5:c9:72:
12:6c:59:d9:04:6e:f5:a6:92:f2:c7:da:ea:90:af:
fc:47:17:ae:88:4f:88:67:da:a3:d0:de:44:ea:6c:
67:1d:c8:c9:49:5f:26:4b:bd:62:00:84:d8:95:87:
07:10:70:97:1c:31:58:44:3f:66:65:ff:38:e7:99:
e9:91:d5:c7:3e:ec:96:24:06:0e:d0:fd:c5:c4:e9:
d9:9f:22:a5:fb:2e:b2:aa:15:86:45:cf:e3:e3:54:
b1:a6:b8:f5:26:ec:f6:e7:c2:a9:e5:61:5f:b6:81:
11:f0:5e:e1:c6:4b:7f:31:18:60:05:ab:0b:18:fb:
bf:2b:f3:7e:22:cd:83:a6:c5:8b:a0:ad:d5:28:b0:
d0:4b:bd:1d:c1:59:80:24:5f:72:cf:1f:40:e3:f8:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:9D:BE:47:4D:23:FF:7E:16:64:10:1B:83:86:4B:F8:D1:7F:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF8E1BC8755D11F1860206CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.77.0/24
Signature Algorithm: sha256WithRSAEncryption
13:43:0c:00:11:e0:d8:49:0a:11:3f:fa:b0:e4:9d:19:5d:b1:
53:9d:7d:5f:7b:3e:c6:a3:b1:cb:e8:a0:00:33:54:6a:a6:39:
af:d6:c2:78:52:d8:52:a6:c5:c1:75:7c:02:8f:0e:1a:ae:6d:
5f:3e:2b:2d:cc:ab:2a:24:3c:ec:31:45:c1:1b:83:61:8b:a7:
84:c3:4d:7f:e4:04:f0:d0:6b:d7:53:36:59:a2:53:95:4b:0c:
f4:9f:ee:d9:e2:e1:32:59:33:e5:e0:73:37:60:dd:e6:25:96:
51:fa:4e:47:8d:57:62:b2:49:23:e6:00:09:04:bd:54:33:1f:
a9:3c:cf:50:ba:82:9f:d4:b0:f7:73:23:a9:97:f1:d1:a2:9a:
d0:84:c2:75:fc:ba:5e:5c:3f:ed:c6:43:c5:07:49:3d:79:d0:
0a:1e:22:91:63:09:c5:1b:e6:b0:e0:aa:6b:3e:ea:e1:08:2b:
32:13:51:08:86:3b:3f:81:34:d3:49:e7:53:e5:0e:84:99:06:
06:67:92:b6:3c:03:5d:47:5a:0c:9f:92:f5:15:84:6a:27:79:
fc:87:9d:30:b4:75:81:c2:0c:a0:c4:82:f1:3f:c8:b1:aa:ae:
ca:e6:8b:0f:b9:2d:ef:29:0c:ed:c1:6a:d6:50:cc:a0:fb:6b:
74:e4:ed:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdZCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAxMTUwMjQ5WhcNMjYwODA5MTUwMjQ5WjAYMRYw
FAYDVQQDEw02YTQ1MmMxZS1lYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs7iRlb5znjLkyx2htBy9Dgc88tbR8O3f0KuJ0jHNbgknOwLBfHETL5z7
QhlI4nUTjBC9nOAOAuN3dbkUfzHAptjcqjRoPSH1ZkOmygfrIoygVHxHX2Kbztbt
QRZwA4sEFQtSmALlyXISbFnZBG71ppLyx9rqkK/8RxeuiE+IZ9qj0N5E6mxnHcjJ
SV8mS71iAITYlYcHEHCXHDFYRD9mZf8455npkdXHPuyWJAYO0P3FxOnZnyKl+y6y
qhWGRc/j41Sxprj1Juz258Kp5WFftoER8F7hxkt/MRhgBasLGPu/K/N+Is2DpsWL
oK3VKLDQS70dwVmAJF9yzx9A4/gmPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNUv
nb5HTSP/fhZkEBuDhkv40X9QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRjhFMUJDODc1NUQxMUYxODYwMjA2Q0ZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmttNMA0GCSqGSIb3DQEB
CwUAA4IBAQATQwwAEeDYSQoRP/qw5J0ZXbFTnX1fez7Go7HL6KAAM1Rqpjmv1sJ4
UthSpsXBdXwCjw4arm1fPistzKsqJDzsMUXBG4Nhi6eEw01/5ATw0GvXUzZZolOV
Swz0n+7Z4uEyWTPl4HM3YN3mJZZR+k5HjVdiskkj5gAJBL1UMx+pPM9QuoKf1LD3
cyOpl/HRoprQhMJ1/LpeXD/txkPFB0k9edAKHiKRYwnFG+aw4KprPurhCCsyE1EI
hjs/gTTTSedT5Q6EmQYGZ5K2PANdR1oMn5L1FYRqJ3n8h50wtHWBwgygxILxP8ix
qq7K5osPuS3vKQztwWrWUMyg+2t05O2R
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:14 2026 by rpki-client