Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E280648FDA11F1BEE119A4CE1D38B0.roa
File: 17E280648FDA11F1BEE119A4CE1D38B0.roa (raw, json)
Hash identifier: No1gmvghBZQ4dMczBj2IMWie5hCZE11QiKazm4KcGrM=
Subject key identifier: A3:76:B3:C8:68:31:C6:E1:F2:56:A0:9B:EE:69:97:AA:BF:EB:63:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E280648FDA11F1BEE119A4CE1D38B0.roa
Signing time: Tue 04 Aug 2026 07:57:09 +0000
ROA not before: Tue 04 Aug 2026 07:57:05 +0000
ROA not after: Wed 18 Nov 2026 07:57:05 +0000
asID: 328608
IP address blocks: 154.198.2.0/23 maxlen: 24
154.202.105.0/24 maxlen: 24
154.202.128.0/21 maxlen: 24
154.213.193.0/24 maxlen: 24
154.213.194.0/23 maxlen: 24
154.213.202.0/23 maxlen: 24
154.213.204.0/24 maxlen: 24
154.213.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122011 (0x1dc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 07:57:05 2026 GMT
Not After : Nov 18 07:57:05 2026 GMT
Subject: CN=6a719b55-f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0f:a9:7c:75:f5:e5:0d:39:93:e4:a4:a8:6c:
c9:cc:5c:db:bc:fd:ac:82:a6:80:62:ff:27:c8:86:
d8:99:ac:ec:bd:58:46:4e:7d:ef:c4:86:70:71:45:
48:80:1c:84:7b:41:fe:d5:93:dc:8f:28:e0:44:b2:
ba:b6:1c:24:f4:4d:d2:dc:b6:26:ed:51:e4:4f:08:
a1:50:45:b0:47:b7:6a:c4:28:d3:b2:b0:1b:6e:b2:
4d:a6:75:80:df:92:c9:c1:e5:1c:ae:46:7f:4d:cc:
72:ab:ad:93:29:6a:1a:f7:4e:d2:83:a1:6f:16:f5:
a3:6f:ab:2e:34:d9:30:13:b9:6c:ff:27:bf:f0:ff:
4c:e4:0d:06:15:46:d3:6a:0b:96:43:51:51:9f:1d:
55:cb:c0:01:7c:97:84:67:13:c0:be:e2:f7:5b:df:
b8:a3:07:df:45:2c:31:51:95:2a:69:b7:65:21:ce:
11:55:4c:ff:72:5c:ac:4d:f3:8d:b5:d6:f8:99:b7:
e8:d3:3a:1c:a5:f1:bb:43:c1:44:35:c2:4b:cb:74:
f4:e0:b2:7c:e4:97:fd:c5:4c:71:a3:da:65:ec:95:
ae:ad:f1:49:75:ca:aa:70:fc:51:b2:03:b8:55:95:
70:59:9c:d7:a3:af:90:d7:a1:c0:2e:41:6e:71:b8:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:B3:C8:68:31:C6:E1:F2:56:A0:9B:EE:69:97:AA:BF:EB:63:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E280648FDA11F1BEE119A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.2.0/23
154.202.105.0/24
154.202.128.0/21
154.213.193.0-154.213.195.255
154.213.202.0-154.213.204.255
154.213.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:08:19:83:bf:94:be:1a:44:71:59:f1:bf:f2:f6:ae:2d:9b:
26:1e:ec:1d:56:13:ac:72:e7:62:66:45:57:09:3e:dc:6c:4f:
c9:b6:b2:d5:f1:47:16:e4:28:93:c1:a1:32:70:ea:43:76:2d:
ba:94:bf:7d:36:dd:21:7f:da:69:e5:fd:09:87:58:d4:43:e7:
fb:bd:3e:89:8f:e0:05:82:47:0d:8d:35:18:e2:c5:ac:cc:ba:
4b:73:e4:f3:6b:73:0e:1d:4d:94:75:38:bd:b6:c0:e9:93:d6:
73:4e:53:97:38:2c:75:8e:c3:27:75:0d:3c:5a:c1:79:8c:7d:
05:d7:b0:62:ee:02:84:d9:5e:88:cd:a2:61:0a:f7:be:c9:b3:
6f:a1:3e:84:09:be:ab:95:f8:6b:5f:3d:19:a8:00:a3:1a:90:
f2:44:ae:74:c7:d4:48:47:47:42:7b:98:e4:7c:33:b8:0f:dc:
4b:a5:5f:23:cb:e4:8b:fe:04:bf:f3:8a:91:92:45:2c:22:0b:
10:fa:2f:0a:88:83:6f:10:de:e9:68:bb:f3:6d:c6:7e:74:75:
b9:cd:36:0d:ca:1b:02:e1:4c:36:64:07:8f:e9:f9:8e:bd:fb:
71:2a:b8:de:40:e1:23:3e:9f:e1:ab:21:9c:11:2d:ff:a1:d5:
af:18:9c:c2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAdybMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA0MDc1NzA1WhcNMjYxMTE4MDc1NzA1WjAYMRYw
FAYDVQQDEw02YTcxOWI1NS1mMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7w+pfHX15Q05k+SkqGzJzFzbvP2sgqaAYv8nyIbYmazsvVhGTn3vxIZw
cUVIgByEe0H+1ZPcjyjgRLK6thwk9E3S3LYm7VHkTwihUEWwR7dqxCjTsrAbbrJN
pnWA35LJweUcrkZ/Tcxyq62TKWoa907Sg6FvFvWjb6suNNkwE7ls/ye/8P9M5A0G
FUbTaguWQ1FRnx1Vy8ABfJeEZxPAvuL3W9+4owffRSwxUZUqabdlIc4RVUz/clys
TfONtdb4mbfo0zocpfG7Q8FENcJLy3T04LJ85Jf9xUxxo9pl7JWurfFJdcqqcPxR
sgO4VZVwWZzXo6+Q16HALkFucbg4VwIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFKN2
s8hoMcbh8lagm+5pl6q/62NjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xN0UyODA2NDhGREExMUYxQkVFMTE5QTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBmsYCAwQAmsppAwQDmsqA
MAwDBACa1cEDBAKa1cAwDAMEAZrVygMEAJrVzAMEAJrV3zANBgkqhkiG9w0BAQsF
AAOCAQEAmwgZg7+UvhpEcVnxv/L2ri2bJh7sHVYTrHLnYmZFVwk+3GxPybay1fFH
FuQok8GhMnDqQ3YtupS/fTbdIX/aaeX9CYdY1EPn+70+iY/gBYJHDY01GOLFrMy6
S3Pk82tzDh1NlHU4vbbA6ZPWc05TlzgsdY7DJ3UNPFrBeYx9BdewYu4ChNleiM2i
YQr3vsmzb6E+hAm+q5X4a189GagAoxqQ8kSudMfUSEdHQnuY5HwzuA/cS6VfI8vk
i/4Ev/OKkZJFLCILEPovCoiDbxDe6Wi7823GfnR1uc02DcobAuFMNmQHj+n5jr37
cSq43kDhIz6f4ashnBEt/6HVrxicwg==
-----END CERTIFICATE-----
Generated at Thu Aug 6 14:11:58 2026 by rpki-client