Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7356A487F6911F1B4F3B4A4CE1D38B0.roa
File: D7356A487F6911F1B4F3B4A4CE1D38B0.roa (raw, json)
Hash identifier: vwZ0kYYd27JohJ18sdlHTyl3UVzReaJHFk+Xsq/zG7E=
Subject key identifier: 0A:57:18:A5:61:18:84:18:F2:D0:F3:19:25:E5:BB:57:B6:B2:42:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7356A487F6911F1B4F3B4A4CE1D38B0.roa
Signing time: Tue 14 Jul 2026 09:53:19 +0000
ROA not before: Tue 14 Jul 2026 09:53:14 +0000
ROA not after: Fri 21 Aug 2026 09:53:14 +0000
asID: 401783
IP address blocks: 154.222.112.0/24 maxlen: 24
154.222.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121052 (0x1d8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 09:53:14 2026 GMT
Not After : Aug 21 09:53:14 2026 GMT
Subject: CN=6a56070f-fcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:e8:5c:60:ba:08:54:a9:39:c0:be:fc:63:
3c:94:18:93:c5:46:92:bd:a8:7d:97:0d:62:8f:a0:
90:02:cc:b1:e5:5a:04:d9:af:77:e6:9d:b4:af:36:
66:f9:a6:e2:73:45:36:a6:1f:fa:d0:a4:4d:42:d4:
2c:3a:27:19:4f:01:a0:26:6b:db:4f:e2:db:59:e4:
5c:bc:e5:d1:3d:44:65:5f:85:46:15:ed:c3:14:15:
43:48:3c:7f:f4:53:3d:9e:17:31:12:20:e4:92:04:
2a:47:7d:01:05:9a:81:3e:25:6f:c1:6a:48:50:91:
1f:c8:10:49:44:42:8e:44:2f:49:90:43:b7:92:5c:
f2:5e:80:05:20:cc:4e:ad:2d:12:8d:84:6d:46:71:
7b:0f:01:a6:0c:7c:a6:13:10:a7:ac:72:b9:6a:11:
f0:bb:fa:f3:7c:fa:4e:d2:bc:d0:fb:12:78:92:31:
76:1b:ab:18:10:e1:32:48:c0:1c:25:d4:a4:5f:8c:
b5:a8:4a:19:bc:ac:54:6c:94:92:03:e0:13:fb:be:
5e:19:db:3c:f6:29:11:3b:e9:fc:a5:5c:b1:89:b3:
e4:75:0c:46:6a:be:23:bc:56:22:aa:4d:fa:07:c4:
3e:d7:1b:b9:3d:9b:b3:66:f4:40:10:ad:69:08:33:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:18:A5:61:18:84:18:F2:D0:F3:19:25:E5:BB:57:B6:B2:42:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7356A487F6911F1B4F3B4A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.112.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:07:92:79:58:44:05:94:2d:0c:de:c3:27:51:86:f3:46:cc:
00:c1:fb:a1:65:96:28:82:e5:9b:52:2f:f9:5b:d9:77:f7:b7:
8f:11:84:08:93:bf:40:09:8d:83:22:c3:19:db:cc:90:f2:29:
09:5e:72:d0:62:24:9f:2b:04:97:c3:d4:99:f4:0a:14:7c:44:
e9:e4:c9:dd:43:0b:ec:34:36:16:04:1c:15:f0:74:c0:9c:18:
68:ef:d6:82:62:14:ab:33:f0:50:73:2d:55:8e:48:e5:15:10:
4e:ae:a8:c0:97:e3:72:28:b4:1d:c3:c3:f4:97:25:e5:c9:c3:
81:f6:85:db:63:ff:30:6d:8f:05:87:25:c4:fc:89:57:51:40:
68:b9:32:c8:67:9f:14:b9:ac:bb:28:d8:e3:89:16:e2:46:0b:
e0:79:7e:b1:85:58:44:05:a0:4a:1c:bd:fe:34:cf:5b:b4:6f:
19:b3:1d:26:61:a1:74:af:13:39:85:70:e5:4a:54:ae:41:71:
c9:1a:d4:a4:14:91:64:41:02:54:13:ce:67:5d:74:2b:ad:f3:
9f:cc:8e:fc:52:8d:6f:48:55:dc:e4:c0:e2:48:2b:12:89:69:
1b:b1:35:1e:ff:18:19:a9:47:91:f3:12:81:b1:1e:1b:27:11:
8e:82:00:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdjcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDk1MzE0WhcNMjYwODIxMDk1MzE0WjAYMRYw
FAYDVQQDEw02YTU2MDcwZi1mY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0inoXGC6CFSpOcC+/GM8lBiTxUaSvah9lw1ij6CQAsyx5VoE2a935p20
rzZm+abic0U2ph/60KRNQtQsOicZTwGgJmvbT+LbWeRcvOXRPURlX4VGFe3DFBVD
SDx/9FM9nhcxEiDkkgQqR30BBZqBPiVvwWpIUJEfyBBJREKORC9JkEO3klzyXoAF
IMxOrS0SjYRtRnF7DwGmDHymExCnrHK5ahHwu/rzfPpO0rzQ+xJ4kjF2G6sYEOEy
SMAcJdSkX4y1qEoZvKxUbJSSA+AT+75eGds89ikRO+n8pVyxibPkdQxGar4jvFYi
qk36B8Q+1xu5PZuzZvRAEK1pCDPTqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFApX
GKVhGIQY8tDzGSXlu1e2skLpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENzM1NkE0ODdGNjkxMUYxQjRGM0I0QTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt5wMA0GCSqGSIb3DQEB
CwUAA4IBAQC1B5J5WEQFlC0M3sMnUYbzRswAwfuhZZYoguWbUi/5W9l397ePEYQI
k79ACY2DIsMZ28yQ8ikJXnLQYiSfKwSXw9SZ9AoUfETp5MndQwvsNDYWBBwV8HTA
nBho79aCYhSrM/BQcy1VjkjlFRBOrqjAl+NyKLQdw8P0lyXlycOB9oXbY/8wbY8F
hyXE/IlXUUBouTLIZ58Uuay7KNjjiRbiRgvgeX6xhVhEBaBKHL3+NM9btG8Zsx0m
YaF0rxM5hXDlSlSuQXHJGtSkFJFkQQJUE85nXXQrrfOfzI78Uo1vSFXc5MDiSCsS
iWkbsTUe/xgZqUeR8xKBsR4bJxGOggCP
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:20 2026 by rpki-client