Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AEFB0BE785A11F197D824FFCE1D38B0.roa
File: 8AEFB0BE785A11F197D824FFCE1D38B0.roa (raw, json)
Hash identifier: zoLQVhdQYcFOCNfHlUR4e5rURiKY8gDegNWA2IdGreM=
Subject key identifier: 2A:43:E7:DE:66:FF:F4:99:35:61:06:E7:66:24:EF:C0:82:9E:6A:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D718
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AEFB0BE785A11F197D824FFCE1D38B0.roa
Signing time: Sun 05 Jul 2026 10:16:10 +0000
ROA not before: Sun 05 Jul 2026 10:16:05 +0000
ROA not after: Sun 16 Aug 2026 10:16:05 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120600 (0x1d718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 10:16:05 2026 GMT
Not After : Aug 16 10:16:05 2026 GMT
Subject: CN=6a4a2eea-e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:6e:ef:30:c1:85:cd:d6:da:f7:6d:b7:f9:
2b:76:2d:b0:f1:cd:b2:a7:d2:0b:17:2d:ef:1e:bb:
5b:6a:57:b3:13:c0:f7:c6:e9:80:9a:52:ad:26:38:
58:fa:c3:cf:77:e6:14:07:dd:70:7b:6a:c4:b4:19:
65:93:a7:0f:9a:55:93:56:f1:c1:79:4a:97:5b:43:
0b:84:a7:57:bd:cb:66:18:82:80:f3:64:1b:ce:78:
12:65:24:c2:8c:4e:48:35:41:3d:82:0f:4d:eb:b7:
2d:92:83:81:53:dd:7f:ab:02:44:b0:62:2c:34:80:
ef:68:fd:da:f8:6f:49:30:16:17:c9:70:e1:41:5d:
41:60:59:6a:b7:f7:cd:17:ef:5d:99:5b:13:6d:34:
ac:5c:64:ad:2d:61:94:1e:54:bf:61:e1:34:65:74:
d5:92:6f:71:a2:e3:ac:bb:12:94:a2:f8:fa:45:6a:
ad:fd:42:27:73:12:df:f4:bb:b4:3f:94:9c:09:02:
3f:c7:39:7a:ec:44:7b:e5:57:71:c5:5c:67:f4:6e:
f5:31:a5:ef:01:f1:5a:30:2a:07:37:28:c9:c3:0f:
9b:e1:3b:1f:31:b5:fa:7b:17:ca:93:a6:d7:cb:2d:
65:c2:00:ca:29:60:16:aa:0e:89:d4:7a:eb:94:ce:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:E7:DE:66:FF:F4:99:35:61:06:E7:66:24:EF:C0:82:9E:6A:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AEFB0BE785A11F197D824FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:ac:05:50:f0:15:16:ab:c5:47:61:39:2d:a3:79:de:4f:8c:
56:05:a3:99:3f:83:43:a8:eb:67:bc:82:a2:f9:c9:18:f7:47:
94:a5:6f:2b:6e:fe:5f:6f:29:00:07:f7:c3:ad:21:ca:95:74:
ee:de:38:51:e7:3a:49:67:54:b7:33:e3:ff:92:52:61:f3:46:
69:fe:40:8d:8d:2c:23:2e:9b:92:c8:6a:f4:b7:92:df:3b:e0:
0f:17:04:f5:37:c3:8f:ba:65:3a:91:0c:36:df:ab:a4:4b:3a:
d5:a4:b0:35:8f:07:d3:13:c6:72:2b:96:97:6b:14:58:64:dd:
a7:03:02:f4:0f:8b:41:4b:53:9f:86:d7:2a:2b:65:0e:6e:67:
a7:93:6a:4b:7e:30:a8:a4:cc:bd:18:1f:6b:c5:04:42:f5:8f:
39:ae:b5:90:99:85:c0:11:0f:1e:ab:6f:ef:fa:92:f4:50:ee:
31:33:e7:cb:69:18:dc:e4:71:1c:8e:ea:4e:da:e7:49:d4:a0:
2d:b5:23:38:bd:84:9e:b4:b6:37:d7:cc:43:70:d2:1a:e3:af:
26:5f:cd:bd:a3:03:42:f7:2f:5a:4b:15:2f:db:20:f2:5c:76:
fa:1d:75:29:07:77:cb:2d:fb:a4:49:dc:9b:25:ea:48:05:a8:
48:98:e0:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdcYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzA1MTAxNjA1WhcNMjYwODE2MTAxNjA1WjAYMRYw
FAYDVQQDEw02YTRhMmVlYS1lMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtM5u7zDBhc3W2vdtt/krdi2w8c2yp9ILFy3vHrtbalezE8D3xumAmlKt
JjhY+sPPd+YUB91we2rEtBllk6cPmlWTVvHBeUqXW0MLhKdXvctmGIKA82QbzngS
ZSTCjE5INUE9gg9N67ctkoOBU91/qwJEsGIsNIDvaP3a+G9JMBYXyXDhQV1BYFlq
t/fNF+9dmVsTbTSsXGStLWGUHlS/YeE0ZXTVkm9xouOsuxKUovj6RWqt/UIncxLf
9Lu0P5ScCQI/xzl67ER75VdxxVxn9G71MaXvAfFaMCoHNyjJww+b4TsfMbX6exfK
k6bXyy1lwgDKKWAWqg6J1HrrlM5I2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCpD
595m//SZNWEG52Yk78CCnmqLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QUVGQjBCRTc4NUExMUYxOTdEODI0RkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQDVrAVQ8BUWq8VHYTkto3neT4xWBaOZP4NDqOtnvIKi+ckY90eUpW8r
bv5fbykAB/fDrSHKlXTu3jhR5zpJZ1S3M+P/klJh80Zp/kCNjSwjLpuSyGr0t5Lf
O+APFwT1N8OPumU6kQw236ukSzrVpLA1jwfTE8ZyK5aXaxRYZN2nAwL0D4tBS1Of
htcqK2UObmenk2pLfjCopMy9GB9rxQRC9Y85rrWQmYXAEQ8eq2/v+pL0UO4xM+fL
aRjc5HEcjupO2udJ1KAttSM4vYSetLY318xDcNIa468mX829owNC9y9aSxUv2yDy
XHb6HXUpB3fLLfukSdybJepIBahImOAR
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:20 2026 by rpki-client