Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DC3904E922A11F19094B4A8CE1D38B0.roa
File: 0DC3904E922A11F19094B4A8CE1D38B0.roa (raw, json)
Hash identifier: sJr9WNJwzb10yKIAkYiImWKrqUtdaZJRoowPQNzIrdY=
Subject key identifier: AE:28:65:4E:1F:39:51:F5:09:67:AA:A3:1E:34:11:F7:B1:75:75:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DC3904E922A11F19094B4A8CE1D38B0.roa
Signing time: Fri 07 Aug 2026 06:34:34 +0000
ROA not before: Fri 07 Aug 2026 06:34:30 +0000
ROA not after: Sat 05 Sep 2026 06:34:30 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
154.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122141 (0x1dd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 06:34:30 2026 GMT
Not After : Sep 5 06:34:30 2026 GMT
Subject: CN=6a757c7a-6902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:84:5e:63:66:00:06:fe:07:18:07:5b:fb:
78:a3:e6:ff:61:46:e6:18:ff:12:0a:93:b6:29:0c:
4a:e2:44:e6:29:18:2c:7d:d6:e7:30:fb:23:da:10:
92:bf:18:a4:79:06:30:22:3d:16:bc:96:41:a1:a9:
23:91:c9:ab:f0:85:f6:f9:01:93:10:96:dd:18:2c:
9a:6a:40:93:72:7f:d4:67:d4:a5:38:1f:52:b9:75:
55:e1:f8:be:61:3e:4b:26:06:9b:9c:67:96:11:ae:
c6:13:b2:34:24:3c:f6:01:87:ea:92:a6:8d:c6:49:
bf:60:f1:fd:57:6a:b6:61:cf:e5:75:4a:19:19:82:
e2:fa:d7:70:be:93:ca:ec:cb:a0:fb:35:4f:ac:d3:
bc:3d:0c:72:81:90:67:a6:b4:82:75:69:90:6e:c2:
09:aa:34:03:87:b0:12:5e:d3:f4:39:0a:6a:bb:ab:
4d:d0:05:56:66:90:b4:bb:cc:f7:c9:66:41:23:c2:
e3:11:83:e1:0c:72:ac:e5:d0:8c:db:ad:c4:d9:78:
91:7d:81:b3:69:38:ad:bd:69:f5:89:74:b1:cd:fe:
a1:2f:a7:77:a8:b9:11:0a:0d:d7:51:b2:e4:d2:4d:
d1:22:2b:49:31:c1:09:3d:ec:9d:00:ee:bf:7a:31:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:65:4E:1F:39:51:F5:09:67:AA:A3:1E:34:11:F7:B1:75:75:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DC3904E922A11F19094B4A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0c:4b:38:d7:94:60:c9:35:3d:e7:bf:1d:72:f1:c2:e2:ed:94:
f9:1d:39:33:70:94:e0:5d:d3:db:e2:88:1a:b8:c3:ae:d7:a9:
7e:36:5e:93:2e:88:a2:3e:7a:8a:49:bb:1b:8f:cc:39:a9:3e:
a1:f4:c4:66:89:c7:ca:cd:2b:6f:96:e1:93:d1:a8:91:ad:a6:
6c:66:35:09:f9:d4:35:02:f5:8c:7c:8f:96:db:87:96:ab:9c:
43:0e:bb:80:c5:a0:94:92:b9:c5:70:a3:46:07:6b:75:45:1b:
e7:19:be:ce:28:a1:91:aa:48:60:ee:f5:af:29:07:9f:b7:80:
ab:0f:25:27:f5:66:b6:76:eb:87:d1:34:fd:58:e7:63:d5:ec:
c2:b8:34:11:1a:42:1d:ca:33:1f:0e:88:a3:3b:4e:ba:5b:91:
9f:7b:82:af:7a:b6:0d:a5:68:0e:6c:4d:dd:ad:d5:a1:b5:08:
6d:17:43:07:55:a3:c3:4a:a4:df:bd:0c:59:f3:ca:cb:8d:69:
8d:5f:82:09:90:6d:a1:c9:b6:db:39:83:66:00:e3:93:8d:cb:
a2:0b:c1:4c:55:6a:58:e2:78:da:40:0d:1c:9f:22:58:d0:16:
0e:d1:cb:97:30:68:d4:cf:73:1a:69:69:fa:ca:52:f7:14:1b:
ae:b4:f4:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd0dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA3MDYzNDMwWhcNMjYwOTA1MDYzNDMwWjAYMRYw
FAYDVQQDEw02YTc1N2M3YS02OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzFiEXmNmAAb+BxgHW/t4o+b/YUbmGP8SCpO2KQxK4kTmKRgsfdbnMPsj
2hCSvxikeQYwIj0WvJZBoakjkcmr8IX2+QGTEJbdGCyaakCTcn/UZ9SlOB9SuXVV
4fi+YT5LJgabnGeWEa7GE7I0JDz2AYfqkqaNxkm/YPH9V2q2Yc/ldUoZGYLi+tdw
vpPK7Mug+zVPrNO8PQxygZBnprSCdWmQbsIJqjQDh7ASXtP0OQpqu6tN0AVWZpC0
u8z3yWZBI8LjEYPhDHKs5dCM263E2XiRfYGzaTitvWn1iXSxzf6hL6d3qLkRCg3X
UbLk0k3RIitJMcEJPeydAO6/ejGEkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK4o
ZU4fOVH1CWeqox40EfexdXWUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wREMzOTA0RTkyMkExMUYxOTA5NEI0QThDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmliAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMSzjXlGDJNT3nvx1y8cLi7ZT5HTkzcJTgXdPb4ogauMOu16l+Nl6T
LoiiPnqKSbsbj8w5qT6h9MRmicfKzStvluGT0aiRraZsZjUJ+dQ1AvWMfI+W24eW
q5xDDruAxaCUkrnFcKNGB2t1RRvnGb7OKKGRqkhg7vWvKQeft4CrDyUn9Wa2duuH
0TT9WOdj1ezCuDQRGkIdyjMfDoijO066W5Gfe4KverYNpWgObE3drdWhtQhtF0MH
VaPDSqTfvQxZ88rLjWmNX4IJkG2hybbbOYNmAOOTjcuiC8FMVWpY4njaQA0cnyJY
0BYO0cuXMGjUz3MaaWn6ylL3FBuutPSf
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:53 2026 by rpki-client