Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/013736FC6EE211F18FD2ADE8CE1D38B0.roa
File: 013736FC6EE211F18FD2ADE8CE1D38B0.roa (raw, json)
Hash identifier: 7lAokx2P6qhs3NJp0NOz0+ibKLFmo283L25gKhPiDrc=
Subject key identifier: 0C:04:F7:1D:24:85:A8:F4:27:4B:BC:98:4E:EF:73:5A:C8:42:F3:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D484
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/013736FC6EE211F18FD2ADE8CE1D38B0.roa
Signing time: Tue 23 Jun 2026 09:00:39 +0000
ROA not before: Tue 23 Jun 2026 09:00:34 +0000
ROA not after: Sat 08 Aug 2026 09:00:34 +0000
asID: 63099
IP address blocks: 154.200.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119940 (0x1d484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 09:00:34 2026 GMT
Not After : Aug 8 09:00:34 2026 GMT
Subject: CN=6a3a4b37-60a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:93:2e:8d:71:fc:c2:25:3c:07:cf:a9:d8:
5e:20:54:ef:26:31:4c:ca:bc:ec:d1:81:c5:69:83:
81:b1:5d:d9:8c:0c:ea:61:60:31:e9:90:9f:fe:48:
13:0d:c1:b4:52:26:e1:67:24:f3:b5:f3:76:7a:8f:
a6:5a:e9:6e:8e:56:e2:f2:66:68:75:49:a9:1c:85:
dd:67:85:c0:a0:98:79:60:10:67:2d:80:97:50:4a:
c1:4e:a2:35:22:dc:c6:81:b0:fe:5a:b0:4e:17:e7:
3b:f4:f3:c2:64:f2:52:bc:22:a1:d3:15:8e:33:a9:
a6:d4:30:fe:af:be:a2:1c:2a:7c:9e:db:eb:7e:e6:
7c:4d:17:07:4f:f6:bf:45:8e:fb:bc:9c:30:33:3b:
7a:32:39:f7:1a:89:ce:6e:d4:46:41:29:81:d2:ee:
c7:e7:3d:56:f8:80:9e:5c:9f:ef:f5:0e:c5:56:cb:
31:f2:e6:0b:12:b9:84:3a:cd:4f:97:54:72:4a:2e:
36:3e:ce:f3:11:1f:28:1a:82:69:ea:7b:58:a0:39:
4c:f9:ff:71:f0:f0:bf:78:93:33:ea:96:42:ec:8f:
c5:9c:a2:02:0e:9b:8c:21:6c:24:07:c3:11:e2:e3:
6e:2f:92:4c:34:ab:10:62:80:76:17:c7:66:93:34:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:04:F7:1D:24:85:A8:F4:27:4B:BC:98:4E:EF:73:5A:C8:42:F3:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/013736FC6EE211F18FD2ADE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8a:c7:1a:9a:1d:96:5e:fc:25:ec:1f:85:41:3f:31:d9:98:
24:1c:26:63:e0:f7:4d:a1:7a:85:08:c0:e4:ec:ac:40:81:98:
a6:1f:e6:5a:56:a0:ae:d5:5b:b5:eb:77:ca:5e:90:bd:b1:c5:
61:c6:ef:7e:da:e8:0d:03:9b:4f:b1:62:42:6a:66:18:bd:77:
a3:95:b4:33:0b:6d:11:a7:b0:4e:f9:d0:fc:f4:55:37:91:2a:
27:08:6a:af:03:d2:75:fd:66:55:2d:37:39:25:fb:9e:96:22:
5c:5b:b0:7a:af:d5:eb:7d:d0:d8:cd:9e:16:1d:b5:ac:12:fa:
2d:7f:f6:2e:74:ce:28:85:43:30:0f:20:5d:a7:39:c7:24:a1:
51:b8:4f:f3:ec:fa:65:02:30:b8:3a:37:53:cf:81:bd:68:f4:
27:0d:57:8f:88:6a:d0:92:84:ed:c9:53:2c:bc:77:0e:bd:8d:
fe:4c:73:d2:83:55:7f:f3:31:60:74:93:64:f1:bd:94:23:f8:
4e:81:1d:49:be:a9:d8:1b:2a:b8:fb:1b:cf:1c:99:c5:c0:b3:
ca:1e:34:44:2f:69:f3:3d:e3:22:36:4a:e2:b1:9f:85:c5:73:
f8:d4:9e:77:9d:b4:ce:5b:ed:b5:c2:c0:ac:d6:00:20:71:e9:
ca:5e:f6:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdSEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIzMDkwMDM0WhcNMjYwODA4MDkwMDM0WjAYMRYw
FAYDVQQDEw02YTNhNGIzNy02MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApn+TLo1x/MIlPAfPqdheIFTvJjFMyrzs0YHFaYOBsV3ZjAzqYWAx6ZCf
/kgTDcG0UibhZyTztfN2eo+mWulujlbi8mZodUmpHIXdZ4XAoJh5YBBnLYCXUErB
TqI1ItzGgbD+WrBOF+c79PPCZPJSvCKh0xWOM6mm1DD+r76iHCp8ntvrfuZ8TRcH
T/a/RY77vJwwMzt6Mjn3GonObtRGQSmB0u7H5z1W+ICeXJ/v9Q7FVssx8uYLErmE
Os1Pl1RySi42Ps7zER8oGoJp6ntYoDlM+f9x8PC/eJMz6pZC7I/FnKICDpuMIWwk
B8MR4uNuL5JMNKsQYoB2F8dmkzSA2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAwE
9x0khaj0J0u8mE7vc1rIQvPMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTM3MzZGQzZFRTIxMUYxOEZEMkFERThDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmshQMA0GCSqGSIb3DQEB
CwUAA4IBAQBaiscamh2WXvwl7B+FQT8x2ZgkHCZj4PdNoXqFCMDk7KxAgZimH+Za
VqCu1Vu163fKXpC9scVhxu9+2ugNA5tPsWJCamYYvXejlbQzC20Rp7BO+dD89FU3
kSonCGqvA9J1/WZVLTc5JfueliJcW7B6r9XrfdDYzZ4WHbWsEvotf/YudM4ohUMw
DyBdpznHJKFRuE/z7PplAjC4OjdTz4G9aPQnDVePiGrQkoTtyVMsvHcOvY3+THPS
g1V/8zFgdJNk8b2UI/hOgR1JvqnYGyq4+xvPHJnFwLPKHjREL2nzPeMiNkrisZ+F
xXP41J53nbTOW+21wsCs1gAgcenKXvYB
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:10 2026 by rpki-client