Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E3D39E475E711F19EFC811CCF1D38B0.roa
File: 5E3D39E475E711F19EFC811CCF1D38B0.roa (raw, json)
Hash identifier: wmF0/sKKuDDLr9PJVsvHAQpBu6CJ0zXuG4P8e7TFsLs=
Subject key identifier: 7A:8E:6F:5D:98:1C:B7:54:58:C4:8C:71:72:86:D2:A5:79:92:D7:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D66A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E3D39E475E711F19EFC811CCF1D38B0.roa
Signing time: Thu 02 Jul 2026 07:26:41 +0000
ROA not before: Thu 02 Jul 2026 07:26:36 +0000
ROA not after: Mon 10 Aug 2026 07:26:36 +0000
asID: 14315
IP address blocks: 154.203.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120426 (0x1d66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 07:26:36 2026 GMT
Not After : Aug 10 07:26:36 2026 GMT
Subject: CN=6a4612b1-9d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:2d:5f:c2:7b:53:af:8f:0e:33:d5:ee:a4:
8f:5f:1d:da:a4:31:e8:33:22:4d:36:53:d2:56:cb:
01:9f:73:93:65:d8:39:38:3d:94:aa:42:75:32:bb:
42:1b:ae:eb:a9:e9:8e:8a:38:2c:8d:a8:4a:b7:3e:
11:d4:b7:23:eb:64:9b:5e:93:3b:10:62:d5:50:a7:
7a:6e:79:a2:47:e6:06:cb:24:21:19:62:49:0d:fb:
fb:64:07:d7:f0:06:19:c6:ba:3d:f9:d8:2a:ee:75:
ae:fb:f8:2f:da:64:5d:18:df:bd:c5:ab:b3:85:04:
f7:c5:0a:b0:ff:89:0f:a5:b5:9d:8b:21:ae:17:e8:
35:27:51:c1:13:9e:50:91:2c:00:a1:c9:3f:2c:ad:
8a:51:e8:ee:c3:2a:db:31:59:83:cf:76:12:8e:78:
37:de:59:e2:8b:d0:15:59:ba:de:2e:c4:1e:8e:86:
fc:51:f4:87:6f:86:53:87:64:07:87:5c:f3:02:0a:
fe:77:42:8f:fb:0e:48:48:6e:6e:ab:c0:50:63:01:
07:7d:4b:97:54:45:1f:1c:67:67:5a:43:30:c5:d0:
92:39:05:31:98:c9:c9:c8:87:79:70:a8:a5:cf:25:
9c:50:63:07:d5:67:de:b6:67:71:01:af:dd:33:53:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:6F:5D:98:1C:B7:54:58:C4:8C:71:72:86:D2:A5:79:92:D7:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E3D39E475E711F19EFC811CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:70:b1:76:1b:18:ee:3c:ff:20:84:f9:f6:8c:ce:56:87:a4:
d9:d7:74:ee:4f:a6:1c:82:18:0c:be:12:2d:8c:64:e7:18:58:
be:14:ee:fc:ea:4c:1a:b1:32:33:33:da:31:97:ce:c3:bb:50:
12:1c:cc:d8:ad:65:29:eb:b4:c4:af:bd:14:3a:90:5f:36:69:
06:70:0a:68:fa:2a:b2:d3:b5:6b:04:1b:e6:5f:86:fe:d1:66:
03:2c:42:3a:a4:b7:dc:90:50:77:75:f2:3e:50:66:fb:5a:0e:
bc:f7:1c:b1:aa:a9:a3:e8:b4:59:f9:1c:88:f2:e6:b0:02:0c:
20:9a:66:7a:af:75:47:a4:9e:02:5c:3a:40:c1:b7:3d:63:b1:
97:c8:76:9b:1b:d5:86:73:0a:13:a9:0b:bb:ee:87:0a:47:db:
5b:40:b7:15:f5:3f:96:05:58:24:62:fc:92:5e:b7:3c:f9:f8:
14:38:cf:98:e6:80:cb:71:01:38:ca:03:0d:1c:94:b6:d9:14:
57:28:12:45:3e:5d:30:08:dd:ac:76:3e:06:9e:ad:b2:d3:09:
fd:fe:18:87:ca:48:30:a9:c2:97:9b:e8:33:50:ac:5a:33:d5:
89:d5:ba:ee:a6:39:71:3c:24:ff:54:2d:e7:14:ba:14:1d:d7:
4f:81:68:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdZqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAyMDcyNjM2WhcNMjYwODEwMDcyNjM2WjAYMRYw
FAYDVQQDEw02YTQ2MTJiMS05ZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA138tX8J7U6+PDjPV7qSPXx3apDHoMyJNNlPSVssBn3OTZdg5OD2UqkJ1
MrtCG67rqemOijgsjahKtz4R1Lcj62SbXpM7EGLVUKd6bnmiR+YGyyQhGWJJDfv7
ZAfX8AYZxro9+dgq7nWu+/gv2mRdGN+9xauzhQT3xQqw/4kPpbWdiyGuF+g1J1HB
E55QkSwAock/LK2KUejuwyrbMVmDz3YSjng33lnii9AVWbreLsQejob8UfSHb4ZT
h2QHh1zzAgr+d0KP+w5ISG5uq8BQYwEHfUuXVEUfHGdnWkMwxdCSOQUxmMnJyId5
cKilzyWcUGMH1WfetmdxAa/dM1Nh0wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHqO
b12YHLdUWMSMcXKG0qV5ktdvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTNEMzlFNDc1RTcxMUYxOUVGQzgxMUNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmssEMA0GCSqGSIb3DQEB
CwUAA4IBAQB7cLF2GxjuPP8ghPn2jM5Wh6TZ13TuT6YcghgMvhItjGTnGFi+FO78
6kwasTIzM9oxl87Du1ASHMzYrWUp67TEr70UOpBfNmkGcApo+iqy07VrBBvmX4b+
0WYDLEI6pLfckFB3dfI+UGb7Wg689xyxqqmj6LRZ+RyI8uawAgwgmmZ6r3VHpJ4C
XDpAwbc9Y7GXyHabG9WGcwoTqQu77ocKR9tbQLcV9T+WBVgkYvySXrc8+fgUOM+Y
5oDLcQE4ygMNHJS22RRXKBJFPl0wCN2sdj4Gnq2y0wn9/hiHykgwqcKXm+gzUKxa
M9WJ1brupjlxPCT/VC3nFLoUHddPgWjQ
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:23:11 2026 by rpki-client