Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A774F2491D611F1BE37921ACF1D38B0.roa
File: 5A774F2491D611F1BE37921ACF1D38B0.roa (raw, json)
Hash identifier: VkuHw0532GbqGg7rILkp2v8RZQxfJQizv+p7E2M+1Bw=
Subject key identifier: 09:5C:47:1B:BD:92:62:8A:47:01:B3:F6:44:92:DD:2F:8C:27:F9:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A774F2491D611F1BE37921ACF1D38B0.roa
Signing time: Thu 06 Aug 2026 20:35:25 +0000
ROA not before: Thu 06 Aug 2026 20:35:22 +0000
ROA not after: Sat 12 Sep 2026 20:35:22 +0000
asID: 20457
IP address blocks: 154.85.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122117 (0x1dd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 20:35:22 2026 GMT
Not After : Sep 12 20:35:22 2026 GMT
Subject: CN=6a74f00d-5171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:55:19:82:f2:8e:52:29:dd:57:78:9d:30:
4e:19:02:eb:b1:20:ad:09:12:98:ea:ce:0b:cb:f0:
cc:6c:30:d3:5f:8b:e5:3c:f7:aa:47:68:e7:85:13:
c1:ec:bb:e7:8c:72:b9:33:31:05:a8:dd:8d:63:7e:
b0:06:f4:e6:5c:54:6d:d1:d0:a8:64:5a:81:44:19:
19:91:52:c1:39:9a:d7:d3:3e:65:37:e6:8d:e8:f4:
c9:bf:bc:a9:82:71:18:14:5a:ef:2c:fc:cc:7c:0b:
44:6a:57:1c:35:cf:b9:21:ba:4f:8b:c9:a0:20:ed:
37:53:ac:74:6d:4f:fa:36:f9:51:f9:be:d7:87:0a:
91:c4:0c:ba:5a:fc:28:a2:a0:f0:1e:f9:48:96:13:
dc:2e:86:c1:70:73:f1:e6:c4:5e:40:86:22:9d:65:
81:9b:e9:e7:59:04:46:c5:54:49:78:71:d6:a0:1d:
e3:53:fa:e4:0e:50:4a:36:ac:3c:a1:db:3d:b2:0e:
2d:c1:ff:66:49:98:9f:fb:c4:60:51:3a:c6:b8:f0:
41:e7:ec:9f:54:77:80:86:d6:84:75:cf:c4:46:2c:
e8:2c:18:21:0b:97:4d:d7:b8:de:9a:ef:08:e2:28:
f1:00:6f:ee:ba:dd:43:dc:a5:d4:15:36:cc:ea:2b:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:47:1B:BD:92:62:8A:47:01:B3:F6:44:92:DD:2F:8C:27:F9:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A774F2491D611F1BE37921ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.24.0/23
Signature Algorithm: sha256WithRSAEncryption
83:cc:09:ba:4a:5b:c4:29:d9:80:15:fd:cc:57:f7:a9:65:f2:
7b:7a:f9:15:5f:66:96:83:d8:15:74:c8:52:f2:03:ba:07:e4:
0b:5e:a8:c4:c5:2e:19:7d:6d:de:2f:2a:8b:85:c3:da:4a:f6:
7b:ce:6f:de:22:d2:d2:8f:2e:73:a9:24:8d:68:82:b6:0d:40:
a3:bc:e0:eb:85:37:01:70:17:1f:03:80:37:cd:1f:0f:01:72:
8a:52:07:c9:5d:fa:5a:c8:3e:ab:d8:dd:63:1b:60:c5:82:57:
4a:81:81:ab:0a:47:19:ca:9e:f1:c4:99:9c:7b:24:8b:bb:d0:
4f:e4:ca:e9:77:1d:ff:02:f5:02:57:54:a4:a0:68:be:bd:21:
9f:01:fc:32:0f:87:d3:e2:1c:8b:b8:0a:e4:0d:57:13:6a:8d:
e2:30:49:4f:7c:eb:50:36:5e:47:e6:7d:54:6e:d0:4b:93:70:
32:e9:b3:14:de:33:38:da:d0:91:4a:da:41:f6:7f:15:1d:dc:
db:ac:d4:68:d8:ec:96:e5:d0:82:9a:2d:eb:a0:37:e9:c6:a4:
4c:0c:43:36:cc:2f:48:4b:a3:38:a1:aa:04:d9:9a:a9:d0:51:
07:e9:95:23:74:7c:c6:42:c2:34:f0:45:f1:fc:9c:8e:7e:a1:
cd:49:28:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd0FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA2MjAzNTIyWhcNMjYwOTEyMjAzNTIyWjAYMRYw
FAYDVQQDEw02YTc0ZjAwZC01MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3f5VGYLyjlIp3Vd4nTBOGQLrsSCtCRKY6s4Ly/DMbDDTX4vlPPeqR2jn
hRPB7LvnjHK5MzEFqN2NY36wBvTmXFRt0dCoZFqBRBkZkVLBOZrX0z5lN+aN6PTJ
v7ypgnEYFFrvLPzMfAtEalccNc+5IbpPi8mgIO03U6x0bU/6NvlR+b7XhwqRxAy6
WvwooqDwHvlIlhPcLobBcHPx5sReQIYinWWBm+nnWQRGxVRJeHHWoB3jU/rkDlBK
Nqw8ods9sg4twf9mSZif+8RgUTrGuPBB5+yfVHeAhtaEdc/ERizoLBghC5dN17je
mu8I4ijxAG/uut1D3KXUFTbM6iswjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAlc
Rxu9kmKKRwGz9kSS3S+MJ/nZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QTc3NEYyNDkxRDYxMUYxQkUzNzkyMUFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlUYMA0GCSqGSIb3DQEB
CwUAA4IBAQCDzAm6SlvEKdmAFf3MV/epZfJ7evkVX2aWg9gVdMhS8gO6B+QLXqjE
xS4ZfW3eLyqLhcPaSvZ7zm/eItLSjy5zqSSNaIK2DUCjvODrhTcBcBcfA4A3zR8P
AXKKUgfJXfpayD6r2N1jG2DFgldKgYGrCkcZyp7xxJmceySLu9BP5Mrpdx3/AvUC
V1SkoGi+vSGfAfwyD4fT4hyLuArkDVcTao3iMElPfOtQNl5H5n1UbtBLk3Ay6bMU
3jM42tCRStpB9n8VHdzbrNRo2OyW5dCCmi3roDfpxqRMDEM2zC9IS6M4oaoE2Zqp
0FEH6ZUjdHzGQsI08EXx/JyOfqHNSSiL
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:12 2026 by rpki-client