Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B0A728C0611F197F0E5D4CE1D38B0.roa
File: 714B0A728C0611F197F0E5D4CE1D38B0.roa (raw, json)
Hash identifier: 2a5hAghS0IZLSzAccynIDUFz8CxQO2Dv68lcYMJAwoU=
Subject key identifier: 93:7B:40:A0:2B:94:E8:27:CA:28:79:EF:A2:BF:2A:9D:B6:B1:7F:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B0A728C0611F197F0E5D4CE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:04:33 +0000
ROA not before: Thu 30 Jul 2026 11:04:28 +0000
ROA not after: Sun 04 Oct 2026 11:04:28 +0000
asID: 131267
IP address blocks: 154.222.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121834 (0x1dbea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 11:04:28 2026 GMT
Not After : Oct 4 11:04:28 2026 GMT
Subject: CN=6a6b2fc1-9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:28:c6:de:ec:2d:2e:74:99:8b:f8:74:bb:
6c:ed:92:dd:26:c1:6d:39:bf:ce:b1:68:2a:10:4b:
cf:65:10:0f:62:da:b9:94:5a:6c:44:53:32:ea:3f:
53:80:ed:04:47:df:a4:b6:3b:56:f7:62:93:8a:f7:
6d:b1:7e:67:fa:ef:2f:19:e2:2c:38:84:7d:f1:68:
df:a0:de:a7:a6:e1:f2:a9:49:47:e8:f0:9b:6a:30:
a7:65:68:26:a5:63:48:89:49:6a:7f:87:62:84:23:
66:85:a1:2e:37:78:58:21:f5:d3:65:f0:18:ea:56:
eb:8d:30:78:fe:cd:02:ed:50:c3:56:95:ed:6f:78:
2e:4f:e4:58:12:5e:c2:24:57:06:62:e2:7f:15:dd:
ee:64:95:0b:e3:0c:57:97:79:3e:45:6c:9e:85:cb:
8a:ba:1b:05:f5:65:f0:9d:a8:f6:10:65:a5:20:98:
ba:75:9c:c9:d4:3f:59:a2:8f:d6:08:d1:0b:e1:b7:
0a:24:88:62:28:9f:23:b9:ec:2a:35:d7:3e:45:07:
3a:4d:03:73:f6:56:f9:f4:25:04:1f:5c:02:f7:ad:
1d:7b:42:8e:af:c5:ca:bc:6b:3e:41:a5:b2:95:c0:
b8:bf:55:0e:c1:d0:08:4f:02:99:50:b3:03:c2:bd:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7B:40:A0:2B:94:E8:27:CA:28:79:EF:A2:BF:2A:9D:B6:B1:7F:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B0A728C0611F197F0E5D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:20:a1:78:3e:8c:87:0c:96:30:31:c6:78:db:b3:58:51:73:
af:c3:c7:24:ac:1a:34:e7:b5:1a:d2:9c:e2:31:82:f9:c1:dc:
8d:1d:99:de:2e:98:36:1f:7f:95:64:6e:10:4f:cf:81:86:22:
c7:68:8b:a5:df:18:ff:58:42:21:83:99:83:53:f6:4b:ce:b9:
1a:5b:e8:78:40:e8:7f:49:b4:7c:2a:10:61:99:5e:a3:ee:ac:
80:46:43:9a:98:4f:e7:77:12:8d:ab:7c:c1:c5:38:1a:ec:8e:
79:81:59:a4:14:a1:e2:32:16:62:0d:33:ce:3f:e9:40:a2:15:
d7:fa:4c:b5:44:20:36:e9:56:a2:ed:ee:11:33:3c:63:01:51:
29:ba:19:14:fa:39:6a:60:f1:86:7f:b5:ea:e9:45:e5:7f:66:
78:e7:e4:64:f3:b2:8f:0f:1a:56:03:0a:3c:ed:43:4e:dd:4f:
3d:30:25:1b:e6:18:f7:a1:c0:b9:37:e4:58:d6:4a:c1:a8:c4:
1e:f7:4a:c0:28:b5:82:79:60:ba:2a:fa:2d:01:fb:aa:ef:b5:
f4:fc:ca:f5:43:df:91:7d:60:e0:c4:e2:12:71:1f:7c:a3:01:
f3:8b:34:45:8d:11:15:46:4b:d6:78:41:28:58:cb:47:ee:34:
ca:aa:ba:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdvqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzMwMTEwNDI4WhcNMjYxMDA0MTEwNDI4WjAYMRYw
FAYDVQQDEw02YTZiMmZjMS05MTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqSIoxt7sLS50mYv4dLts7ZLdJsFtOb/OsWgqEEvPZRAPYtq5lFpsRFMy
6j9TgO0ER9+ktjtW92KTivdtsX5n+u8vGeIsOIR98WjfoN6npuHyqUlH6PCbajCn
ZWgmpWNIiUlqf4dihCNmhaEuN3hYIfXTZfAY6lbrjTB4/s0C7VDDVpXtb3guT+RY
El7CJFcGYuJ/Fd3uZJUL4wxXl3k+RWyehcuKuhsF9WXwnaj2EGWlIJi6dZzJ1D9Z
oo/WCNEL4bcKJIhiKJ8juewqNdc+RQc6TQNz9lb59CUEH1wC960de0KOr8XKvGs+
QaWylcC4v1UOwdAITwKZULMDwr2cPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJN7
QKArlOgnyih576K/Kp22sX9xMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MTRCMEE3MjhDMDYxMUYxOTdGMEU1RDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4FMA0GCSqGSIb3DQEB
CwUAA4IBAQBfIKF4PoyHDJYwMcZ427NYUXOvw8ckrBo057Ua0pziMYL5wdyNHZne
Lpg2H3+VZG4QT8+BhiLHaIul3xj/WEIhg5mDU/ZLzrkaW+h4QOh/SbR8KhBhmV6j
7qyARkOamE/ndxKNq3zBxTga7I55gVmkFKHiMhZiDTPOP+lAohXX+ky1RCA26Vai
7e4RMzxjAVEpuhkU+jlqYPGGf7Xq6UXlf2Z45+Rk87KPDxpWAwo87UNO3U89MCUb
5hj3ocC5N+RY1krBqMQe90rAKLWCeWC6KvotAfuq77X0/Mr1Q9+RfWDgxOIScR98
owHzizRFjREVRkvWeEEoWMtH7jTKqrpx
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:28 2026 by rpki-client