Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C739A1281C011F1A7157AABCE1D38B0.roa
File: 8C739A1281C011F1A7157AABCE1D38B0.roa (raw, json)
Hash identifier: MFAMWN8eZQMSXYi0gn6xO7TSpuyS4smSI8/PGyiXrA4=
Subject key identifier: 47:45:11:28:2D:49:61:6D:81:6E:8C:31:05:B6:29:15:13:CD:E4:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D969
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C739A1281C011F1A7157AABCE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:19:02 +0000
ROA not before: Fri 17 Jul 2026 09:18:58 +0000
ROA not after: Mon 24 Aug 2026 09:18:58 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121193 (0x1d969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:18:58 2026 GMT
Not After : Aug 24 09:18:58 2026 GMT
Subject: CN=6a59f386-3ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:9b:2c:df:c1:79:7f:aa:8b:81:b8:d9:c4:
7a:c9:2b:59:46:74:b7:a3:48:e0:39:e4:4b:73:e8:
12:3e:a8:c2:8b:05:c1:61:83:51:54:0e:5f:85:56:
88:96:6e:e5:c8:e6:6c:5a:cf:40:3e:e0:13:fc:a5:
41:6a:58:83:4b:4b:c9:61:69:ee:5d:f0:9c:89:c3:
e3:88:83:59:38:2e:c4:71:08:7e:5c:48:f7:4b:97:
f1:3a:ce:10:06:d9:43:50:77:b9:d0:0b:6c:05:9f:
30:26:37:e7:b3:43:ac:1a:6b:82:6b:b7:e6:d5:39:
e5:61:22:7e:16:c0:80:e6:49:5d:1b:ea:7d:8f:68:
2d:fb:11:11:76:43:24:a8:7d:3b:1d:76:cb:0a:b6:
bf:8c:57:47:4d:b4:99:1a:04:cb:8a:2a:c4:5a:ee:
bf:08:8e:bd:01:87:c7:eb:85:09:85:52:90:97:2f:
c5:94:5b:10:07:ef:e6:f6:f0:e0:6c:5a:e0:ed:5a:
56:ed:fd:1d:85:84:39:ce:79:80:ad:c2:d5:24:04:
d5:79:7d:b8:63:53:4f:5c:54:34:f9:c7:00:fa:e5:
60:a3:6f:6d:c8:62:ec:9e:37:e1:15:f9:f0:88:2e:
ea:ff:60:57:b6:98:12:ff:df:54:53:af:94:b7:c3:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:11:28:2D:49:61:6D:81:6E:8C:31:05:B6:29:15:13:CD:E4:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C739A1281C011F1A7157AABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:aa:f2:ba:2a:69:00:8b:19:39:d6:dd:eb:32:21:60:a0:d7:
3b:e2:33:13:ca:16:ca:02:12:13:8f:bd:69:1c:5b:18:f0:91:
fc:2b:1a:a3:52:d3:7a:56:08:0e:d1:ee:b3:57:08:e3:8a:c3:
e6:87:b7:89:f1:82:f5:8b:0e:3a:d6:07:15:89:cc:4b:a9:19:
fc:0c:5c:b7:f4:40:35:83:a3:12:09:c3:8e:4a:e6:bd:86:82:
a1:28:92:da:28:7e:cc:75:90:dc:6f:45:94:6b:64:e5:ff:b3:
6d:77:62:80:b4:30:7c:5c:27:c4:09:d7:a0:27:51:35:2e:4c:
9a:2e:01:1f:6b:99:30:0d:20:bd:43:97:af:6f:59:3f:b5:5d:
a2:33:81:06:dc:89:d1:cc:18:85:31:47:91:d5:0d:05:10:c3:
e1:a8:84:d4:0a:59:c9:4f:37:71:6e:e6:8a:25:42:49:4d:2b:
96:c0:1e:8b:e3:90:3d:3d:11:62:71:a5:d6:cc:5c:9c:a3:f5:
83:98:23:da:d1:04:d2:b0:29:14:b6:6a:ab:a9:c3:3a:a0:27:
11:6e:92:b4:af:ed:70:0d:f2:f7:39:1f:7e:28:01:dd:1d:f5:
a1:89:49:d3:28:69:99:e6:73:46:dc:93:95:a5:12:61:d6:16:
45:a8:f6:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdlpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE3MDkxODU4WhcNMjYwODI0MDkxODU4WjAYMRYw
FAYDVQQDEw02YTU5ZjM4Ni0zYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyZebLN/BeX+qi4G42cR6yStZRnS3o0jgOeRLc+gSPqjCiwXBYYNRVA5f
hVaIlm7lyOZsWs9APuAT/KVBaliDS0vJYWnuXfCcicPjiINZOC7EcQh+XEj3S5fx
Os4QBtlDUHe50AtsBZ8wJjfns0OsGmuCa7fm1TnlYSJ+FsCA5kldG+p9j2gt+xER
dkMkqH07HXbLCra/jFdHTbSZGgTLiirEWu6/CI69AYfH64UJhVKQly/FlFsQB+/m
9vDgbFrg7VpW7f0dhYQ5znmArcLVJATVeX24Y1NPXFQ0+ccA+uVgo29tyGLsnjfh
FfnwiC7q/2BXtpgS/99UU6+Ut8PqKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEdF
ESgtSWFtgW6MMQW2KRUTzeS5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QzczOUExMjgxQzAxMUYxQTcxNTdBQUJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlzRMA0GCSqGSIb3DQEB
CwUAA4IBAQDWqvK6KmkAixk51t3rMiFgoNc74jMTyhbKAhITj71pHFsY8JH8Kxqj
UtN6VggO0e6zVwjjisPmh7eJ8YL1iw461gcVicxLqRn8DFy39EA1g6MSCcOOSua9
hoKhKJLaKH7MdZDcb0WUa2Tl/7Ntd2KAtDB8XCfECdegJ1E1LkyaLgEfa5kwDSC9
Q5evb1k/tV2iM4EG3InRzBiFMUeR1Q0FEMPhqITUClnJTzdxbuaKJUJJTSuWwB6L
45A9PRFicaXWzFyco/WDmCPa0QTSsCkUtmqrqcM6oCcRbpK0r+1wDfL3OR9+KAHd
HfWhiUnTKGmZ5nNG3JOVpRJh1hZFqPbY
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:52 2026 by rpki-client