Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34C8DB468C0711F18BDACCDACE1D38B0.roa
File: 34C8DB468C0711F18BDACCDACE1D38B0.roa (raw, json)
Hash identifier: 0kbTRA7Ky6h9aLfEpKMmq1Qp7zCfEaoggpqylNKya94=
Subject key identifier: 37:4C:2D:37:E7:8D:86:95:12:97:A0:C9:95:7B:6D:B7:C1:0A:BE:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34C8DB468C0711F18BDACCDACE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:10:01 +0000
ROA not before: Thu 30 Jul 2026 11:09:56 +0000
ROA not after: Wed 30 Sep 2026 11:09:56 +0000
asID: 27947
IP address blocks: 154.197.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121838 (0x1dbee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 11:09:56 2026 GMT
Not After : Sep 30 11:09:56 2026 GMT
Subject: CN=6a6b3109-56d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:79:86:76:03:58:44:98:54:dd:a6:e4:8e:
8a:2d:e3:35:ff:86:21:16:d0:84:a3:3e:31:42:6c:
40:43:e3:4c:80:e7:83:49:aa:08:9d:15:ea:93:05:
01:97:95:76:6d:7e:be:3e:ce:7a:2c:4a:41:17:9b:
da:7f:f0:b5:9f:86:13:0b:fb:f9:7e:53:86:b7:b8:
e2:ff:68:89:6b:b6:52:40:10:9d:0a:43:bd:53:a3:
35:af:83:75:71:0b:4d:85:de:68:15:f8:9a:7f:9b:
6d:d7:f2:59:9a:cc:dc:bd:6e:7a:e2:bd:f1:ec:af:
86:c8:3b:12:5f:df:42:ea:d7:56:70:63:34:0a:40:
eb:50:e1:a6:c1:8a:47:ca:8e:b1:87:93:06:59:ec:
34:60:34:4a:7e:ed:8b:d1:4c:5f:28:70:4e:5b:cb:
b2:8d:2a:b6:0d:68:89:8e:95:1c:bd:e3:7d:b2:74:
1e:84:a5:27:d1:2c:ea:a0:15:50:ee:9b:87:ec:c2:
f3:24:5f:ba:19:4d:a4:7e:97:b7:bd:b1:59:68:5d:
42:15:20:7d:c7:ad:c0:57:b2:a8:28:b9:d0:e3:bb:
8a:ac:d6:4f:ff:9f:3b:f0:43:95:69:27:97:bc:81:
7d:ea:d3:64:74:53:f7:6e:17:7d:7f:0c:42:40:f2:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:2D:37:E7:8D:86:95:12:97:A0:C9:95:7B:6D:B7:C1:0A:BE:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34C8DB468C0711F18BDACCDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.111.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a0:53:34:12:c0:2d:3c:f5:16:05:47:2f:4b:d4:65:33:fb:
96:db:83:7f:39:a6:51:3b:4d:4e:e8:a9:14:1e:74:32:9b:c9:
df:19:d4:6f:6a:93:59:b8:50:aa:87:69:64:5d:48:bd:14:79:
59:15:5e:5f:c1:22:54:51:44:49:13:90:97:07:e4:e2:be:fd:
a7:23:dd:fb:30:f9:20:d6:fa:c4:e0:4d:f5:93:b5:1b:69:59:
b0:2d:20:64:63:79:99:9e:73:50:83:63:bc:13:1e:3e:1c:77:
7d:05:ff:27:54:3e:ba:95:f1:51:ab:13:8d:48:93:c9:3b:0d:
9b:34:26:99:87:dd:b8:8e:7e:79:cd:bb:fe:ff:90:92:d8:82:
ad:d2:fc:12:5d:46:fb:cc:b9:f5:99:5b:9e:9b:1f:9c:74:1d:
06:1d:49:44:ce:26:6b:9d:6d:9d:46:9a:99:36:80:7a:d5:af:
21:01:f8:6c:77:29:c4:e8:49:26:13:75:a8:13:92:39:66:e0:
f6:76:09:00:45:72:54:59:4b:56:f4:e4:5a:16:46:0b:51:de:
68:f7:da:cb:de:4b:5a:a0:63:26:e2:e9:99:55:52:60:2e:47:
04:13:70:98:46:db:48:ee:50:dd:b1:37:27:6d:c9:26:d6:be:
f0:ce:c5:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdvuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzMwMTEwOTU2WhcNMjYwOTMwMTEwOTU2WjAYMRYw
FAYDVQQDEw02YTZiMzEwOS01NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz0p5hnYDWESYVN2m5I6KLeM1/4YhFtCEoz4xQmxAQ+NMgOeDSaoInRXq
kwUBl5V2bX6+Ps56LEpBF5vaf/C1n4YTC/v5flOGt7ji/2iJa7ZSQBCdCkO9U6M1
r4N1cQtNhd5oFfiaf5tt1/JZmszcvW564r3x7K+GyDsSX99C6tdWcGM0CkDrUOGm
wYpHyo6xh5MGWew0YDRKfu2L0UxfKHBOW8uyjSq2DWiJjpUcveN9snQehKUn0Szq
oBVQ7puH7MLzJF+6GU2kfpe3vbFZaF1CFSB9x63AV7KoKLnQ47uKrNZP/5878EOV
aSeXvIF96tNkdFP3bhd9fwxCQPLYdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDdM
LTfnjYaVEpegyZV7bbfBCr6TMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNEM4REI0NjhDMDcxMUYxOEJEQUNDREFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVvMA0GCSqGSIb3DQEB
CwUAA4IBAQDNoFM0EsAtPPUWBUcvS9RlM/uW24N/OaZRO01O6KkUHnQym8nfGdRv
apNZuFCqh2lkXUi9FHlZFV5fwSJUUURJE5CXB+Tivv2nI937MPkg1vrE4E31k7Ub
aVmwLSBkY3mZnnNQg2O8Ex4+HHd9Bf8nVD66lfFRqxONSJPJOw2bNCaZh924jn55
zbv+/5CS2IKt0vwSXUb7zLn1mVuemx+cdB0GHUlEziZrnW2dRpqZNoB61a8hAfhs
dynE6EkmE3WoE5I5ZuD2dgkARXJUWUtW9ORaFkYLUd5o99rL3ktaoGMm4umZVVJg
LkcEE3CYRttI7lDdsTcnbckm1r7wzsUC
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:02 2026 by rpki-client