Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44826A48909E11F186C9FCC9CE1D38B0.roa
File: 44826A48909E11F186C9FCC9CE1D38B0.roa (raw, json)
Hash identifier: q73CQs0qFfuO85KLgpoxIzjyW1mywpB5N4xRHfXVuh4=
Subject key identifier: 2F:05:29:D1:1E:1C:B7:8C:5E:1E:2A:C3:1D:95:B0:03:91:29:2F:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44826A48909E11F186C9FCC9CE1D38B0.roa
Signing time: Wed 05 Aug 2026 07:21:26 +0000
ROA not before: Wed 05 Aug 2026 07:21:22 +0000
ROA not after: Thu 12 Aug 2027 07:21:22 +0000
asID: 137962
IP address blocks: 154.209.0.0/24 maxlen: 24
154.209.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122037 (0x1dcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 07:21:22 2026 GMT
Not After : Aug 12 07:21:22 2027 GMT
Subject: CN=6a72e476-c221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:aa:d1:c5:a4:21:29:b7:f2:f8:56:72:a5:
14:ea:bc:7d:3c:97:e5:d7:fd:8e:1f:e7:07:89:14:
da:16:d5:4c:6a:69:c6:d5:16:88:8d:4c:4c:96:9e:
22:b2:16:d5:4e:b2:cf:04:1c:76:3b:8e:23:62:8a:
ff:9b:4b:5b:b9:c8:53:e8:fc:ac:a2:1d:5f:0f:a0:
fd:ac:01:a1:42:8c:9c:2b:b1:55:0a:bd:3a:1f:9b:
55:38:cc:c3:73:bf:08:ea:f9:54:18:98:5d:f3:b3:
44:1e:81:a9:84:9d:bf:c6:49:09:fa:dc:d1:d4:e7:
15:71:ef:bd:53:0b:87:9a:38:1c:23:96:c6:10:b0:
31:44:1c:82:23:79:dc:80:d5:d7:ef:94:4f:3d:aa:
5b:a6:2d:31:74:c3:01:49:e6:f3:01:a3:f0:44:a2:
9f:fd:b0:d8:f2:16:13:60:60:7a:1c:9e:80:19:b0:
34:a8:36:20:16:8e:95:01:33:67:17:c3:d2:5a:31:
bc:63:b3:43:8a:87:64:e9:e5:e4:c4:20:b3:55:ce:
fe:b7:00:f0:02:f5:42:f5:f6:d3:d6:0e:38:7b:f4:
d0:22:b4:1d:b7:33:f4:a9:94:ed:1f:db:d6:5a:fe:
62:49:92:43:a8:63:ae:76:7a:e4:16:f6:4e:d7:13:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:29:D1:1E:1C:B7:8C:5E:1E:2A:C3:1D:95:B0:03:91:29:2F:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44826A48909E11F186C9FCC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:33:0b:d2:42:e4:4b:86:bf:f7:99:84:84:c5:a1:36:da:53:
3c:f3:08:b0:3e:6e:1e:ae:22:c5:b9:ce:56:4b:69:14:32:85:
20:ba:11:97:8f:db:a0:9a:89:52:b2:cd:3a:61:94:02:5e:54:
0a:37:e7:6a:d8:13:91:75:89:67:db:fc:2a:dc:e3:8f:59:0f:
22:b7:66:da:bb:68:8a:19:4d:cb:43:f8:5e:40:a0:78:bf:a1:
b6:a9:fe:4c:e3:6c:2c:5d:3d:cc:cc:a7:1e:c8:05:de:22:c8:
1a:8d:a1:f2:8a:c2:10:af:b1:24:99:63:bc:5a:0d:32:2a:64:
50:47:f8:7e:21:98:63:1a:54:3e:9c:c6:ef:68:ec:b0:28:09:
db:94:f8:ab:48:87:ed:4a:19:22:1b:36:90:b7:be:9f:10:97:
ce:6e:c1:e1:76:cf:37:3e:cc:e3:5a:43:e6:65:b4:40:2e:ef:
33:18:21:8d:22:b0:b5:a0:7c:c4:57:82:44:e5:39:ea:c6:51:
78:96:b7:e9:ae:53:eb:0e:96:7b:e2:7f:a5:f2:c1:7a:e1:2e:
df:84:35:56:05:2c:30:a0:32:76:53:a0:1a:97:d0:68:48:68:
30:f3:ab:d1:9a:12:1b:ae:aa:b5:08:3e:f4:33:2d:c7:b6:42:
f2:af:0b:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdy1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA1MDcyMTIyWhcNMjcwODEyMDcyMTIyWjAYMRYw
FAYDVQQDEw02YTcyZTQ3Ni1jMjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmDGq0cWkISm38vhWcqUU6rx9PJfl1/2OH+cHiRTaFtVMamnG1RaIjUxM
lp4ishbVTrLPBBx2O44jYor/m0tbuchT6Pysoh1fD6D9rAGhQoycK7FVCr06H5tV
OMzDc78I6vlUGJhd87NEHoGphJ2/xkkJ+tzR1OcVce+9UwuHmjgcI5bGELAxRByC
I3ncgNXX75RPPapbpi0xdMMBSebzAaPwRKKf/bDY8hYTYGB6HJ6AGbA0qDYgFo6V
ATNnF8PSWjG8Y7NDiodk6eXkxCCzVc7+twDwAvVC9fbT1g44e/TQIrQdtzP0qZTt
H9vWWv5iSZJDqGOudnrkFvZO1xNhaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC8F
KdEeHLeMXh4qwx2VsAORKS9IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDgyNkE0ODkwOUUxMUYxODZDOUZDQzlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtEAMA0GCSqGSIb3DQEB
CwUAA4IBAQANMwvSQuRLhr/3mYSExaE22lM88wiwPm4eriLFuc5WS2kUMoUguhGX
j9ugmolSss06YZQCXlQKN+dq2BORdYln2/wq3OOPWQ8it2bau2iKGU3LQ/heQKB4
v6G2qf5M42wsXT3MzKceyAXeIsgajaHyisIQr7EkmWO8Wg0yKmRQR/h+IZhjGlQ+
nMbvaOywKAnblPirSIftShkiGzaQt76fEJfObsHhds83PszjWkPmZbRALu8zGCGN
IrC1oHzEV4JE5TnqxlF4lrfprlPrDpZ74n+l8sF64S7fhDVWBSwwoDJ2U6Aal9Bo
SGgw86vRmhIbrqq1CD70My3HtkLyrwsm
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:53 2026 by rpki-client