Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7ECFCC7C3F11F1A03181E1CE1D38B0.roa
File: 1D7ECFCC7C3F11F1A03181E1CE1D38B0.roa (raw, json)
Hash identifier: 8o7uu0IZ/66pJUa5HMchQ0AN/UXPVjjmJ2cdrSUQrH4=
Subject key identifier: 66:6C:E2:F8:17:74:C7:F6:CF:A7:39:AF:C9:1F:1F:D7:33:B0:03:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7ECFCC7C3F11F1A03181E1CE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:09:55 +0000
ROA not before: Fri 10 Jul 2026 09:09:49 +0000
ROA not after: Fri 28 Aug 2026 09:09:49 +0000
asID: 402506
IP address blocks: 154.219.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120809 (0x1d7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:09:49 2026 GMT
Not After : Aug 28 09:09:49 2026 GMT
Subject: CN=6a50b6e3-46ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:8c:52:7f:c4:e3:6f:b2:e9:95:1f:44:1f:
96:32:b9:e3:03:6c:36:25:21:2b:12:96:3b:a8:ad:
0e:79:29:4b:f9:83:d1:22:eb:d3:52:39:32:15:83:
46:45:91:6f:87:aa:a5:dd:08:6a:a1:de:b4:02:9d:
a3:4f:2d:89:38:f8:5c:2b:5d:28:df:12:15:e7:c8:
cf:17:4c:af:88:91:52:5c:07:99:c2:6b:eb:cd:79:
cf:ce:81:78:ea:43:b5:c6:ad:a1:e3:9d:d6:0a:ac:
7c:a8:49:f1:66:73:a6:d5:ea:15:f8:58:41:90:f7:
85:b6:62:c9:58:18:3b:ff:ff:51:d8:8a:f2:2b:22:
a7:86:90:85:3b:d9:f4:6f:af:aa:cc:00:7f:05:e2:
8e:19:0c:07:e1:d6:db:f9:fd:25:cc:14:6d:17:94:
7f:6e:14:2c:f0:dc:a0:7d:68:23:50:77:6c:ae:98:
c6:28:68:dc:c1:3b:b2:13:a2:c2:1d:0e:59:d7:6e:
aa:85:e3:45:04:0d:94:67:89:e5:d0:a9:6b:eb:d1:
ee:8d:a4:b5:b8:2a:2a:fe:32:59:76:d5:05:5f:8f:
fe:de:9f:3a:78:a6:75:90:0a:89:8d:d2:c7:a1:f2:
bb:64:c6:34:81:04:2b:c8:2b:2b:83:d5:f0:5c:eb:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:E2:F8:17:74:C7:F6:CF:A7:39:AF:C9:1F:1F:D7:33:B0:03:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7ECFCC7C3F11F1A03181E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.120.0/21
Signature Algorithm: sha256WithRSAEncryption
43:86:e1:0f:51:38:01:11:7d:b2:1a:d7:fa:39:6b:b2:b5:b3:
54:b9:7d:68:47:7c:20:5f:23:ba:fc:94:c0:18:c8:e4:e1:0e:
2e:a2:75:55:49:e9:6c:e9:40:49:fe:9a:31:2f:eb:fb:d0:b8:
07:c0:97:fb:4c:b9:be:f6:99:7d:7e:2f:0d:35:28:d5:cd:72:
19:12:66:4d:a7:28:b5:3b:53:d9:10:61:d6:6a:4d:cc:ef:a4:
93:a0:75:9a:d8:a3:7f:eb:95:70:31:75:2b:9e:ef:3e:df:42:
01:65:56:8e:0a:26:97:0f:8e:15:e2:f4:1d:3a:ff:b5:d9:cd:
f1:7d:6d:fc:bd:d7:e8:6c:37:a4:f0:c4:3e:c3:70:5f:fc:2a:
f7:8a:6c:85:3b:40:af:47:b8:87:e6:10:8b:35:28:d2:4a:c9:
8d:68:42:b2:d6:8a:6d:ad:58:aa:be:5a:2d:7c:63:17:fc:44:
84:fd:de:d0:8d:9a:8a:97:99:60:8c:d3:34:e9:55:20:d6:41:
db:a4:b0:8e:cc:ef:c8:cf:44:93:6a:a9:c9:78:01:21:54:89:
09:c9:44:eb:42:44:5b:c1:3a:5b:64:97:5c:ef:5d:48:83:ad:
19:1a:a7:4d:5b:08:98:99:ac:e1:a4:d7:a5:e5:38:1e:66:36:
9b:1c:65:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdfpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEwMDkwOTQ5WhcNMjYwODI4MDkwOTQ5WjAYMRYw
FAYDVQQDEw02YTUwYjZlMy00NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApvGMUn/E42+y6ZUfRB+WMrnjA2w2JSErEpY7qK0OeSlL+YPRIuvTUjky
FYNGRZFvh6ql3Qhqod60Ap2jTy2JOPhcK10o3xIV58jPF0yviJFSXAeZwmvrzXnP
zoF46kO1xq2h453WCqx8qEnxZnOm1eoV+FhBkPeFtmLJWBg7//9R2IryKyKnhpCF
O9n0b6+qzAB/BeKOGQwH4dbb+f0lzBRtF5R/bhQs8NygfWgjUHdsrpjGKGjcwTuy
E6LCHQ5Z126qheNFBA2UZ4nl0Klr69HujaS1uCoq/jJZdtUFX4/+3p86eKZ1kAqJ
jdLHofK7ZMY0gQQryCsrg9XwXOtsKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGZs
4vgXdMf2z6c5r8kfH9czsAM1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRDdFQ0ZDQzdDM0YxMUYxQTAzMTgxRTFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmtt4MA0GCSqGSIb3DQEB
CwUAA4IBAQBDhuEPUTgBEX2yGtf6OWuytbNUuX1oR3wgXyO6/JTAGMjk4Q4uonVV
Sels6UBJ/poxL+v70LgHwJf7TLm+9pl9fi8NNSjVzXIZEmZNpyi1O1PZEGHWak3M
76SToHWa2KN/65VwMXUrnu8+30IBZVaOCiaXD44V4vQdOv+12c3xfW38vdfobDek
8MQ+w3Bf/Cr3imyFO0CvR7iH5hCLNSjSSsmNaEKy1optrViqvlotfGMX/ESE/d7Q
jZqKl5lgjNM06VUg1kHbpLCOzO/Iz0STaqnJeAEhVIkJyUTrQkRbwTpbZJdc711I
g60ZGqdNWwiYmazhpNel5TgeZjabHGUO
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:30 2026 by rpki-client