Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1585D5C6909A11F1965EBBB0CE1D38B0.roa
File: 1585D5C6909A11F1965EBBB0CE1D38B0.roa (raw, json)
Hash identifier: jYYvag/4JFz/lSTdGF752pLsQWWu87cX0QkfV0yREsw=
Subject key identifier: 5B:09:3D:7C:C6:FD:6F:90:BE:04:54:77:D2:4D:57:68:9B:72:20:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1585D5C6909A11F1965EBBB0CE1D38B0.roa
Signing time: Wed 05 Aug 2026 06:51:29 +0000
ROA not before: Wed 05 Aug 2026 06:51:25 +0000
ROA not after: Mon 07 Sep 2026 06:51:25 +0000
asID: 274872
IP address blocks: 154.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122031 (0x1dcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 06:51:25 2026 GMT
Not After : Sep 7 06:51:25 2026 GMT
Subject: CN=6a72dd71-aac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:74:fd:e1:fd:60:c4:a9:95:e4:13:e7:1b:
f1:2f:b2:26:7e:2e:b8:6e:67:58:60:2d:c2:33:6b:
8e:af:97:2e:91:fc:c0:32:98:a9:2b:60:08:20:64:
d0:e1:16:dc:75:da:e6:4e:8b:1d:5e:d1:23:18:2b:
11:d3:2b:d8:99:76:d4:c5:c8:f5:8f:f9:75:cc:fc:
97:9b:3b:01:a2:0a:c4:16:83:39:ee:4b:df:bc:c3:
9c:e8:43:ae:45:2b:48:9a:78:01:f2:3b:58:86:f3:
f1:41:30:7a:8a:2a:8a:2c:b9:e6:5b:c6:42:b8:d9:
41:85:17:c8:89:f3:b9:f1:83:06:8f:8e:a6:4a:2f:
e0:c7:ed:78:e0:d6:b8:f4:72:8f:c8:13:d2:40:f7:
7b:fd:17:53:d1:78:1d:89:bd:43:05:d2:12:07:6f:
7c:00:78:64:27:f2:e2:b3:80:10:ad:53:8a:09:ff:
13:18:5e:2c:30:61:cc:4c:66:99:4a:64:c0:88:2b:
44:ad:0d:52:75:32:3a:5a:72:b1:bd:b5:ce:d9:02:
a5:e3:e5:d0:c9:1c:8a:0a:89:89:29:eb:4f:b0:15:
2e:67:93:a8:e0:e2:96:84:f5:b7:88:36:60:ae:2c:
58:02:b6:7a:2f:d7:b3:26:dc:cf:f7:f0:18:de:7d:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:3D:7C:C6:FD:6F:90:BE:04:54:77:D2:4D:57:68:9B:72:20:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1585D5C6909A11F1965EBBB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fa:0d:82:64:cf:8f:dc:65:d6:a4:c9:0c:d5:c4:c8:39:be:
a9:96:d1:6d:bd:0c:4b:89:2f:b2:25:f7:d9:c2:c2:13:c1:06:
7a:f7:24:69:d7:a2:77:7c:7e:78:20:ae:17:53:fc:53:4e:d3:
3d:64:15:00:93:0e:44:0f:09:5d:fa:52:eb:94:09:32:df:aa:
a0:29:57:c8:59:23:bc:f6:4c:98:cf:5e:28:14:51:39:e3:b5:
6a:f3:b6:dd:a7:14:7e:4d:86:df:da:de:a6:0b:af:31:5f:4e:
49:ff:93:4c:d3:43:98:70:d4:33:b5:74:44:0c:04:e4:10:36:
bd:bf:d9:cd:2f:a1:65:0e:47:25:15:43:cc:c9:28:ed:b5:23:
61:eb:f6:ce:ee:15:ba:17:57:6a:94:d5:c6:38:b2:0f:25:29:
91:79:51:bb:54:8f:9a:36:ba:e6:d6:21:e6:85:c5:e1:b4:36:
b1:2b:c7:be:f5:47:c9:bb:64:49:cb:3f:ab:a1:74:69:16:dc:
69:8c:78:df:7d:91:72:ee:04:e2:1d:d6:c3:55:17:6a:9f:7f:
70:09:0c:7f:26:99:86:41:71:4a:a6:fe:2f:52:db:2f:ab:9a:
f9:d9:f6:e7:a0:40:18:30:0c:df:75:70:74:43:df:04:52:01:
67:fd:a4:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdyvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA1MDY1MTI1WhcNMjYwOTA3MDY1MTI1WjAYMRYw
FAYDVQQDEw02YTcyZGQ3MS1hYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvRp0/eH9YMSpleQT5xvxL7Imfi64bmdYYC3CM2uOr5cukfzAMpipK2AI
IGTQ4RbcddrmTosdXtEjGCsR0yvYmXbUxcj1j/l1zPyXmzsBogrEFoM57kvfvMOc
6EOuRStImngB8jtYhvPxQTB6iiqKLLnmW8ZCuNlBhRfIifO58YMGj46mSi/gx+14
4Na49HKPyBPSQPd7/RdT0Xgdib1DBdISB298AHhkJ/Lis4AQrVOKCf8TGF4sMGHM
TGaZSmTAiCtErQ1SdTI6WnKxvbXO2QKl4+XQyRyKComJKetPsBUuZ5Oo4OKWhPW3
iDZgrixYArZ6L9ezJtzP9/AY3n2KkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFsJ
PXzG/W+QvgRUd9JNV2ibciBYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNTg1RDVDNjkwOUExMUYxOTY1RUJCQjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmskAMA0GCSqGSIb3DQEB
CwUAA4IBAQAe+g2CZM+P3GXWpMkM1cTIOb6pltFtvQxLiS+yJffZwsITwQZ69yRp
16J3fH54IK4XU/xTTtM9ZBUAkw5EDwld+lLrlAky36qgKVfIWSO89kyYz14oFFE5
47Vq87bdpxR+TYbf2t6mC68xX05J/5NM00OYcNQztXREDATkEDa9v9nNL6FlDkcl
FUPMySjttSNh6/bO7hW6F1dqlNXGOLIPJSmReVG7VI+aNrrm1iHmhcXhtDaxK8e+
9UfJu2RJyz+roXRpFtxpjHjffZFy7gTiHdbDVRdqn39wCQx/JpmGQXFKpv4vUtsv
q5r52fbnoEAYMAzfdXB0Q98EUgFn/aS9
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:16 2026 by rpki-client