Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615B2D76955D11F1A368AF08CF1D38B0.roa
File: 615B2D76955D11F1A368AF08CF1D38B0.roa (raw, json)
Hash identifier: 2H3c01yhRMY/WZng5VfABjZ6YkNcFK9XFUl0yXNBIxs=
Subject key identifier: 04:E3:D6:9E:6A:76:52:3F:57:EE:B1:91:DD:80:13:3C:6B:A9:DD:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DE1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615B2D76955D11F1A368AF08CF1D38B0.roa
Signing time: Tue 11 Aug 2026 08:19:33 +0000
ROA not before: Tue 11 Aug 2026 08:19:29 +0000
ROA not after: Thu 20 Aug 2026 08:19:29 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122395 (0x1de1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 08:19:29 2026 GMT
Not After : Aug 20 08:19:29 2026 GMT
Subject: CN=6a7adb14-f875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:1f:b8:a5:f1:be:93:dd:5c:3c:11:cb:d1:
67:f4:09:e2:f4:ef:60:5b:92:96:ca:7c:99:0c:09:
52:df:09:4b:20:8b:52:7c:af:d0:a9:71:a2:e3:e6:
c1:7e:36:52:28:f2:f2:f9:cc:f6:5e:98:9a:11:26:
0c:e5:a7:7f:3d:27:32:f7:6c:e7:2b:bb:22:16:85:
ef:d2:24:3d:73:96:06:c2:da:e6:c7:19:8f:a3:4e:
7e:5f:bb:47:91:8f:33:5e:25:9d:9b:96:79:10:0e:
52:34:85:2c:85:51:83:97:7f:27:a9:eb:57:90:5e:
b1:d3:19:b8:38:38:63:3e:3d:a5:a6:c7:ca:0a:ac:
0a:99:d8:1a:fe:cc:aa:20:b6:e5:65:11:c8:59:d5:
fc:51:b0:af:e0:aa:c3:a8:d5:c0:49:80:3a:3c:81:
66:ad:a2:34:3e:8a:5b:c1:87:94:90:5b:0a:a2:18:
d8:c6:42:4a:ed:c0:a0:44:12:b3:c5:f8:50:0d:81:
56:bd:84:b7:15:6d:a3:bc:68:ac:c7:2e:f9:a9:ee:
48:97:b2:c3:29:0d:9b:81:d1:70:08:64:f4:3e:c8:
12:5f:a8:ac:f6:08:ff:a8:d8:b5:fe:7b:af:1b:85:
c0:e5:ab:c8:d5:86:df:ef:b3:10:f2:08:9e:f4:7c:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:D6:9E:6A:76:52:3F:57:EE:B1:91:DD:80:13:3C:6B:A9:DD:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615B2D76955D11F1A368AF08CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1c:9c:49:df:f5:01:f1:40:f6:ca:eb:e3:33:ad:f2:46:fa:
9b:5f:ea:66:7f:3b:c8:b4:35:64:f2:65:5e:85:18:62:63:d3:
2d:51:6a:ac:b4:57:d8:b6:89:c8:ea:d1:39:c0:aa:db:09:f7:
5b:e4:ff:ad:e5:7e:81:95:ce:80:80:ce:40:a6:5a:99:83:77:
49:ec:ed:f8:1d:f1:bd:c7:88:bf:ec:52:aa:58:cc:1f:3f:c8:
90:da:93:b9:eb:36:b4:56:66:e5:85:71:fe:39:ea:07:a7:86:
b0:24:18:07:ed:76:dd:95:de:9e:89:a5:b3:63:8c:99:59:0a:
d0:95:8d:ff:2d:fc:a2:ef:17:da:91:cf:ad:06:47:85:54:c0:
13:df:a2:dc:f0:05:c5:55:05:f1:1e:10:ce:4f:92:ba:0e:da:
f1:12:b0:fb:c2:ae:db:2a:53:34:bd:5d:07:85:4f:36:ca:71:
9c:4c:38:3a:88:ec:30:77:35:5c:15:b6:a4:ab:b0:e3:5f:52:
9f:e2:cc:04:6b:e0:d6:60:73:14:b7:96:bb:28:32:8c:e1:15:
e5:7f:d1:ff:c3:16:16:33:a0:49:e1:7b:3e:39:33:30:b2:e9:
bf:aa:e0:f9:bd:cd:bd:96:9a:c8:f7:18:d5:14:79:fe:f0:20:
ca:5c:ec:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd4bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODExMDgxOTI5WhcNMjYwODIwMDgxOTI5WjAYMRYw
FAYDVQQDEw02YTdhZGIxNC1mODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmFUfuKXxvpPdXDwRy9Fn9Ani9O9gW5KWynyZDAlS3wlLIItSfK/QqXGi
4+bBfjZSKPLy+cz2XpiaESYM5ad/PScy92znK7siFoXv0iQ9c5YGwtrmxxmPo05+
X7tHkY8zXiWdm5Z5EA5SNIUshVGDl38nqetXkF6x0xm4ODhjPj2lpsfKCqwKmdga
/syqILblZRHIWdX8UbCv4KrDqNXASYA6PIFmraI0PopbwYeUkFsKohjYxkJK7cCg
RBKzxfhQDYFWvYS3FW2jvGisxy75qe5Il7LDKQ2bgdFwCGT0PsgSX6is9gj/qNi1
/nuvG4XA5avI1Ybf77MQ8gie9HzxywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFATj
1p5qdlI/V+6xkd2AEzxrqd3FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTVCMkQ3Njk1NUQxMUYxQTM2OEFGMDhDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2HJxJ3/UB8UD2yuvjM63yRvqbX+pmfzvItDVk8mVehRhiY9MtUWqs
tFfYtonI6tE5wKrbCfdb5P+t5X6Blc6AgM5AplqZg3dJ7O34HfG9x4i/7FKqWMwf
P8iQ2pO56za0VmblhXH+OeoHp4awJBgH7Xbdld6eiaWzY4yZWQrQlY3/Lfyi7xfa
kc+tBkeFVMAT36Lc8AXFVQXxHhDOT5K6DtrxErD7wq7bKlM0vV0HhU82ynGcTDg6
iOwwdzVcFbakq7DjX1Kf4swEa+DWYHMUt5a7KDKM4RXlf9H/wxYWM6BJ4Xs+OTMw
sum/quD5vc29lprI9xjVFHn+8CDKXOwL
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:41 2026 by rpki-client