Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A7794F690A811F1A1744507CF1D38B0.roa
File: 8A7794F690A811F1A1744507CF1D38B0.roa (raw, json)
Hash identifier: 6YSaMHrWGCsMyLvL5jFdwZ2AYB2j9FOG3ayidqotW8w=
Subject key identifier: 55:01:9D:E1:0D:09:8C:9C:00:9E:CC:73:7A:E7:0B:D9:61:A0:68:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A7794F690A811F1A1744507CF1D38B0.roa
Signing time: Wed 05 Aug 2026 08:34:58 +0000
ROA not before: Wed 05 Aug 2026 08:34:54 +0000
ROA not after: Fri 25 Sep 2026 08:34:54 +0000
asID: 272854
IP address blocks: 154.194.13.0/24 maxlen: 24
154.194.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122051 (0x1dcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 08:34:54 2026 GMT
Not After : Sep 25 08:34:54 2026 GMT
Subject: CN=6a72f5b2-633c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:93:d7:78:c5:25:86:c2:b6:bf:34:ef:0b:
4b:3d:a5:08:68:78:c7:9a:ca:e9:82:30:55:36:72:
c3:ae:40:a3:22:7b:f8:13:19:a2:18:9e:ea:3b:58:
c9:82:8b:60:e5:61:1a:71:d4:0a:ca:d4:50:c8:53:
c6:ec:28:8a:f2:00:ae:fa:51:fc:d0:aa:57:48:a3:
85:d7:14:93:5d:5a:37:04:13:c8:ff:a0:7d:dc:d8:
57:73:e6:5f:6b:2b:8f:56:ff:9a:3c:bc:be:0a:f7:
5e:7d:16:5e:80:b0:eb:84:e5:58:6c:54:07:10:71:
29:54:1a:d6:92:ff:8e:5d:f3:8b:e9:dc:c2:ce:20:
cc:b7:4c:57:70:95:33:a3:08:7a:ca:88:32:37:ec:
6c:2a:50:e6:f8:d5:7e:16:62:5c:31:ac:fb:05:4a:
db:45:48:d5:52:eb:17:ec:f7:15:33:f1:e4:21:63:
2c:71:56:f2:b8:bd:06:65:a4:a6:72:0b:40:6f:7b:
ef:88:0c:12:25:14:8a:cf:8f:05:f7:01:9e:60:8d:
37:30:44:4c:5f:1b:82:47:0e:5d:d3:f0:0e:fa:3e:
75:e7:54:1a:e1:9b:cb:ed:94:b7:51:3d:23:75:3d:
26:57:a6:90:df:64:8f:f3:50:af:e6:e5:c1:87:e9:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:9D:E1:0D:09:8C:9C:00:9E:CC:73:7A:E7:0B:D9:61:A0:68:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A7794F690A811F1A1744507CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.13.0-154.194.14.255
Signature Algorithm: sha256WithRSAEncryption
b9:82:34:a8:6c:9a:5d:d7:67:ff:89:84:b1:43:68:ec:91:40:
14:ab:21:59:24:9a:87:fd:01:00:63:8c:2e:ff:66:73:3a:22:
ab:56:b0:38:91:94:a8:06:87:32:44:34:b1:62:8c:87:58:c3:
d8:b4:22:6b:f9:40:58:43:b1:1c:43:3e:d8:57:49:0b:df:d4:
f7:7d:01:51:a6:73:5e:f0:d0:35:48:dd:04:d7:ba:22:07:bf:
49:19:f6:c7:d1:6b:bd:15:94:ef:57:a9:18:50:a6:97:6b:31:
a9:9f:3c:a6:05:d8:3e:3c:a9:40:eb:ec:a2:25:c7:fa:05:28:
77:13:12:8b:5a:1b:7f:56:31:0c:2b:45:bd:3e:69:05:f0:e5:
5a:6a:52:a8:1d:13:5b:64:44:d7:ec:a0:ee:dc:99:fd:9e:dc:
ab:30:5b:c0:57:10:fd:0f:d8:c5:46:22:e5:6f:6e:21:54:8a:
c7:79:dd:1f:9c:a4:a5:18:a1:cd:37:4d:ab:34:58:c8:6a:04:
06:52:dd:d6:7d:02:1f:01:ea:be:d1:69:a9:3e:8a:1a:e6:fd:
dd:1b:22:8f:dc:e4:5f:9f:eb:48:f5:b5:93:08:75:6b:d0:49:
4d:e1:d9:80:85:d3:7c:61:5e:a6:c8:23:7a:92:c8:2e:6e:82:
44:bf:49:c3
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdzDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA1MDgzNDU0WhcNMjYwOTI1MDgzNDU0WjAYMRYw
FAYDVQQDEw02YTcyZjViMi02MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA69KT13jFJYbCtr807wtLPaUIaHjHmsrpgjBVNnLDrkCjInv4ExmiGJ7q
O1jJgotg5WEacdQKytRQyFPG7CiK8gCu+lH80KpXSKOF1xSTXVo3BBPI/6B93NhX
c+ZfayuPVv+aPLy+CvdefRZegLDrhOVYbFQHEHEpVBrWkv+OXfOL6dzCziDMt0xX
cJUzowh6yogyN+xsKlDm+NV+FmJcMaz7BUrbRUjVUusX7PcVM/HkIWMscVbyuL0G
ZaSmcgtAb3vviAwSJRSKz48F9wGeYI03MERMXxuCRw5d0/AO+j5151Qa4ZvL7ZS3
UT0jdT0mV6aQ32SP81Cv5uXBh+l+UwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFUB
neENCYycAJ7Mc3rnC9lhoGgpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QTc3OTRGNjkwQTgxMUYxQTE3NDQ1MDdDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACawg0DBACawg4wDQYJ
KoZIhvcNAQELBQADggEBALmCNKhsml3XZ/+JhLFDaOyRQBSrIVkkmof9AQBjjC7/
ZnM6IqtWsDiRlKgGhzJENLFijIdYw9i0Imv5QFhDsRxDPthXSQvf1Pd9AVGmc17w
0DVI3QTXuiIHv0kZ9sfRa70VlO9XqRhQppdrMamfPKYF2D48qUDr7KIlx/oFKHcT
EotaG39WMQwrRb0+aQXw5VpqUqgdE1tkRNfsoO7cmf2e3KswW8BXEP0P2MVGIuVv
biFUisd53R+cpKUYoc03Tas0WMhqBAZS3dZ9Ah8B6r7Raak+ihrm/d0bIo/c5F+f
60j1tZMIdWvQSU3h2YCF03xhXqbII3qSyC5ugkS/ScM=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:17 2026 by rpki-client