Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D60179E785811F1BBFDE9F2CE1D38B0.roa
File: 5D60179E785811F1BBFDE9F2CE1D38B0.roa (raw, json)
Hash identifier: jxL6IgTDUlPzojDbkf9ifwXoBsH31Dr7752JWLovDXk=
Subject key identifier: 4E:2A:5E:89:CE:50:C0:CB:D5:E4:47:D9:28:8E:72:87:3F:B0:F6:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D712
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D60179E785811F1BBFDE9F2CE1D38B0.roa
Signing time: Sun 05 Jul 2026 10:00:35 +0000
ROA not before: Sun 05 Jul 2026 10:00:29 +0000
ROA not after: Sun 16 Aug 2026 10:00:29 +0000
asID: 401696
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120594 (0x1d712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 10:00:29 2026 GMT
Not After : Aug 16 10:00:29 2026 GMT
Subject: CN=6a4a2b43-0131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:3b:23:20:11:b8:a5:24:00:f5:22:12:f8:
78:f1:b5:6e:71:13:b8:e2:d1:43:6e:b4:f3:a3:77:
ea:7a:98:24:30:a9:0a:0f:c0:3b:4d:08:bd:96:65:
8f:ff:42:11:ec:22:df:0c:9e:de:07:2c:f3:cd:4e:
8d:7c:0c:1f:f4:22:04:c7:26:ff:6e:4b:e5:90:91:
4e:6a:7f:26:ac:1d:c9:bb:a0:62:f6:4b:e8:64:20:
82:78:3e:7b:71:8d:2c:95:91:50:67:0d:91:74:a3:
d4:77:1f:42:e4:b6:e1:73:39:16:51:c1:10:59:e7:
bc:eb:c4:de:b1:a4:86:35:88:bf:60:ea:cc:e6:22:
45:63:26:3d:14:a8:10:30:95:ed:ab:be:f2:f8:5d:
30:ab:0a:36:3a:37:fb:68:e0:22:b8:bc:b8:23:15:
e8:c4:f9:3b:ac:14:5c:bf:5a:d5:89:25:b0:26:54:
a8:80:eb:2f:08:f5:ef:93:f4:53:be:1c:02:52:9e:
81:ee:ae:a6:54:c9:a8:8c:6f:46:5e:fa:dd:f9:d3:
8b:04:c5:f9:ac:d8:04:44:02:ff:bd:86:8d:39:8e:
e0:d1:f1:3b:4e:f7:f7:bf:17:64:26:44:cf:b2:5f:
b2:16:9a:a4:ab:45:55:77:60:be:8c:7c:97:04:80:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:5E:89:CE:50:C0:CB:D5:E4:47:D9:28:8E:72:87:3F:B0:F6:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D60179E785811F1BBFDE9F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
cc:59:4f:0f:3f:e8:94:3a:68:04:19:6c:a7:02:8c:6a:ea:2f:
a6:f4:8f:0b:fc:55:e5:7c:c9:6b:31:ed:7b:4c:51:f0:49:2d:
76:8d:1c:ac:20:29:ee:73:dd:d0:1a:34:26:81:05:5c:85:da:
67:5d:42:11:16:80:94:c6:75:c0:78:bd:32:c7:40:b1:4a:f1:
2e:b0:17:f6:d4:e3:e0:37:6a:27:51:35:23:89:6f:57:28:45:
42:26:3a:22:9f:3d:a9:05:dd:32:0d:d6:1f:03:f4:99:56:91:
00:5b:46:90:c4:86:85:72:8d:01:8b:5f:13:e2:55:bd:60:e5:
7b:1f:b5:8f:44:49:8e:92:de:00:92:30:b8:0d:61:e8:d5:3d:
8c:d0:77:f2:8b:78:dd:52:9d:13:0d:a1:ce:a5:fe:2e:7f:dc:
6b:7b:5d:5f:1c:3c:cc:33:15:d3:ec:c7:c1:5a:d8:3a:ac:c0:
5f:40:22:89:3d:6b:30:b0:9e:bc:c7:db:b2:a2:53:88:65:f3:
ee:96:80:cb:5c:d4:71:e4:f0:30:40:07:44:d8:a2:03:c6:d0:
02:61:26:33:04:0e:fc:d1:b1:20:ea:ff:7a:ac:99:0f:98:94:
e4:cd:01:c3:d6:0a:4f:8f:bc:79:72:a1:50:dd:fb:a9:fc:a3:
1c:26:1a:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdcSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzA1MTAwMDI5WhcNMjYwODE2MTAwMDI5WjAYMRYw
FAYDVQQDEw02YTRhMmI0My0wMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAkMI7IyARuKUkAPUiEvh48bVucRO44tFDbrTzo3fqepgkMKkKD8A7TQi9
lmWP/0IR7CLfDJ7eByzzzU6NfAwf9CIExyb/bkvlkJFOan8mrB3Ju6Bi9kvoZCCC
eD57cY0slZFQZw2RdKPUdx9C5LbhczkWUcEQWee868TesaSGNYi/YOrM5iJFYyY9
FKgQMJXtq77y+F0wqwo2Ojf7aOAiuLy4IxXoxPk7rBRcv1rViSWwJlSogOsvCPXv
k/RTvhwCUp6B7q6mVMmojG9GXvrd+dOLBMX5rNgERAL/vYaNOY7g0fE7Tvf3vxdk
JkTPsl+yFpqkq0VVd2C+jHyXBIDQPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE4q
XonOUMDL1eRH2SiOcoc/sPZ1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RDYwMTc5RTc4NTgxMUYxQkJGREU5RjJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQDMWU8PP+iUOmgEGWynAoxq6i+m9I8L/FXlfMlrMe17TFHwSS12jRys
ICnuc93QGjQmgQVchdpnXUIRFoCUxnXAeL0yx0CxSvEusBf21OPgN2onUTUjiW9X
KEVCJjoinz2pBd0yDdYfA/SZVpEAW0aQxIaFco0Bi18T4lW9YOV7H7WPREmOkt4A
kjC4DWHo1T2M0Hfyi3jdUp0TDaHOpf4uf9xre11fHDzMMxXT7MfBWtg6rMBfQCKJ
PWswsJ68x9uyolOIZfPuloDLXNRx5PAwQAdE2KIDxtACYSYzBA780bEg6v96rJkP
mJTkzQHD1gpPj7x5cqFQ3fup/KMcJho2
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:12 2026 by rpki-client