Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29AE4A4876AE11F186F51BD7CE1D38B0.roa
File: 29AE4A4876AE11F186F51BD7CE1D38B0.roa (raw, json)
Hash identifier: xPZkLQLLSfGqicf8D1Gi7Z4bfez+3iYvYbKO/2OdT0c=
Subject key identifier: 5C:A8:B5:B8:5C:C8:41:58:0B:F4:C3:D0:46:75:A8:84:C6:34:16:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29AE4A4876AE11F186F51BD7CE1D38B0.roa
Signing time: Fri 03 Jul 2026 07:09:42 +0000
ROA not before: Fri 03 Jul 2026 07:09:38 +0000
ROA not after: Thu 06 Aug 2026 07:09:38 +0000
asID: 153517
IP address blocks: 154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120481 (0x1d6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 07:09:38 2026 GMT
Not After : Aug 6 07:09:38 2026 GMT
Subject: CN=6a476036-1455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:c5:7d:84:7b:2b:dd:47:18:11:1d:00:20:
11:1f:00:9c:a6:94:21:88:9b:71:19:3b:0d:7d:40:
95:88:f4:91:d3:98:48:cd:b9:94:18:61:cc:b1:a5:
03:90:1a:bb:b5:9a:be:07:e1:32:3e:ff:2a:06:8d:
83:29:7b:a0:ab:29:1f:cd:80:f7:7f:f8:73:6d:17:
03:02:31:29:91:58:35:55:82:45:bd:dc:d1:86:36:
6d:08:08:16:25:93:fc:98:b8:0c:10:af:ba:9e:88:
cc:c8:26:7a:82:cb:19:99:20:49:54:10:b4:61:cd:
67:20:3e:ed:70:55:8e:aa:b3:31:b5:c4:0c:de:0a:
7d:25:02:50:eb:b9:d3:06:4a:ed:03:64:a2:44:6f:
e7:4c:26:ab:8d:e1:29:52:a3:8b:0e:37:dd:7f:34:
1a:d2:df:f1:ce:8c:a3:fe:ef:b6:d8:04:51:3d:6c:
fc:57:79:71:6d:62:7c:04:f4:a8:20:d5:17:95:be:
3d:a4:8e:c6:15:fd:4d:09:01:75:7f:35:57:f4:65:
02:1c:34:42:a4:fb:b5:b9:de:be:46:94:6c:19:d1:
be:66:e7:79:58:28:39:47:c5:8c:99:62:ca:fc:69:
fe:e8:93:ff:5b:e2:bd:77:de:8a:f6:d4:41:59:d1:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A8:B5:B8:5C:C8:41:58:0B:F4:C3:D0:46:75:A8:84:C6:34:16:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29AE4A4876AE11F186F51BD7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:51:07:fd:df:3c:2c:57:60:08:ba:71:7a:1d:2c:41:a5:e1:
f8:20:8d:30:49:eb:3c:7a:46:71:5a:60:a7:de:24:f2:43:a8:
04:3b:14:75:8d:3d:ac:88:74:80:15:46:35:cd:db:a8:36:89:
84:94:d8:81:40:7c:5e:6b:db:a6:46:3a:23:35:9c:79:ad:47:
40:4d:00:e2:45:4d:ca:d1:ec:8a:af:20:ea:68:d9:a7:94:a1:
b4:99:fe:11:1c:b5:ff:7b:9a:42:64:ab:d7:82:ca:7d:db:45:
65:ab:6d:52:aa:ca:da:b4:4b:f6:ce:b5:42:f7:15:61:07:1e:
92:4b:f2:a1:f9:53:4c:e3:4c:ea:61:f5:49:a6:3d:34:12:41:
2a:a3:96:d4:52:f4:67:cb:64:10:4b:93:69:65:19:a4:3d:75:
c5:39:c0:20:42:f1:b7:1c:e0:57:bc:51:9c:7e:6a:96:66:3d:
b5:e7:4d:be:be:39:14:07:1e:1b:d3:78:57:c4:5d:07:2d:0c:
d9:ff:25:3e:c7:e9:a3:b1:11:66:1a:16:f3:d8:cb:03:ee:c0:
6d:1e:b0:d2:9f:17:5c:8b:eb:1c:fd:42:e5:6d:82:77:87:d2:
dd:4f:63:0d:21:cd:9f:7b:e0:8b:25:17:76:71:bf:13:2c:d0:
e8:15:0b:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdahMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMDcwOTM4WhcNMjYwODA2MDcwOTM4WjAYMRYw
FAYDVQQDEw02YTQ3NjAzNi0xNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAotfFfYR7K91HGBEdACARHwCcppQhiJtxGTsNfUCViPSR05hIzbmUGGHM
saUDkBq7tZq+B+EyPv8qBo2DKXugqykfzYD3f/hzbRcDAjEpkVg1VYJFvdzRhjZt
CAgWJZP8mLgMEK+6nojMyCZ6gssZmSBJVBC0Yc1nID7tcFWOqrMxtcQM3gp9JQJQ
67nTBkrtA2SiRG/nTCarjeEpUqOLDjfdfzQa0t/xzoyj/u+22ARRPWz8V3lxbWJ8
BPSoINUXlb49pI7GFf1NCQF1fzVX9GUCHDRCpPu1ud6+RpRsGdG+Zud5WCg5R8WM
mWLK/Gn+6JP/W+K9d96K9tRBWdEsUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFyo
tbhcyEFYC/TD0EZ1qITGNBaLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOUFFNEE0ODc2QUUxMUYxODZGNTFCRDdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYfMA0GCSqGSIb3DQEB
CwUAA4IBAQA8UQf93zwsV2AIunF6HSxBpeH4II0wSes8ekZxWmCn3iTyQ6gEOxR1
jT2siHSAFUY1zduoNomElNiBQHxea9umRjojNZx5rUdATQDiRU3K0eyKryDqaNmn
lKG0mf4RHLX/e5pCZKvXgsp920Vlq21SqsratEv2zrVC9xVhBx6SS/Kh+VNM40zq
YfVJpj00EkEqo5bUUvRny2QQS5NpZRmkPXXFOcAgQvG3HOBXvFGcfmqWZj21502+
vjkUBx4b03hXxF0HLQzZ/yU+x+mjsRFmGhbz2MsD7sBtHrDSnxdci+sc/ULlbYJ3
h9LdT2MNIc2fe+CLJRd2cb8TLNDoFQvH
-----END CERTIFICATE-----
Generated at Thu Jul 9 02:46:23 2026 by rpki-client