Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328C099A923111F1BC0FE7D2CE1D38B0.roa
File: 328C099A923111F1BC0FE7D2CE1D38B0.roa (raw, json)
Hash identifier: q7YmCOu0UR4u2IVVKQ7tOl1+xipxEAn1ND9GcAch3As=
Subject key identifier: E0:A6:4A:9B:D1:A5:32:35:C9:FC:5A:03:14:D6:D7:98:FC:3D:0F:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328C099A923111F1BC0FE7D2CE1D38B0.roa
Signing time: Fri 07 Aug 2026 07:25:43 +0000
ROA not before: Fri 07 Aug 2026 07:25:38 +0000
ROA not after: Sun 15 Aug 2027 07:25:38 +0000
asID: 328608
IP address blocks: 154.214.253.0/24 maxlen: 24
154.214.254.0/24 maxlen: 24
154.214.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122163 (0x1dd33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:25:38 2026 GMT
Not After : Aug 15 07:25:38 2027 GMT
Subject: CN=6a758877-4fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:e8:ad:6d:d3:ea:b1:23:4c:45:ab:e4:88:
6f:48:fa:9c:21:0d:3d:aa:99:22:38:1b:fd:1a:d3:
1c:a1:9a:d6:91:7b:6b:90:bc:ec:ae:20:7d:5f:b3:
07:ef:03:4f:75:95:6b:82:64:2b:19:d9:fe:60:f8:
0a:8e:b5:28:d2:5c:89:31:57:31:1e:7e:69:f8:59:
e9:78:1f:20:3d:d3:42:c3:53:08:96:ea:72:80:2a:
78:ab:23:28:fe:66:f4:3b:b0:00:ef:a8:1d:d0:a4:
55:a0:3b:05:94:e2:21:02:af:6c:38:cc:fd:c2:14:
6b:ed:6c:8b:b5:ed:b1:a1:8d:4f:2b:9f:5a:4a:20:
a4:4a:38:b5:ed:0d:f5:24:ae:0c:3f:02:e4:02:05:
0b:31:1a:ce:3e:2f:0f:c5:ee:d3:0f:02:0f:e6:b6:
0b:06:ab:8e:a7:67:82:2f:75:f3:ba:bc:74:e1:c7:
dd:a6:33:9d:27:ba:42:5d:6a:86:b1:31:d3:4d:5c:
5b:7c:bf:4d:c8:3d:fc:0f:0c:03:1a:76:c6:87:31:
09:24:7e:af:85:f1:76:53:81:35:37:2c:02:e3:b5:
a0:13:d7:d5:ac:8a:e8:ce:9f:94:83:f1:b6:b4:5c:
25:a5:9f:db:87:d7:12:f6:94:0a:6d:4e:66:bc:a7:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:4A:9B:D1:A5:32:35:C9:FC:5A:03:14:D6:D7:98:FC:3D:0F:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328C099A923111F1BC0FE7D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.253.0-154.214.255.255
Signature Algorithm: sha256WithRSAEncryption
af:6f:82:dc:a3:aa:ae:b0:86:f1:ab:cf:c2:5b:d9:c8:89:4f:
b3:d0:eb:33:e1:86:72:a7:84:1e:25:45:84:0b:75:e4:f0:1f:
29:ce:3b:38:ca:75:62:22:bc:40:e6:ab:c3:8c:15:42:e3:b5:
05:37:65:b9:26:cc:15:d0:0e:28:20:3f:4c:93:54:66:c2:46:
ac:b4:b4:3f:1b:af:bd:dd:2d:45:38:4b:4c:f0:02:28:b9:ca:
1b:94:3d:ad:ac:46:28:1f:66:93:2e:9f:de:12:5e:83:2e:4b:
f5:70:18:31:8f:21:34:de:e1:91:32:c4:09:2a:05:bb:43:91:
74:d2:1e:87:85:a7:c8:b3:20:2c:49:d1:b5:98:5a:07:b4:be:
0f:e0:27:46:e1:3d:ec:70:6b:c7:37:15:bf:c4:d8:30:9a:93:
85:83:66:e1:c1:0c:4f:53:86:74:fe:c3:c6:13:92:90:bc:5d:
20:af:6b:6b:ca:96:20:2e:25:55:ee:c7:3b:67:f1:67:ef:60:
63:2c:07:f0:e8:13:f3:c4:ae:a3:2a:05:91:8c:26:aa:96:e4:
89:07:9c:2f:2f:61:5c:9e:72:d1:03:b9:12:78:a8:13:1d:24:
2a:c3:a5:e2:db:f0:d8:0c:7b:6a:61:eb:b6:e6:b2:8d:b2:cf:
ac:38:bf:38
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIDAd0zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA3MDcyNTM4WhcNMjcwODE1MDcyNTM4WjAYMRYw
FAYDVQQDEw02YTc1ODg3Ny00ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0fforW3T6rEjTEWr5IhvSPqcIQ09qpkiOBv9GtMcoZrWkXtrkLzsriB9
X7MH7wNPdZVrgmQrGdn+YPgKjrUo0lyJMVcxHn5p+FnpeB8gPdNCw1MIlupygCp4
qyMo/mb0O7AA76gd0KRVoDsFlOIhAq9sOMz9whRr7WyLte2xoY1PK59aSiCkSji1
7Q31JK4MPwLkAgULMRrOPi8Pxe7TDwIP5rYLBquOp2eCL3Xzurx04cfdpjOdJ7pC
XWqGsTHTTVxbfL9NyD38DwwDGnbGhzEJJH6vhfF2U4E1NywC47WgE9fVrIrozp+U
g/G2tFwlpZ/bh9cS9pQKbU5mvKcvLQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOCm
SpvRpTI1yfxaAxTW15j8PQ+VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMjhDMDk5QTkyMzExMUYxQkMwRkU3RDJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACa1v0DAwCa1jANBgkq
hkiG9w0BAQsFAAOCAQEAr2+C3KOqrrCG8avPwlvZyIlPs9DrM+GGcqeEHiVFhAt1
5PAfKc47OMp1YiK8QOarw4wVQuO1BTdluSbMFdAOKCA/TJNUZsJGrLS0Pxuvvd0t
RThLTPACKLnKG5Q9raxGKB9mky6f3hJegy5L9XAYMY8hNN7hkTLECSoFu0ORdNIe
h4WnyLMgLEnRtZhaB7S+D+AnRuE97HBrxzcVv8TYMJqThYNm4cEMT1OGdP7DxhOS
kLxdIK9ra8qWIC4lVe7HO2fxZ+9gYywH8OgT88SuoyoFkYwmqpbkiQecLy9hXJ5y
0QO5EnioEx0kKsOl4tvw2Ax7amHrtuayjbLPrDi/OA==
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:01 2026 by rpki-client