Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BC13B68C1311F1A1684CA4CE1D38B0.roa
File: 46BC13B68C1311F1A1684CA4CE1D38B0.roa (raw, json)
Hash identifier: sGekbIL+hyhwxVrgdPmWCfLFOQav/W8+09oNsCv2/es=
Subject key identifier: 1B:BE:C8:96:4A:AC:78:02:2D:8C:3D:FA:72:9C:98:9A:38:6E:3E:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BC13B68C1311F1A1684CA4CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:36:25 +0000
ROA not before: Thu 30 Jul 2026 12:36:21 +0000
ROA not after: Fri 30 Jul 2027 12:36:21 +0000
asID: 60171
IP address blocks: 154.214.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121840 (0x1dbf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 12:36:21 2026 GMT
Not After : Jul 30 12:36:21 2027 GMT
Subject: CN=6a6b4549-31cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:a8:14:8d:a9:f2:1a:e5:37:58:e3:00:9b:
81:a2:c0:73:3d:3e:6e:9a:b8:c8:38:44:96:93:57:
7b:08:31:5a:8f:b7:9c:6d:c4:e6:05:3f:4a:4c:90:
5e:97:a3:19:d1:b7:e8:89:12:61:e1:cf:df:31:0c:
16:5a:6b:8b:37:58:dd:6c:65:c2:2f:85:68:68:4f:
d9:75:7d:06:a9:24:74:e1:08:01:2f:3d:8e:46:c1:
a6:7b:cf:3a:6b:55:9f:f4:94:64:63:5c:37:bb:17:
51:fb:e5:10:9e:4c:16:0c:f6:df:5a:47:8b:fc:f7:
f0:4c:1f:99:5d:b3:10:e9:b1:3b:bc:6f:d2:99:a4:
66:dc:00:75:c1:92:7d:22:b1:6a:06:2f:36:f0:7a:
95:e8:04:2b:68:6c:6c:2e:9e:3d:9c:14:d4:61:e1:
e1:21:15:ec:a1:e5:65:f8:2e:ba:c4:72:82:87:eb:
2f:43:21:c6:10:74:b7:ee:34:02:86:af:74:96:ec:
6e:08:44:f7:c5:c7:c2:59:5d:c5:fe:14:87:89:4c:
92:4d:4e:e6:d7:fb:62:b2:75:ba:72:e3:31:81:c2:
2b:9d:89:08:9d:1e:06:80:bb:5c:42:fb:65:34:2d:
17:36:17:c5:d4:f4:4a:88:14:0f:41:fa:1c:7d:8c:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:C8:96:4A:AC:78:02:2D:8C:3D:FA:72:9C:98:9A:38:6E:3E:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BC13B68C1311F1A1684CA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:48:cf:58:31:a5:03:c8:9a:e4:87:d2:97:ef:98:6a:61:8b:
99:55:c6:cd:1b:c2:a5:76:97:a3:9b:e2:37:55:97:f0:78:19:
df:4f:63:ee:40:3f:9e:62:89:36:c5:bb:35:8d:33:44:cb:bc:
f6:61:96:41:4d:a4:2a:7a:3d:6f:8d:13:6d:59:94:d8:80:78:
f3:32:98:93:c7:75:64:48:f8:3a:3b:ff:16:da:db:32:bb:a7:
14:75:ac:cf:65:79:02:dc:39:41:dd:40:6f:6a:3e:36:93:b7:
31:82:c0:95:cf:40:26:e1:59:4e:18:24:b3:3e:5d:fd:a7:ee:
cd:96:02:80:87:6e:5b:c4:8c:75:49:5c:ed:3f:53:b9:f6:93:
88:d3:20:4d:15:31:57:dc:fe:fe:53:f7:31:87:99:7d:a7:11:
3b:b0:b8:8a:61:2b:21:a7:d6:ec:ef:04:50:b9:f8:dd:05:18:
64:ed:4e:7e:f3:cf:c8:94:b6:9c:3d:e4:dd:67:d7:3f:b5:47:
d1:75:75:92:56:05:f6:51:56:56:a7:a4:04:43:5b:e8:58:0a:
35:57:01:79:eb:83:8e:74:fa:d7:d5:48:8d:ef:f2:2b:a0:c5:
cd:18:78:e2:0e:2c:12:71:b9:ec:34:91:c5:c4:1b:8a:9b:43:
fa:e3:e7:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdvwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzMwMTIzNjIxWhcNMjcwNzMwMTIzNjIxWjAYMRYw
FAYDVQQDEw02YTZiNDU0OS0zMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApwaoFI2p8hrlN1jjAJuBosBzPT5umrjIOESWk1d7CDFaj7ecbcTmBT9K
TJBel6MZ0bfoiRJh4c/fMQwWWmuLN1jdbGXCL4VoaE/ZdX0GqSR04QgBLz2ORsGm
e886a1Wf9JRkY1w3uxdR++UQnkwWDPbfWkeL/PfwTB+ZXbMQ6bE7vG/SmaRm3AB1
wZJ9IrFqBi828HqV6AQraGxsLp49nBTUYeHhIRXsoeVl+C66xHKCh+svQyHGEHS3
7jQChq90luxuCET3xcfCWV3F/hSHiUySTU7m1/tisnW6cuMxgcIrnYkInR4GgLtc
QvtlNC0XNhfF1PRKiBQPQfocfYxfaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBu+
yJZKrHgCLYw9+nKcmJo4bj4pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NkJDMTNCNjhDMTMxMUYxQTE2ODRDQTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPSM9YMaUDyJrkh9KX75hqYYuZVcbNG8Kldpejm+I3VZfweBnfT2Pu
QD+eYok2xbs1jTNEy7z2YZZBTaQqej1vjRNtWZTYgHjzMpiTx3VkSPg6O/8W2tsy
u6cUdazPZXkC3DlB3UBvaj42k7cxgsCVz0Am4VlOGCSzPl39p+7NlgKAh25bxIx1
SVztP1O59pOI0yBNFTFX3P7+U/cxh5l9pxE7sLiKYSshp9bs7wRQufjdBRhk7U5+
88/IlLacPeTdZ9c/tUfRdXWSVgX2UVZWp6QEQ1voWAo1VwF564OOdPrX1UiN7/Ir
oMXNGHjiDiwScbnsNJHFxBuKm0P64+ej
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:18 2026 by rpki-client