Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EB68A4681B511F1BB054EE7CE1D38B0.roa
File: 4EB68A4681B511F1BB054EE7CE1D38B0.roa (raw, json)
Hash identifier: o4P5tWvQAFTPJjub+FAEnfyaazyvn2tuAmKgH8CqeV0=
Subject key identifier: 38:08:67:F7:6C:73:F9:7D:34:48:FA:BC:72:36:1B:AA:3C:46:33:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D951
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EB68A4681B511F1BB054EE7CE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:58:34 +0000
ROA not before: Fri 17 Jul 2026 07:58:30 +0000
ROA not after: Mon 24 Aug 2026 07:58:30 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121169 (0x1d951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:58:30 2026 GMT
Not After : Aug 24 07:58:30 2026 GMT
Subject: CN=6a59e0aa-4f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:69:6c:71:97:a8:9c:47:c3:6b:3d:20:a9:
22:08:c9:ab:16:04:02:f6:6b:70:f8:f6:55:b0:ce:
55:97:87:2b:36:03:9d:34:eb:91:45:fb:f3:a8:b3:
6b:a5:62:02:6c:52:2d:e7:9d:b0:75:fa:3f:6e:32:
cd:f3:b0:e6:e5:7c:4c:55:fe:c7:66:54:fa:11:f3:
cf:47:c2:aa:96:e1:ec:38:36:5b:d4:a9:30:5c:f5:
f6:fb:8d:d8:ff:9e:49:c1:d9:e5:45:cb:eb:7c:87:
03:f5:7a:b4:ff:6b:0a:5c:8b:e2:93:e6:37:dc:60:
70:a6:15:fa:77:b0:64:65:50:74:2c:25:81:1c:25:
19:b5:f5:5c:e3:21:d6:4c:2f:09:eb:cf:2e:27:0f:
6b:1b:17:ec:0e:6c:05:dd:b7:24:71:ec:a1:be:54:
cc:10:f0:d9:b7:84:e7:0f:ea:98:15:f5:6a:d1:ab:
34:4c:b2:80:d4:bc:21:83:87:48:a2:7f:ed:03:58:
da:d9:e5:c0:a6:83:ec:af:4e:c4:fe:8e:c4:e7:8b:
91:8c:de:94:75:5f:01:8d:af:66:a0:c4:85:53:10:
5b:cf:68:11:51:a9:59:7a:c0:f1:45:cf:2f:ae:61:
4a:75:5b:ba:a0:ad:b6:16:8f:b5:1a:f4:6c:1d:09:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:67:F7:6C:73:F9:7D:34:48:FA:BC:72:36:1B:AA:3C:46:33:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EB68A4681B511F1BB054EE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6b:d8:c9:6b:af:35:3d:3f:17:15:4a:e3:0a:52:01:c4:d7:
3a:23:45:62:de:59:fc:60:83:70:5f:c2:5f:0d:81:73:90:0d:
cb:36:8d:5e:14:f2:26:09:0b:f9:2b:63:21:06:e4:ec:d8:4a:
fd:6d:10:f9:15:d0:c9:82:d7:e4:d3:ce:e5:b2:da:43:ed:b2:
17:4c:fd:a4:5f:c4:c1:87:f8:b3:7a:21:9a:fa:f3:0a:1c:73:
fa:2b:36:73:4d:02:32:94:b7:05:1e:c9:8d:6e:58:20:5d:6f:
47:e9:5c:e5:40:e6:0a:71:cb:77:fc:f0:52:c1:12:0a:8e:8a:
6b:cc:eb:c3:44:05:f9:0c:5b:31:fe:b1:c9:fc:30:00:35:03:
bb:ce:5b:00:36:d3:82:b9:7e:0c:ec:cd:b6:3a:7b:4d:ae:fa:
7f:dd:d7:37:a0:1a:8b:5f:62:00:02:bb:bf:7b:e7:5b:86:16:
01:b8:91:75:d1:c2:31:dc:b5:af:09:e2:b2:b2:81:df:1e:cf:
51:97:9a:c8:95:d0:ee:a8:f2:b8:0e:52:02:26:17:2e:63:df:
79:01:20:8a:74:84:82:2e:74:4c:04:31:b1:89:9f:97:a0:60:
31:5c:b0:77:2b:4d:f6:9d:15:7a:57:ab:40:89:04:21:f0:27:
dd:27:d9:df
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdlRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE3MDc1ODMwWhcNMjYwODI0MDc1ODMwWjAYMRYw
FAYDVQQDEw02YTU5ZTBhYS00ZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAppBpbHGXqJxHw2s9IKkiCMmrFgQC9mtw+PZVsM5Vl4crNgOdNOuRRfvz
qLNrpWICbFIt552wdfo/bjLN87Dm5XxMVf7HZlT6EfPPR8KqluHsODZb1KkwXPX2
+43Y/55JwdnlRcvrfIcD9Xq0/2sKXIvik+Y33GBwphX6d7BkZVB0LCWBHCUZtfVc
4yHWTC8J688uJw9rGxfsDmwF3bckceyhvlTMEPDZt4TnD+qYFfVq0as0TLKA1Lwh
g4dIon/tA1ja2eXApoPsr07E/o7E54uRjN6UdV8Bja9moMSFUxBbz2gRUalZesDx
Rc8vrmFKdVu6oK22Fo+1GvRsHQm+jwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFDgI
Z/dsc/l9NEj6vHI2G6o8RjOCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RUI2OEE0NjgxQjUxMUYxQkIwNTRFRTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBASaWcADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBAKhr2MlrrzU9PxcVSuMKUgHE1zojRWLeWfxg
g3Bfwl8NgXOQDcs2jV4U8iYJC/krYyEG5OzYSv1tEPkV0MmC1+TTzuWy2kPtshdM
/aRfxMGH+LN6IZr68wocc/orNnNNAjKUtwUeyY1uWCBdb0fpXOVA5gpxy3f88FLB
EgqOimvM68NEBfkMWzH+scn8MAA1A7vOWwA204K5fgzszbY6e02u+n/d1zegGotf
YgACu79751uGFgG4kXXRwjHcta8J4rKygd8ez1GXmsiV0O6o8rgOUgImFy5j33kB
IIp0hIIudEwEMbGJn5egYDFcsHcrTfadFXpXq0CJBCHwJ90n2d8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:09:23 2026 by rpki-client