Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F75BFAD872EB11F1AAEB1AF5CE1D38B0.roa
File: F75BFAD872EB11F1AAEB1AF5CE1D38B0.roa (raw, json)
Hash identifier: TpHOkr/dXQpujSoonr/tUiUUGUxyoQIjb1ijSHvw4Dw=
Subject key identifier: F2:87:8A:F8:B7:E3:4D:65:F8:2F:4A:58:75:83:9E:C0:B4:52:2B:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F75BFAD872EB11F1AAEB1AF5CE1D38B0.roa
Signing time: Sun 28 Jun 2026 12:22:02 +0000
ROA not before: Sun 28 Jun 2026 12:21:57 +0000
ROA not after: Sun 02 Aug 2026 12:21:57 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120263 (0x1d5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 12:21:57 2026 GMT
Not After : Aug 2 12:21:57 2026 GMT
Subject: CN=6a4111ea-a0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:4a:c0:63:85:0f:c1:b4:c9:22:11:c7:4c:
9b:b4:e0:33:ea:4e:71:5a:5a:0a:3b:04:89:8c:92:
1b:91:82:c6:38:8f:af:d1:82:47:a4:1c:9d:01:41:
c5:85:d4:bb:ac:be:43:11:b9:d6:f1:31:0f:a6:58:
44:3c:55:3f:d6:9e:bd:69:dd:32:3e:21:c3:ad:08:
f4:9c:6b:f3:99:d4:a5:6a:94:8f:84:f1:2d:a5:59:
9f:2a:50:35:e4:56:b8:c2:6d:25:bb:c1:b2:cc:c9:
dc:a4:98:c5:c7:83:a7:d2:d8:fa:90:ff:b6:46:96:
22:47:f9:0b:06:cd:8a:b7:01:1e:2a:d6:7a:fa:94:
f3:dc:ed:ed:b2:a0:62:fb:85:fc:01:82:54:79:9c:
fc:83:3c:82:05:ae:fd:f7:62:8d:89:9a:e6:07:0d:
e1:c8:2f:51:4c:8c:02:1c:00:a5:c6:ca:e8:c2:8f:
82:d9:74:ac:92:6e:44:33:13:e9:95:e1:b5:29:07:
00:79:52:46:39:4c:d8:58:9a:0e:5b:3c:fe:a0:41:
d3:0b:0b:50:7c:55:d8:dc:ac:73:8f:b1:d4:b4:8b:
34:25:d5:82:61:83:a1:09:97:f1:4a:b8:7d:03:56:
d4:c1:fa:87:f0:f8:39:85:1e:cd:df:5e:8d:ea:fa:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:87:8A:F8:B7:E3:4D:65:F8:2F:4A:58:75:83:9E:C0:B4:52:2B:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F75BFAD872EB11F1AAEB1AF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6f:b8:b0:bb:ff:28:5b:40:1a:9d:ff:5f:61:29:64:80:87:
de:4f:21:41:0b:c0:6d:9f:57:5d:9b:da:2c:84:8f:b8:c2:f9:
45:ad:91:3b:48:30:95:c3:6a:f1:f3:f9:e1:c6:a4:94:28:f5:
83:29:71:48:0e:36:71:8a:34:2b:b1:e3:6c:e4:07:7a:b4:ff:
10:43:ad:5c:c3:0f:42:18:31:2d:9b:d3:31:2a:78:85:ba:52:
d9:46:82:7f:91:60:87:d4:18:8f:a7:1a:4e:aa:0a:e7:e3:72:
3b:85:55:3f:33:b3:b1:79:7c:4b:53:77:2d:71:ba:2b:40:0d:
2c:4d:bc:b5:2f:8d:01:c4:5e:f3:e4:43:d0:e6:17:14:c3:d4:
25:35:22:f9:55:b7:31:9f:f1:c4:3f:8d:65:3c:be:bd:3c:10:
0e:1a:9a:54:99:6f:80:81:7c:fe:69:90:fb:af:0e:fd:47:04:
3f:00:57:20:87:63:e2:70:56:df:bb:e7:54:0d:03:62:bd:2d:
41:d3:2a:bf:4e:f5:a4:c2:77:b9:b1:1f:5e:76:71:f0:67:0a:
ee:3c:a3:e5:f7:17:ba:64:7a:b4:4b:cc:a8:4a:1d:6a:3c:54:
2c:2b:35:4c:60:48:a9:72:f0:c1:57:7b:b7:4d:a0:7e:f7:2a:
bf:b2:80:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdXHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI4MTIyMTU3WhcNMjYwODAyMTIyMTU3WjAYMRYw
FAYDVQQDEw02YTQxMTFlYS1hMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwStKwGOFD8G0ySIRx0ybtOAz6k5xWloKOwSJjJIbkYLGOI+v0YJHpByd
AUHFhdS7rL5DEbnW8TEPplhEPFU/1p69ad0yPiHDrQj0nGvzmdSlapSPhPEtpVmf
KlA15Fa4wm0lu8GyzMncpJjFx4On0tj6kP+2RpYiR/kLBs2KtwEeKtZ6+pTz3O3t
sqBi+4X8AYJUeZz8gzyCBa7992KNiZrmBw3hyC9RTIwCHAClxsrowo+C2XSskm5E
MxPpleG1KQcAeVJGOUzYWJoOWzz+oEHTCwtQfFXY3Kxzj7HUtIs0JdWCYYOhCZfx
Srh9A1bUwfqH8Pg5hR7N316N6vqUQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPKH
ivi3401l+C9KWHWDnsC0UiuSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNzVCRkFEODcyRUIxMUYxQUFFQjFBRjVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4MMA0GCSqGSIb3DQEB
CwUAA4IBAQBMb7iwu/8oW0Aanf9fYSlkgIfeTyFBC8Btn1ddm9oshI+4wvlFrZE7
SDCVw2rx8/nhxqSUKPWDKXFIDjZxijQrseNs5Ad6tP8QQ61cww9CGDEtm9MxKniF
ulLZRoJ/kWCH1BiPpxpOqgrn43I7hVU/M7OxeXxLU3ctcborQA0sTby1L40BxF7z
5EPQ5hcUw9QlNSL5Vbcxn/HEP41lPL69PBAOGppUmW+AgXz+aZD7rw79RwQ/AFcg
h2PicFbfu+dUDQNivS1B0yq/TvWkwne5sR9ednHwZwruPKPl9xe6ZHq0S8yoSh1q
PFQsKzVMYEipcvDBV3u3TaB+9yq/soA6
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:18 2026 by rpki-client