Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB6D720922C11F1845025B4CE1D38B0.roa
File: 1DB6D720922C11F1845025B4CE1D38B0.roa (raw, json)
Hash identifier: VnM24HvSKJOJJNiOSdzZf3CzYAc3WA2GATw09oeNdzw=
Subject key identifier: B9:45:62:F4:3B:5D:92:D6:9D:A5:24:73:C0:76:57:CE:5D:23:79:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB6D720922C11F1845025B4CE1D38B0.roa
Signing time: Fri 07 Aug 2026 06:49:20 +0000
ROA not before: Fri 07 Aug 2026 06:49:16 +0000
ROA not after: Sat 05 Sep 2026 06:49:16 +0000
asID: 271988
IP address blocks: 154.88.160.0/20 maxlen: 24
154.88.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122151 (0x1dd27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 06:49:16 2026 GMT
Not After : Sep 5 06:49:16 2026 GMT
Subject: CN=6a757ff0-870a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:65:99:78:36:e4:6c:bb:f9:d8:26:a0:0e:
fb:6b:3d:5b:5c:3f:3a:af:5f:8d:d2:e2:88:de:42:
ba:90:70:7b:a1:81:46:4e:70:70:76:21:19:c3:de:
a3:a3:7f:6f:c3:a6:41:a3:39:cf:89:c5:8f:88:47:
f6:33:10:64:02:8c:fb:e2:0c:5e:94:ec:f2:fd:83:
40:f3:13:e1:1f:64:7d:fa:44:5d:7f:5e:91:6a:47:
0d:8a:23:2e:4c:68:e7:64:c6:ec:80:0c:d5:c9:1d:
97:9b:11:5b:73:56:a2:1d:c5:75:a0:4a:86:07:fc:
e5:dd:34:eb:8b:70:02:53:a5:e2:af:a9:70:9b:4e:
64:3a:9f:e1:87:71:3b:4f:1b:b0:5e:95:6c:4f:2b:
f8:82:8a:56:b4:c5:ab:e6:fd:aa:fa:9f:ec:33:19:
ce:d3:11:67:10:4f:5c:d1:23:03:bb:60:89:63:7d:
ce:2c:4f:99:db:2f:1b:e7:80:52:08:82:cd:87:fe:
2a:52:7f:8c:5d:e1:6f:56:9f:fa:ab:1f:36:2e:92:
55:3a:62:ab:6f:41:6e:0b:c6:bb:61:9f:2e:1d:ba:
7a:46:0b:0d:0c:e8:cb:69:14:66:29:e0:83:5a:58:
f6:62:65:d8:39:b2:54:82:ec:d2:05:00:c4:f2:ca:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:62:F4:3B:5D:92:D6:9D:A5:24:73:C0:76:57:CE:5D:23:79:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB6D720922C11F1845025B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.160.0-154.88.179.255
Signature Algorithm: sha256WithRSAEncryption
7a:bc:83:2b:d3:27:b6:3d:46:b6:49:58:25:14:de:2a:b5:26:
5b:ca:a1:de:71:3b:6b:e1:ad:84:c0:b1:de:97:27:81:3a:a8:
39:d2:6f:6b:28:62:cb:a1:75:3a:2f:34:38:5e:02:44:74:2a:
47:22:1c:5b:1c:87:3f:f6:52:49:96:20:60:45:c3:b9:78:66:
22:97:30:d3:fb:09:4f:00:0a:28:c4:8c:ee:6e:bc:4a:a0:b9:
d1:79:a9:c5:df:08:da:34:e6:d6:db:c3:ec:e4:fd:cf:da:5c:
63:79:d2:ae:5c:ad:7e:73:cc:cf:23:f1:b1:2e:2d:5b:fe:d1:
9d:45:97:25:41:7d:be:38:8d:c4:e5:bc:b7:bf:e5:3b:40:b9:
1c:c6:73:f6:50:30:61:f9:ea:4b:06:bc:c0:09:71:31:1a:66:
7f:cd:72:db:14:54:0d:87:c0:27:dd:60:d0:ca:c0:6a:68:b8:
4d:cb:2b:ef:65:49:36:28:ea:68:42:5a:76:a0:50:22:5d:fd:
12:4d:0b:fe:7e:d9:21:72:25:04:4a:bc:4e:4f:55:9b:e2:c7:
a7:fc:89:d5:ca:bb:f4:c3:f1:0f:3b:34:dc:c6:6c:76:65:f6:
28:f7:b7:bc:36:f3:e6:8c:5b:0c:5d:b0:30:b2:05:91:a6:5e:
1b:37:1b:c6
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAd0nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA3MDY0OTE2WhcNMjYwOTA1MDY0OTE2WjAYMRYw
FAYDVQQDEw02YTc1N2ZmMC04NzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwwJlmXg25Gy7+dgmoA77az1bXD86r1+N0uKI3kK6kHB7oYFGTnBwdiEZ
w96jo39vw6ZBoznPicWPiEf2MxBkAoz74gxelOzy/YNA8xPhH2R9+kRdf16RakcN
iiMuTGjnZMbsgAzVyR2XmxFbc1aiHcV1oEqGB/zl3TTri3ACU6Xir6lwm05kOp/h
h3E7TxuwXpVsTyv4gopWtMWr5v2q+p/sMxnO0xFnEE9c0SMDu2CJY33OLE+Z2y8b
54BSCILNh/4qUn+MXeFvVp/6qx82LpJVOmKrb0FuC8a7YZ8uHbp6RgsNDOjLaRRm
KeCDWlj2YmXYObJUguzSBQDE8sph3wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLlF
YvQ7XZLWnaUkc8B2V85dI3nlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xREI2RDcyMDkyMkMxMUYxODQ1MDI1QjRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWaWKADBAKaWLAwDQYJ
KoZIhvcNAQELBQADggEBAHq8gyvTJ7Y9RrZJWCUU3iq1JlvKod5xO2vhrYTAsd6X
J4E6qDnSb2soYsuhdTovNDheAkR0KkciHFschz/2UkmWIGBFw7l4ZiKXMNP7CU8A
CijEjO5uvEqgudF5qcXfCNo05tbbw+zk/c/aXGN50q5crX5zzM8j8bEuLVv+0Z1F
lyVBfb44jcTlvLe/5TtAuRzGc/ZQMGH56ksGvMAJcTEaZn/NctsUVA2HwCfdYNDK
wGpouE3LK+9lSTYo6mhCWnagUCJd/RJNC/5+2SFyJQRKvE5PVZvix6f8idXKu/TD
8Q87NNzGbHZl9ij3t7w28+aMWwxdsDCyBZGmXhs3G8Y=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:56 2026 by rpki-client