Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14AD72F0760811F1B7EF61DFCE1D38B0.roa
File: 14AD72F0760811F1B7EF61DFCE1D38B0.roa (raw, json)
Hash identifier: kX4H3JvX9+9feyr4eEMFHVbLEgnnIuPjfLc5AbsdS30=
Subject key identifier: 16:DE:9D:CC:13:C2:B5:DE:E7:D6:BF:F4:38:0A:29:DA:7D:3A:66:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D682
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14AD72F0760811F1B7EF61DFCE1D38B0.roa
Signing time: Thu 02 Jul 2026 11:20:51 +0000
ROA not before: Thu 02 Jul 2026 11:20:46 +0000
ROA not after: Sat 25 Jul 2026 11:20:46 +0000
asID: 401783
IP address blocks: 154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120450 (0x1d682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 11:20:46 2026 GMT
Not After : Jul 25 11:20:46 2026 GMT
Subject: CN=6a464993-6fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:a5:17:b7:3a:c6:5b:52:38:fd:f3:da:44:
30:c4:88:94:f4:f0:35:79:f8:2b:a2:37:5b:b1:24:
e1:21:80:9e:30:1c:31:3e:18:41:e9:c6:f2:18:0d:
92:9a:94:06:ee:1a:41:6a:e0:1f:08:7d:eb:b7:02:
8e:ab:9e:36:cc:3c:28:c4:62:69:0a:a8:b2:b2:4b:
3a:58:d9:e6:d4:35:a2:f8:5f:d4:ba:71:ac:9d:50:
6e:a5:8b:70:46:ad:7d:90:ab:20:71:5b:11:b5:6f:
7d:56:11:f9:06:b1:b4:c6:8d:e8:f4:f4:df:22:cd:
45:d9:4e:a3:43:c3:1d:a9:94:a4:29:f4:59:85:28:
1e:11:49:78:9a:7b:1f:03:73:10:42:44:5b:b2:60:
16:ca:b6:a7:6f:f7:bf:49:90:ca:b6:2f:5a:27:51:
11:82:96:67:8e:3f:03:ea:1f:08:02:ea:dd:f5:e3:
84:8b:9c:6a:12:7a:91:4f:d4:4b:b4:a0:76:7b:88:
28:e7:5c:93:06:24:3a:b7:c6:de:03:05:ca:ce:e2:
87:ed:b4:49:73:20:ac:7b:ff:10:28:ff:d5:9d:7c:
ac:3e:4d:39:c9:0b:50:a4:72:09:3f:5a:17:b9:99:
e1:b6:6f:34:5a:a5:aa:27:c6:96:5b:74:8c:1e:e6:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:9D:CC:13:C2:B5:DE:E7:D6:BF:F4:38:0A:29:DA:7D:3A:66:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14AD72F0760811F1B7EF61DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.160.0/24
154.196.179.0/24
154.200.26.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a3:35:32:25:17:c9:58:67:ba:38:3d:57:81:83:97:52:d8:
62:c4:a7:c5:2e:93:9a:a4:4f:13:69:6f:58:59:b2:6a:68:0d:
1f:e9:02:be:c3:9f:6f:4d:0a:5a:58:8b:c8:f3:4f:cd:c2:69:
52:51:c4:cc:6e:d5:7d:68:09:b3:45:ae:56:87:c7:4b:72:36:
54:2b:4f:65:fa:89:ce:f7:96:1e:21:15:a3:3c:f7:04:07:7d:
d4:4b:34:3c:7b:16:84:9e:fa:00:61:9f:3f:c7:02:58:0e:11:
c3:8f:bf:08:fd:47:57:6c:6d:01:ee:d9:3f:63:6f:a7:66:75:
33:d0:20:f7:f9:a6:84:b2:d4:43:ee:a7:7b:59:d2:b2:16:ab:
3e:5e:72:92:76:e0:c5:1c:1d:8e:d7:36:8c:67:58:f1:69:38:
62:6e:50:2d:fe:b9:07:4a:dc:27:1d:99:f8:65:73:d5:3d:9d:
f0:48:cf:a0:7a:dd:61:c0:35:3b:54:63:e7:5e:4d:19:b3:0e:
ad:fa:4a:e9:11:0c:77:5f:8b:eb:bc:67:ad:1e:2d:16:4b:a8:
96:5b:af:64:67:f0:38:26:c2:6e:69:26:50:81:29:6d:ce:c9:
bd:5a:38:a8:ef:ba:d0:df:92:4c:0f:e6:f7:ed:df:cd:32:05:
d5:4c:9b:0a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAdaCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAyMTEyMDQ2WhcNMjYwNzI1MTEyMDQ2WjAYMRYw
FAYDVQQDEw02YTQ2NDk5My02ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo5GlF7c6xltSOP3z2kQwxIiU9PA1efgrojdbsSThIYCeMBwxPhhB6cby
GA2SmpQG7hpBauAfCH3rtwKOq542zDwoxGJpCqiysks6WNnm1DWi+F/UunGsnVBu
pYtwRq19kKsgcVsRtW99VhH5BrG0xo3o9PTfIs1F2U6jQ8MdqZSkKfRZhSgeEUl4
mnsfA3MQQkRbsmAWyranb/e/SZDKti9aJ1ERgpZnjj8D6h8IAurd9eOEi5xqEnqR
T9RLtKB2e4go51yTBiQ6t8beAwXKzuKH7bRJcyCse/8QKP/VnXysPk05yQtQpHIJ
P1oXuZnhtm80WqWqJ8aWW3SMHuYpaQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFBbe
ncwTwrXe59a/9DgKKdp9OmbYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNEFENzJGMDc2MDgxMUYxQjdFRjYxREZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmsSgAwQAmsSzAwQAmsga
AwQAmtPTMA0GCSqGSIb3DQEBCwUAA4IBAQCAozUyJRfJWGe6OD1XgYOXUthixKfF
LpOapE8TaW9YWbJqaA0f6QK+w59vTQpaWIvI80/NwmlSUcTMbtV9aAmzRa5Wh8dL
cjZUK09l+onO95YeIRWjPPcEB33USzQ8exaEnvoAYZ8/xwJYDhHDj78I/UdXbG0B
7tk/Y2+nZnUz0CD3+aaEstRD7qd7WdKyFqs+XnKSduDFHB2O1zaMZ1jxaThiblAt
/rkHStwnHZn4ZXPVPZ3wSM+get1hwDU7VGPnXk0Zsw6t+krpEQx3X4vrvGetHi0W
S6iWW69kZ/A4JsJuaSZQgSltzsm9Wjio77rQ35JMD+b37d/NMgXVTJsK
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:20 2026 by rpki-client