Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3A2C02710C11F19768A908CF1D38B0.roa
File: 4A3A2C02710C11F19768A908CF1D38B0.roa (raw, json)
Hash identifier: sGo0Wy9cb13rUBMVCxz8hCBzmLMW+ipCUcrJkuTbZGI=
Subject key identifier: 9B:25:D6:52:5B:6C:0D:42:F1:94:AE:2A:5E:FD:4B:4D:0C:E5:2A:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D537
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3A2C02710C11F19768A908CF1D38B0.roa
Signing time: Fri 26 Jun 2026 03:08:23 +0000
ROA not before: Fri 26 Jun 2026 03:08:17 +0000
ROA not after: Mon 03 Aug 2026 03:08:17 +0000
asID: 137436
IP address blocks: 154.94.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120119 (0x1d537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 03:08:17 2026 GMT
Not After : Aug 3 03:08:17 2026 GMT
Subject: CN=6a3ded27-5b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:44:56:a8:55:a3:d8:5b:b3:ae:04:46:37:
16:21:fb:27:3a:bf:70:34:85:e6:d1:df:a2:ed:55:
20:d5:e8:d0:f4:f5:46:a6:0c:6d:a1:37:17:71:fa:
65:39:8b:48:8d:49:b2:73:5e:67:06:df:ab:2e:c9:
7b:72:76:ea:62:95:d9:ed:be:4e:d4:71:8e:49:1f:
3c:86:e0:69:b2:24:7f:f9:89:0f:91:19:f3:f6:7f:
ec:36:27:f4:6b:ac:ca:9c:c3:cc:35:6c:49:b7:4f:
17:a9:f1:2d:02:ad:95:df:24:d2:f6:fe:ea:ac:8d:
90:e3:b0:ae:05:31:b1:7d:28:b3:33:72:65:28:35:
ed:ea:a8:79:79:dc:85:6e:4e:9c:53:6c:9d:06:15:
b9:c2:b6:ef:0d:97:ea:d0:24:76:9e:69:4e:39:d9:
b3:9c:a4:ea:88:f2:7c:37:7e:8b:3a:77:e1:35:f5:
5b:be:b6:0b:fd:bd:9b:a2:7c:30:ae:b8:85:fa:d6:
a5:e2:3d:16:f1:f5:22:ad:1f:2d:18:37:5d:fe:72:
44:d1:48:51:3b:2a:ec:6b:62:b8:d6:6f:a5:81:3a:
83:41:d4:1c:42:14:24:6c:85:47:cb:9c:30:4b:2e:
e4:93:bc:9f:a7:56:57:4a:1b:69:65:4e:a2:cd:44:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:D6:52:5B:6C:0D:42:F1:94:AE:2A:5E:FD:4B:4D:0C:E5:2A:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3A2C02710C11F19768A908CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.50.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a6:c3:11:ac:9a:a0:6d:e0:fa:3d:60:f1:2a:dc:19:1b:8e:
b6:fa:c5:b9:06:49:00:b8:b7:32:2e:62:ac:91:c0:ce:83:ef:
c5:45:c9:a0:da:95:80:4f:72:9f:a7:20:f6:90:b8:c8:73:cb:
bd:db:06:3c:08:26:dc:7c:71:f5:2e:a4:3a:f3:a5:66:fc:1f:
50:81:17:1b:dd:27:06:0c:6e:d8:59:eb:b5:4a:16:9a:4d:bb:
aa:6c:ec:78:7e:93:6c:ac:cb:d0:36:81:7f:36:3d:7e:64:2c:
ac:67:a5:b8:2a:4c:9b:bf:eb:e2:ab:07:de:84:d3:ec:a9:a8:
ec:a5:46:e1:7b:c4:ed:c6:a9:a3:a3:9f:7a:c6:6e:eb:60:72:
d6:62:38:49:85:03:bc:63:63:1e:b1:eb:9e:83:58:ba:12:1b:
b2:1c:0e:bf:cb:21:98:3c:ce:7a:ff:71:75:0d:b3:cf:c0:02:
44:eb:87:9f:1e:13:0c:f2:43:39:ab:7e:34:d9:1f:0b:b9:5d:
89:21:61:38:26:50:6c:d0:ef:25:82:56:f1:36:21:84:83:d9:
27:fa:0f:48:d2:6d:cc:be:14:b2:c4:63:43:67:cf:6c:83:c4:
0e:de:2d:1a:b7:c8:19:2f:00:75:b7:0f:b3:3a:51:ea:8c:7c:
8f:5f:b4:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdU3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MDMwODE3WhcNMjYwODAzMDMwODE3WjAYMRYw
FAYDVQQDEw02YTNkZWQyNy01YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs75EVqhVo9hbs64ERjcWIfsnOr9wNIXm0d+i7VUg1ejQ9PVGpgxtoTcX
cfplOYtIjUmyc15nBt+rLsl7cnbqYpXZ7b5O1HGOSR88huBpsiR/+YkPkRnz9n/s
Nif0a6zKnMPMNWxJt08XqfEtAq2V3yTS9v7qrI2Q47CuBTGxfSizM3JlKDXt6qh5
edyFbk6cU2ydBhW5wrbvDZfq0CR2nmlOOdmznKTqiPJ8N36LOnfhNfVbvrYL/b2b
onwwrriF+tal4j0W8fUirR8tGDdd/nJE0UhROyrsa2K41m+lgTqDQdQcQhQkbIVH
y5wwSy7kk7yfp1ZXShtpZU6izUQszwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJsl
1lJbbA1C8ZSuKl79S00M5SrzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QTNBMkMwMjcxMEMxMUYxOTc2OEE5MDhDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4yMA0GCSqGSIb3DQEB
CwUAA4IBAQB4psMRrJqgbeD6PWDxKtwZG462+sW5BkkAuLcyLmKskcDOg+/FRcmg
2pWAT3KfpyD2kLjIc8u92wY8CCbcfHH1LqQ686Vm/B9QgRcb3ScGDG7YWeu1Shaa
TbuqbOx4fpNsrMvQNoF/Nj1+ZCysZ6W4Kkybv+viqwfehNPsqajspUbhe8Ttxqmj
o596xm7rYHLWYjhJhQO8Y2Meseueg1i6EhuyHA6/yyGYPM56/3F1DbPPwAJE64ef
HhMM8kM5q3402R8LuV2JIWE4JlBs0O8lglbxNiGEg9kn+g9I0m3MvhSyxGNDZ89s
g8QO3i0at8gZLwB1tw+zOlHqjHyPX7SY
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:41 2026 by rpki-client