Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E1AF1A8924411F1AB05CFC4CE1D38B0.roa
File: 5E1AF1A8924411F1AB05CFC4CE1D38B0.roa (raw, json)
Hash identifier: tIf+F4UlDEvFT86xVuejKO1wZ5cnHaXLw8TLnGE+5eg=
Subject key identifier: 3C:69:1A:ED:4A:61:9E:7B:06:35:6A:11:0B:00:68:D4:B7:26:CE:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E1AF1A8924411F1AB05CFC4CE1D38B0.roa
Signing time: Fri 07 Aug 2026 09:42:56 +0000
ROA not before: Fri 07 Aug 2026 09:42:52 +0000
ROA not after: Sun 06 Sep 2026 09:42:52 +0000
asID: 395886
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122229 (0x1dd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:42:52 2026 GMT
Not After : Sep 6 09:42:52 2026 GMT
Subject: CN=6a75a8a0-1f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:5d:d7:dc:61:ac:82:44:4f:16:84:4a:ee:
1c:1a:8d:6c:4f:10:73:46:a8:7c:1e:f7:36:8d:4a:
e2:eb:22:1e:35:41:53:3b:29:d0:7b:44:ce:13:b6:
98:57:85:de:ea:a7:6f:cc:62:2b:63:c5:b2:c6:f8:
46:99:82:6b:61:8c:f7:fe:87:c3:93:76:62:2e:ac:
92:41:02:83:2b:81:0e:b4:30:57:c1:a5:fd:da:c5:
cc:72:75:34:d5:99:d7:01:fb:53:f8:f7:56:1f:70:
e1:c7:4d:f9:bd:67:b9:75:f0:b3:6f:33:4e:94:bd:
5d:f7:87:a3:78:ba:3e:c6:a4:54:73:08:c0:02:99:
1f:77:43:ac:bd:ce:a2:f9:d4:19:a8:73:e8:af:fc:
88:47:e8:23:50:61:96:67:74:9d:fe:50:4e:4e:9b:
08:8b:21:d1:98:56:50:36:11:a4:c6:42:4b:bd:17:
98:a3:1f:1a:65:f5:d9:0c:70:19:38:98:6a:04:92:
a8:4f:47:99:ca:a3:8d:04:6e:ed:9a:70:09:14:c1:
5a:2b:84:7a:bf:9e:7e:c9:89:44:e6:d3:be:ae:c7:
c6:99:5b:80:8b:2b:92:61:28:a9:e2:b8:0c:29:f0:
4e:c5:60:b8:dc:04:f0:b1:97:0b:60:73:32:c0:68:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:1A:ED:4A:61:9E:7B:06:35:6A:11:0B:00:68:D4:B7:26:CE:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E1AF1A8924411F1AB05CFC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
81:1b:c1:7d:d6:f4:16:d2:29:a1:9c:a2:a1:38:12:b7:75:72:
5f:30:fd:50:80:8b:e5:3d:0a:08:cc:de:6e:2d:3c:df:78:bb:
43:04:0b:d4:ed:9b:2c:09:74:73:ca:13:07:24:c3:a4:d7:84:
1f:20:d8:5b:1d:f9:0c:2b:1c:83:b7:74:8f:ea:00:2e:61:04:
34:16:69:18:46:c3:e1:86:4e:10:9e:fd:87:c1:1c:df:73:ae:
ff:29:71:e3:56:52:dd:16:10:6e:3a:c2:07:db:14:ac:7a:a0:
89:a8:c8:f7:b7:35:86:ad:8b:59:28:78:cb:81:25:4f:60:43:
b6:bf:e8:00:b5:c0:ea:c5:8e:68:2d:c8:ed:ca:85:e4:3d:7c:
62:25:e4:69:3b:9d:81:4e:1d:7c:3f:8f:87:2e:0c:f5:fe:61:
59:ee:1e:d3:5d:a5:ee:51:9c:ba:07:aa:6d:60:b0:c5:7f:c9:
e2:ec:d5:ea:b9:90:1f:21:ff:20:dd:04:e4:45:52:95:0a:60:
30:84:d4:15:03:ad:da:16:41:46:2e:62:a1:d0:02:cb:8f:d5:
c3:88:42:79:f8:62:00:be:89:86:5b:e7:06:00:e5:92:43:18:
95:43:e3:7a:c7:56:d2:c8:6d:98:e6:ae:df:3a:e5:51:74:84:
dd:38:d6:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd11MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA3MDk0MjUyWhcNMjYwOTA2MDk0MjUyWjAYMRYw
FAYDVQQDEw02YTc1YThhMC0xZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAncBd19xhrIJETxaESu4cGo1sTxBzRqh8Hvc2jUri6yIeNUFTOynQe0TO
E7aYV4Xe6qdvzGIrY8WyxvhGmYJrYYz3/ofDk3ZiLqySQQKDK4EOtDBXwaX92sXM
cnU01ZnXAftT+PdWH3Dhx035vWe5dfCzbzNOlL1d94ejeLo+xqRUcwjAApkfd0Os
vc6i+dQZqHPor/yIR+gjUGGWZ3Sd/lBOTpsIiyHRmFZQNhGkxkJLvReYox8aZfXZ
DHAZOJhqBJKoT0eZyqONBG7tmnAJFMFaK4R6v55+yYlE5tO+rsfGmVuAiyuSYSip
4rgMKfBOxWC43ATwsZcLYHMywGj5hQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDxp
Gu1KYZ57BjVqEQsAaNS3Js58MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTFBRjFBODkyNDQxMUYxQUIwNUNGQzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQCBG8F91vQW0imhnKKhOBK3dXJfMP1QgIvlPQoIzN5uLTzfeLtDBAvU
7ZssCXRzyhMHJMOk14QfINhbHfkMKxyDt3SP6gAuYQQ0FmkYRsPhhk4Qnv2HwRzf
c67/KXHjVlLdFhBuOsIH2xSseqCJqMj3tzWGrYtZKHjLgSVPYEO2v+gAtcDqxY5o
LcjtyoXkPXxiJeRpO52BTh18P4+HLgz1/mFZ7h7TXaXuUZy6B6ptYLDFf8ni7NXq
uZAfIf8g3QTkRVKVCmAwhNQVA63aFkFGLmKh0ALLj9XDiEJ5+GIAvomGW+cGAOWS
QxiVQ+N6x1bSyG2Y5q7fOuVRdITdONaq
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:32 2026 by rpki-client