Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E2DB78C8B1611F186E3ADA2CE1D38B0.roa
File: 5E2DB78C8B1611F186E3ADA2CE1D38B0.roa (raw, json)
Hash identifier: PEVrt8DaxQB8BxvA2q4FM859cWYmnMJv7PFQcYjPEVY=
Subject key identifier: 30:C0:3F:D3:06:B8:7C:06:28:F1:FA:07:B5:29:9F:26:D8:C1:3A:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E2DB78C8B1611F186E3ADA2CE1D38B0.roa
Signing time: Wed 29 Jul 2026 06:26:01 +0000
ROA not before: Wed 29 Jul 2026 06:25:56 +0000
ROA not after: Sat 08 Aug 2026 06:25:56 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
154.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 06:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121757 (0x1db9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 06:25:56 2026 GMT
Not After : Aug 8 06:25:56 2026 GMT
Subject: CN=6a699cf9-b0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:94:d9:94:98:10:d2:bb:d1:43:46:2d:69:
c1:eb:63:3d:e4:f6:28:5c:d9:cc:81:35:69:91:d7:
1d:bf:6b:4e:10:52:ac:9c:4e:b1:e8:d5:4d:07:22:
5a:ec:82:e3:dc:f3:d7:ac:86:18:8f:f6:48:5d:5d:
0f:fe:d7:32:7b:4f:87:c2:3b:09:de:0e:2b:14:d1:
fd:89:8b:cf:6f:e6:06:54:dd:1e:70:24:70:bb:b4:
4f:52:d6:4f:bc:8c:96:d6:31:46:fb:ed:f0:63:39:
69:c1:cc:8c:73:3c:d1:17:aa:7a:9a:f3:c4:29:43:
79:27:dc:bd:86:18:7b:d7:15:c9:b0:5a:4b:25:50:
72:ae:17:d4:1c:06:5b:f1:ef:87:2e:73:bf:56:50:
1c:f6:b7:07:1e:fe:61:2a:48:a8:86:31:91:1a:75:
63:ba:cf:4f:85:69:00:e5:c4:f4:8b:bb:71:99:47:
ba:8d:93:9f:b7:9d:3d:fd:e0:3b:07:e1:0c:b6:ed:
49:c5:a4:f3:52:83:94:80:6b:bd:db:26:7c:1f:11:
27:7b:7e:50:8a:d6:1b:74:08:64:12:27:3e:42:10:
23:32:24:f8:a3:ed:de:42:90:c7:69:bf:1d:87:83:
65:46:bf:02:36:9d:48:32:66:b8:78:4c:41:d5:a9:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:3F:D3:06:B8:7C:06:28:F1:FA:07:B5:29:9F:26:D8:C1:3A:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E2DB78C8B1611F186E3ADA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:0f:56:91:0d:d4:eb:79:90:02:e8:a5:3b:ff:ae:8a:79:8f:
45:14:65:4c:55:9f:db:9e:68:5d:d6:77:68:55:0b:9b:d6:09:
2b:d6:d0:44:5b:bf:3b:5b:d1:b8:c6:0a:e9:76:b3:e9:e5:e5:
12:ea:13:8c:f9:23:f6:a0:f0:99:5a:e4:9b:9c:26:2d:6c:77:
6b:32:3a:4a:fd:0d:d2:56:15:a9:ab:1c:ce:1a:64:34:be:8e:
1a:d9:10:e8:ce:27:ef:0c:a2:bd:6d:40:c6:a7:a6:05:9f:9b:
02:ac:45:b8:7a:9e:f3:2e:3b:04:6d:35:e2:33:84:89:db:e2:
0f:05:6a:17:7c:43:61:8b:a1:e9:29:4c:ae:51:94:c3:22:4c:
e7:26:6d:b7:45:48:45:90:0f:8f:e8:72:a6:16:7e:87:49:0c:
19:17:cb:ef:c5:4b:1f:90:45:4d:98:b7:41:3b:e6:3a:3e:65:
2e:10:0d:c8:79:9e:ed:10:b2:54:be:6d:b2:74:74:8a:54:44:
cd:d2:1e:ae:42:fd:1c:4b:8a:5a:0e:82:cd:aa:b8:0f:dd:28:
25:7b:9f:71:d2:fb:96:18:0e:97:fc:8f:16:d4:95:77:fc:9c:
1c:56:45:1b:77:70:0f:7b:02:fb:82:81:13:92:85:70:0d:c0:
0c:f0:6b:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdudMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI5MDYyNTU2WhcNMjYwODA4MDYyNTU2WjAYMRYw
FAYDVQQDEw02YTY5OWNmOS1iMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvxKU2ZSYENK70UNGLWnB62M95PYoXNnMgTVpkdcdv2tOEFKsnE6x6NVN
ByJa7ILj3PPXrIYYj/ZIXV0P/tcye0+HwjsJ3g4rFNH9iYvPb+YGVN0ecCRwu7RP
UtZPvIyW1jFG++3wYzlpwcyMczzRF6p6mvPEKUN5J9y9hhh71xXJsFpLJVByrhfU
HAZb8e+HLnO/VlAc9rcHHv5hKkiohjGRGnVjus9PhWkA5cT0i7txmUe6jZOft509
/eA7B+EMtu1JxaTzUoOUgGu92yZ8HxEne35QitYbdAhkEic+QhAjMiT4o+3eQpDH
ab8dh4NlRr8CNp1IMma4eExB1akmIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDDA
P9MGuHwGKPH6B7UpnybYwTpSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTJEQjc4QzhCMTYxMUYxODZFM0FEQTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmliAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdD1aRDdTreZAC6KU7/66KeY9FFGVMVZ/bnmhd1ndoVQub1gkr1tBE
W787W9G4xgrpdrPp5eUS6hOM+SP2oPCZWuSbnCYtbHdrMjpK/Q3SVhWpqxzOGmQ0
vo4a2RDozifvDKK9bUDGp6YFn5sCrEW4ep7zLjsEbTXiM4SJ2+IPBWoXfENhi6Hp
KUyuUZTDIkznJm23RUhFkA+P6HKmFn6HSQwZF8vvxUsfkEVNmLdBO+Y6PmUuEA3I
eZ7tELJUvm2ydHSKVETN0h6uQv0cS4paDoLNqrgP3Sgle59x0vuWGA6X/I8W1JV3
/JwcVkUbd3APewL7goETkoVwDcAM8GsD
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:46 2026 by rpki-client