Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8044C8DC7D4311F1B5A82E08CF1D38B0.roa
File: 8044C8DC7D4311F1B5A82E08CF1D38B0.roa (raw, json)
Hash identifier: bHrLCrncPnrW/ZiAqlWnYO6bD07eZxKOQfn98M3vmbs=
Subject key identifier: BB:99:8D:6F:E1:B0:6C:C3:8B:A5:BB:07:B0:B8:80:ED:8E:3D:C8:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D838
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8044C8DC7D4311F1B5A82E08CF1D38B0.roa
Signing time: Sat 11 Jul 2026 16:13:50 +0000
ROA not before: Sat 11 Jul 2026 16:13:44 +0000
ROA not after: Tue 18 Aug 2026 16:13:44 +0000
asID: 329611
IP address blocks: 154.211.4.0/22 maxlen: 24
154.211.4.0/23 maxlen: 24
154.211.4.0/24 maxlen: 24
154.211.5.0/24 maxlen: 24
154.211.6.0/23 maxlen: 24
154.211.6.0/24 maxlen: 24
154.211.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120888 (0x1d838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 16:13:44 2026 GMT
Not After : Aug 18 16:13:44 2026 GMT
Subject: CN=6a526bbd-281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:35:ea:1e:36:9d:00:91:9c:bb:f8:67:4c:
b3:f9:ed:eb:e7:2d:4a:73:f6:f5:ce:3a:48:dd:d7:
d6:02:cd:eb:e7:e1:ed:4a:43:81:c3:b9:87:9e:d6:
2b:d2:a9:62:6a:57:ac:92:16:4b:72:b5:30:3d:5f:
11:bb:ce:e8:40:d7:c6:18:5a:18:e7:77:33:f3:25:
db:6c:66:bd:0d:5d:f4:88:9f:c3:8f:c1:8e:13:df:
e9:d6:24:e2:9c:f3:45:54:a8:97:16:7f:e4:6f:82:
93:f7:cb:61:9d:76:0c:68:b1:c3:db:0f:a5:72:ed:
7d:30:66:74:64:35:85:ea:4f:02:74:d1:1b:2c:64:
62:8b:96:ee:37:f6:05:26:29:82:73:5c:58:75:35:
84:60:eb:d4:79:0b:8f:0b:6d:a4:1f:39:b4:ea:1a:
4b:65:8c:e3:e2:03:df:bf:9a:4a:30:bf:5c:af:71:
9e:00:d8:ac:d1:cf:d1:a2:aa:76:59:1d:89:80:16:
16:c9:ee:be:df:74:a5:ec:33:fb:ba:a6:0b:60:99:
90:81:7f:62:4f:31:b8:8a:42:1d:b3:f5:31:b6:fc:
b4:35:ab:f4:5b:58:20:6f:84:d1:c8:01:8c:da:22:
c1:38:ea:40:6a:52:55:94:76:c1:17:05:f2:4e:27:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:8D:6F:E1:B0:6C:C3:8B:A5:BB:07:B0:B8:80:ED:8E:3D:C8:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8044C8DC7D4311F1B5A82E08CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:b5:05:48:a3:f7:eb:0a:4f:b9:16:e5:91:d1:dd:c8:42:a8:
45:41:5d:e2:1f:b7:da:c8:bf:96:23:f7:33:6e:da:7a:d7:37:
22:1e:b7:c2:46:ae:fb:7b:7b:e0:cc:53:76:22:c1:be:57:2c:
e5:65:80:c9:4a:6d:cb:d3:6e:f2:04:55:d5:de:07:67:ca:47:
2d:9a:c5:db:78:9b:dc:ea:58:bd:7a:7d:e4:e8:38:d4:ff:bc:
5d:64:4b:e3:a6:f8:14:bc:25:ab:55:c1:b5:52:5e:6b:2c:fe:
84:a1:ad:c7:86:88:48:20:92:cc:34:cf:bf:20:cc:9d:27:1c:
1f:1d:9e:0c:a4:53:2e:71:4f:a2:04:be:d9:20:73:6e:78:fb:
6e:cb:48:c3:f0:88:d5:c4:9d:c1:aa:c1:ba:b4:e1:eb:17:67:
63:93:2d:b4:12:25:a3:df:57:6d:76:a2:83:87:ba:37:d5:7f:
b8:2d:ab:b6:52:89:00:8d:6b:7f:ff:63:9f:6b:92:01:bd:a2:
aa:57:2e:26:94:52:09:b7:5b:cd:5d:b7:ff:60:9f:c0:38:7d:
ac:8c:38:25:28:d5:22:8d:47:13:e9:35:25:b8:5e:38:89:70:
e4:9a:04:90:c5:ea:26:0e:96:ea:0d:47:f1:7d:b8:54:ed:a1:
f5:36:2a:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdg4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzExMTYxMzQ0WhcNMjYwODE4MTYxMzQ0WjAYMRYw
FAYDVQQDEw02YTUyNmJiZC0yODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwRQ16h42nQCRnLv4Z0yz+e3r5y1Kc/b1zjpI3dfWAs3r5+HtSkOBw7mH
ntYr0qlialeskhZLcrUwPV8Ru87oQNfGGFoY53cz8yXbbGa9DV30iJ/Dj8GOE9/p
1iTinPNFVKiXFn/kb4KT98thnXYMaLHD2w+lcu19MGZ0ZDWF6k8CdNEbLGRii5bu
N/YFJimCc1xYdTWEYOvUeQuPC22kHzm06hpLZYzj4gPfv5pKML9cr3GeANis0c/R
oqp2WR2JgBYWye6+33Sl7DP7uqYLYJmQgX9iTzG4ikIds/Uxtvy0Nav0W1ggb4TR
yAGM2iLBOOpAalJVlHbBFwXyTicLCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLuZ
jW/hsGzDi6W7B7C4gO2OPchbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MDQ0QzhEQzdENDMxMUYxQjVBODJFMDhDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtMEMA0GCSqGSIb3DQEB
CwUAA4IBAQCztQVIo/frCk+5FuWR0d3IQqhFQV3iH7fayL+WI/czbtp61zciHrfC
Rq77e3vgzFN2IsG+VyzlZYDJSm3L027yBFXV3gdnykctmsXbeJvc6li9en3k6DjU
/7xdZEvjpvgUvCWrVcG1Ul5rLP6Eoa3HhohIIJLMNM+/IMydJxwfHZ4MpFMucU+i
BL7ZIHNuePtuy0jD8IjVxJ3BqsG6tOHrF2djky20EiWj31dtdqKDh7o31X+4Lau2
UokAjWt//2Ofa5IBvaKqVy4mlFIJt1vNXbf/YJ/AOH2sjDglKNUijUcT6TUluF44
iXDkmgSQxeomDpbqDUfxfbhU7aH1Nio7
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:20:24 2026 by rpki-client