Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF78E84924211F1A2904CBCCE1D38B0.roa
File: 8CF78E84924211F1A2904CBCCE1D38B0.roa (raw, json)
Hash identifier: aJJwCIUhGoRsnEE4P4IT4Ww+gMnQWIYX0dyV7Zr5jac=
Subject key identifier: F2:73:DF:53:01:4B:72:D2:58:55:0B:DB:64:4B:83:38:7C:06:F5:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF78E84924211F1A2904CBCCE1D38B0.roa
Signing time: Fri 07 Aug 2026 09:29:56 +0000
ROA not before: Fri 07 Aug 2026 09:29:52 +0000
ROA not after: Thu 22 Apr 2027 09:29:52 +0000
asID: 149014
IP address blocks: 154.205.6.0/23 maxlen: 24
154.205.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122219 (0x1dd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:29:52 2026 GMT
Not After : Apr 22 09:29:52 2027 GMT
Subject: CN=6a75a594-fefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:47:a1:da:f5:fd:7b:15:b4:c0:bd:83:29:d9:
bb:6d:4a:74:2b:03:6d:61:ca:e0:a1:e4:1d:72:62:
c9:69:bc:f1:42:0b:19:03:ef:8c:63:d5:11:5d:df:
5d:d6:a7:07:cc:01:f3:a3:0e:38:f2:01:e6:d3:fe:
52:3c:89:e9:28:ac:9b:99:e5:8c:62:f8:3f:7a:16:
f3:fa:d1:65:a9:37:58:b8:79:73:fa:23:70:3f:d7:
ce:45:1c:a7:59:da:52:9d:8c:3a:a9:3a:a1:a3:fd:
8e:e9:1a:7b:de:09:51:1e:e4:66:c1:55:8f:32:a1:
39:86:90:15:af:ba:dd:d0:17:bf:14:19:d7:04:df:
44:ec:2d:eb:65:cb:5a:aa:49:27:f5:e3:df:b2:85:
e6:92:13:bc:64:9e:16:01:f6:b0:8c:de:58:ae:54:
3c:41:28:e7:c6:bf:a2:cd:56:32:51:ae:bc:f7:26:
c0:c3:14:8c:89:0d:86:76:89:f2:4d:73:af:6b:34:
43:57:28:11:c4:a5:c6:52:e9:c7:32:04:ba:fb:41:
af:34:1b:9b:09:8a:23:52:e1:44:27:e3:eb:5c:f2:
23:1f:02:7b:6b:ee:80:52:07:03:58:a6:9b:95:1c:
3a:31:f7:d6:e9:99:e1:03:cc:5b:d1:70:d0:13:94:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:DF:53:01:4B:72:D2:58:55:0B:DB:64:4B:83:38:7C:06:F5:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF78E84924211F1A2904CBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.6.0-154.205.11.255
Signature Algorithm: sha256WithRSAEncryption
49:61:5e:30:4e:4d:e2:0c:ad:d2:2e:c3:51:1b:3a:89:50:27:
cc:37:48:3f:7a:3b:15:32:7a:ec:4d:88:9f:8c:92:8b:63:56:
37:9a:4c:6f:71:e0:fe:38:5a:9d:91:1b:a5:72:df:90:bb:b2:
f3:a5:f0:8f:15:bf:b5:09:42:c7:6a:a2:99:6d:9a:f8:63:11:
d4:69:2e:a6:89:7a:ab:bb:86:a4:42:ef:6a:a1:1c:41:31:65:
2d:34:86:9d:bf:0c:f6:e0:7f:e5:2e:65:28:95:78:fa:f0:c2:
a0:f9:b4:44:9f:e0:ab:5a:bd:68:9d:a3:0b:ef:da:fb:bb:6d:
48:db:ba:e9:48:0b:45:eb:eb:2d:1f:d5:cd:d3:90:e9:0f:6d:
ec:32:e2:0b:55:9c:1c:34:21:d9:08:bb:f3:fb:7d:88:4a:cb:
e8:68:72:84:b0:fc:07:0b:70:21:b6:8a:3a:40:d4:e8:25:9f:
5d:c7:0d:94:be:db:e6:2d:26:36:db:56:81:94:e3:05:c2:63:
e7:f4:e9:4f:c3:8c:5d:25:cc:82:fd:c2:a3:1a:8f:d7:99:f7:
3f:40:10:4f:85:53:87:86:93:3e:a6:86:25:de:01:16:c5:42:
95:82:86:3a:39:17:77:1c:10:18:08:b9:ff:3d:70:3c:7f:72:
b7:12:66:18
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAd1rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA3MDkyOTUyWhcNMjcwNDIyMDkyOTUyWjAYMRYw
FAYDVQQDEw02YTc1YTU5NC1mZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9Ueh2vX9exW0wL2DKdm7bUp0KwNtYcrgoeQdcmLJabzxQgsZA++MY9UR
Xd9d1qcHzAHzow448gHm0/5SPInpKKybmeWMYvg/ehbz+tFlqTdYuHlz+iNwP9fO
RRynWdpSnYw6qTqho/2O6Rp73glRHuRmwVWPMqE5hpAVr7rd0Be/FBnXBN9E7C3r
Zctaqkkn9ePfsoXmkhO8ZJ4WAfawjN5YrlQ8QSjnxr+izVYyUa689ybAwxSMiQ2G
donyTXOvazRDVygRxKXGUunHMgS6+0GvNBubCYojUuFEJ+PrXPIjHwJ7a+6AUgcD
WKablRw6MffW6ZnhA8xb0XDQE5TCJwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPJz
31MBS3LSWFUL22RLgzh8BvX6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84Q0Y3OEU4NDkyNDIxMUYxQTI5MDRDQkNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGazQYDBAKazQgwDQYJ
KoZIhvcNAQELBQADggEBAElhXjBOTeIMrdIuw1EbOolQJ8w3SD96OxUyeuxNiJ+M
kotjVjeaTG9x4P44Wp2RG6Vy35C7svOl8I8Vv7UJQsdqopltmvhjEdRpLqaJequ7
hqRC72qhHEExZS00hp2/DPbgf+UuZSiVePrwwqD5tESf4KtavWidowvv2vu7bUjb
uulIC0Xr6y0f1c3TkOkPbewy4gtVnBw0IdkIu/P7fYhKy+hocoSw/AcLcCG2ijpA
1Ogln13HDZS+2+YtJjbbVoGU4wXCY+f06U/DjF0lzIL9wqMaj9eZ9z9AEE+FU4eG
kz6mhiXeARbFQpWChjo5F3ccEBgIuf89cDx/crcSZhg=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:55 2026 by rpki-client