Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/553E25CC8E3F11F1B0002FE9CE1D38B0.roa
File: 553E25CC8E3F11F1B0002FE9CE1D38B0.roa (raw, json)
Hash identifier: o+xRtstCxiaA97qNceD3vK7D0EgoUwmhfrIMsDZyGfs=
Subject key identifier: FC:C8:D5:B8:1D:40:55:67:43:7A:D3:63:E0:8F:41:03:AF:68:F6:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/553E25CC8E3F11F1B0002FE9CE1D38B0.roa
Signing time: Sun 02 Aug 2026 06:56:49 +0000
ROA not before: Sun 02 Aug 2026 06:56:45 +0000
ROA not after: Wed 09 Sep 2026 06:56:45 +0000
asID: 151352
IP address blocks: 154.82.136.0/23 maxlen: 24
154.82.136.0/24 maxlen: 24
154.82.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121915 (0x1dc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 06:56:45 2026 GMT
Not After : Sep 9 06:56:45 2026 GMT
Subject: CN=6a6eea31-e2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:7f:6b:b9:c4:4d:83:79:4f:36:b1:08:38:
7d:93:c6:6d:12:4a:1c:d9:dd:b3:78:7a:27:65:96:
23:00:19:45:44:cf:19:24:58:2e:d1:fb:29:c6:a1:
8c:99:cb:65:f0:a8:62:6d:3c:f4:b3:42:69:ea:b1:
b1:66:f2:d5:2f:d6:f6:38:e2:c4:1d:0c:1d:26:ea:
02:b2:f3:79:b6:e8:59:07:39:2a:c4:4b:ab:f8:12:
64:4e:91:ab:da:32:5e:a6:fe:27:c2:a1:fd:e8:dc:
41:33:0c:ab:23:a0:9b:af:ab:29:19:b6:79:b8:35:
a7:bd:8d:f8:3a:ad:7b:ae:1c:cd:67:b1:47:cf:41:
b3:05:84:70:99:d1:bc:4a:8d:00:e8:e2:a8:54:25:
5a:47:ae:9d:ae:be:86:0c:2f:ff:ee:ae:53:d8:50:
f4:59:54:50:a6:cc:93:aa:31:cf:ce:02:e5:bb:3f:
3e:cd:7b:79:db:99:2b:4c:18:03:6b:14:eb:64:ba:
6c:5f:9b:38:7e:09:7a:b1:52:c3:dc:e6:1c:03:4f:
6f:8d:20:cc:84:25:5a:d5:10:60:00:50:db:f7:d8:
5e:c3:b0:da:2a:66:5c:e7:aa:c9:a6:24:48:ec:9a:
ed:28:5a:a3:30:4a:f9:03:d8:d8:ae:f9:c8:80:a2:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:D5:B8:1D:40:55:67:43:7A:D3:63:E0:8F:41:03:AF:68:F6:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/553E25CC8E3F11F1B0002FE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:5e:90:9e:6a:21:52:ce:fd:8d:71:eb:c7:7c:22:be:91:7b:
24:8a:f4:4f:d1:4b:e4:f8:02:aa:ba:d0:06:9c:03:13:89:7e:
3c:0e:06:70:90:71:f8:d5:c7:ca:68:b9:1d:37:2e:ef:1f:2a:
3d:c8:48:e9:c2:39:6b:e5:95:61:7a:e0:85:77:18:0c:5d:b0:
41:a1:82:82:98:4c:ee:ed:e2:f1:57:65:2c:3c:e0:39:a3:dc:
89:51:57:14:6d:2c:df:90:d1:2e:b7:ac:f1:b4:e9:db:7c:48:
02:b8:c7:69:73:f5:f5:11:b2:51:1e:45:6d:9c:5a:8f:ab:2d:
51:2d:ed:45:da:7f:7b:50:c3:da:4f:2f:7d:51:0e:ac:1e:b7:
79:23:2f:69:4c:67:f0:9b:06:a9:71:b6:26:e9:de:ba:78:87:
84:83:d1:25:b3:f1:d5:30:cd:76:0d:44:84:ad:6b:d2:90:7f:
c0:e1:17:51:c9:cc:87:68:7d:ff:76:3f:5a:f8:e5:c2:a5:12:
6a:50:fe:49:30:f8:27:20:e1:7d:ba:8a:10:90:18:49:5a:db:
20:7a:cf:43:49:c5:20:fd:d8:8f:e8:38:01:ec:8c:fd:8d:86:
75:4e:91:f4:b3:2c:4e:9a:29:2e:bd:6d:7b:2a:17:1d:21:57:
a4:ac:63:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdw7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODAyMDY1NjQ1WhcNMjYwOTA5MDY1NjQ1WjAYMRYw
FAYDVQQDEw02YTZlZWEzMS1lMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuJ5/a7nETYN5TzaxCDh9k8ZtEkoc2d2zeHonZZYjABlFRM8ZJFgu0fsp
xqGMmctl8KhibTz0s0Jp6rGxZvLVL9b2OOLEHQwdJuoCsvN5tuhZBzkqxEur+BJk
TpGr2jJepv4nwqH96NxBMwyrI6Cbr6spGbZ5uDWnvY34Oq17rhzNZ7FHz0GzBYRw
mdG8So0A6OKoVCVaR66drr6GDC//7q5T2FD0WVRQpsyTqjHPzgLluz8+zXt525kr
TBgDaxTrZLpsX5s4fgl6sVLD3OYcA09vjSDMhCVa1RBgAFDb99hew7DaKmZc56rJ
piRI7JrtKFqjMEr5A9jYrvnIgKLXQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPzI
1bgdQFVnQ3rTY+CPQQOvaPZWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NTNFMjVDQzhFM0YxMUYxQjAwMDJGRTlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlKIMA0GCSqGSIb3DQEB
CwUAA4IBAQDUXpCeaiFSzv2NcevHfCK+kXskivRP0Uvk+AKqutAGnAMTiX48DgZw
kHH41cfKaLkdNy7vHyo9yEjpwjlr5ZVheuCFdxgMXbBBoYKCmEzu7eLxV2UsPOA5
o9yJUVcUbSzfkNEut6zxtOnbfEgCuMdpc/X1EbJRHkVtnFqPqy1RLe1F2n97UMPa
Ty99UQ6sHrd5Iy9pTGfwmwapcbYm6d66eIeEg9Els/HVMM12DUSErWvSkH/A4RdR
ycyHaH3/dj9a+OXCpRJqUP5JMPgnIOF9uooQkBhJWtsges9DScUg/diP6DgB7Iz9
jYZ1TpH0syxOmikuvW17KhcdIVekrGN/
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:12 2026 by rpki-client