Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F209BC469A711F1AC0DC1D3CE1D38B0.roa
File: 8F209BC469A711F1AC0DC1D3CE1D38B0.roa (raw, json)
Hash identifier: AqYbj5R11BAZfFTDarZUg7K93ZvCKwpdyDpvujMiUx0=
Subject key identifier: 25:83:62:A2:11:0A:A0:FF:1B:BA:3D:4F:7E:69:04:46:74:64:23:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D373
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F209BC469A711F1AC0DC1D3CE1D38B0.roa
Signing time: Tue 16 Jun 2026 17:19:41 +0000
ROA not before: Tue 16 Jun 2026 17:19:37 +0000
ROA not after: Thu 14 Jun 2029 17:19:37 +0000
asID: 17561
IP address blocks: 154.82.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119667 (0x1d373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 17:19:37 2026 GMT
Not After : Jun 14 17:19:37 2029 GMT
Subject: CN=6a3185ad-800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:b0:c4:c4:d6:77:3d:dd:46:fb:c3:f2:74:
5f:2d:59:19:16:4a:87:d3:b7:50:6e:0d:c6:23:9f:
1b:1b:63:db:2c:0b:a4:99:f4:e1:89:28:84:40:d0:
13:26:01:7b:9c:48:a9:d0:0a:96:70:d3:50:d4:59:
ee:82:5c:89:d1:e4:18:d4:66:44:fc:42:70:7d:a7:
38:41:66:2c:5e:7b:5c:08:1c:54:2f:5b:52:f9:2d:
bf:bd:af:db:d2:9e:b4:06:bb:40:54:6c:5e:5e:02:
e8:2d:4f:1a:24:d1:e2:fc:a1:b0:fc:90:f4:18:b2:
80:05:bd:bc:4b:ea:79:ef:ef:b9:33:64:25:1c:67:
c7:3f:e4:bb:25:5d:8a:dd:52:e9:d5:62:d6:aa:53:
62:fa:09:9b:4b:17:52:b9:24:3b:24:98:5c:56:b3:
be:c5:67:8a:5a:2b:a8:be:a9:3e:6b:36:63:b0:ec:
23:1a:1c:93:4a:ea:8c:a1:e6:aa:b9:2c:d9:b2:0c:
8f:f0:42:0f:87:8c:ae:b2:27:38:0b:98:03:fc:bf:
7c:0e:cc:3c:39:0b:bb:d3:26:76:c6:39:82:58:3f:
a1:1d:0e:f8:71:d9:89:c9:2f:a7:3e:73:6d:c4:ba:
d9:dd:e6:8f:9f:44:66:97:13:e7:ad:d3:90:0b:19:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:62:A2:11:0A:A0:FF:1B:BA:3D:4F:7E:69:04:46:74:64:23:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F209BC469A711F1AC0DC1D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d2:ce:5b:6c:71:13:64:ef:51:7c:60:d0:27:ce:52:75:f3:
c4:9d:f7:c7:5c:54:a6:8c:38:88:d3:c9:94:c0:dd:5b:8e:db:
bc:c5:8d:d6:90:55:6e:98:5f:2e:62:93:2c:1a:29:ac:37:cc:
62:da:31:53:70:51:5e:92:57:e0:90:6b:aa:bd:2c:99:c0:55:
e5:dd:e5:c6:47:3b:35:a2:ca:81:a5:c1:ef:36:bd:22:5a:c7:
89:87:99:e6:9b:2c:db:8f:e2:f0:8d:ff:d2:aa:21:cb:64:a1:
76:11:07:d6:c0:b8:5d:02:83:93:0c:6d:be:ec:cf:87:ab:8d:
27:3a:6d:65:90:ac:9f:29:b7:00:b5:92:81:48:a2:dc:07:69:
b7:f0:c2:44:e8:dc:6d:a0:81:94:64:53:67:84:39:4d:c1:29:
eb:3d:67:f9:ad:e2:8b:bd:eb:c7:f2:de:c6:07:0a:59:95:6e:
c3:73:7f:aa:cd:f1:6d:a7:d6:16:65:56:e6:26:aa:09:07:39:
ac:01:61:f1:d0:98:15:09:6d:a6:5c:0a:3f:27:ab:64:56:25:
ec:89:07:d7:d3:e6:be:ee:41:44:b8:56:95:07:00:c4:20:47:
01:38:e3:a9:fa:54:6e:65:0a:bd:c6:ac:91:ba:f2:42:56:74:
fe:a8:33:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdNzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE2MTcxOTM3WhcNMjkwNjE0MTcxOTM3WjAYMRYw
FAYDVQQDEw02YTMxODVhZC04MDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsCqwxMTWdz3dRvvD8nRfLVkZFkqH07dQbg3GI58bG2PbLAukmfThiSiE
QNATJgF7nEip0AqWcNNQ1FnuglyJ0eQY1GZE/EJwfac4QWYsXntcCBxUL1tS+S2/
va/b0p60BrtAVGxeXgLoLU8aJNHi/KGw/JD0GLKABb28S+p57++5M2QlHGfHP+S7
JV2K3VLp1WLWqlNi+gmbSxdSuSQ7JJhcVrO+xWeKWiuovqk+azZjsOwjGhyTSuqM
oeaquSzZsgyP8EIPh4yusic4C5gD/L98Dsw8OQu70yZ2xjmCWD+hHQ74cdmJyS+n
PnNtxLrZ3eaPn0RmlxPnrdOQCxko9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCWD
YqIRCqD/G7o9T35pBEZ0ZCMBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RjIwOUJDNDY5QTcxMUYxQUMwREMxRDNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlIQMA0GCSqGSIb3DQEB
CwUAA4IBAQB70s5bbHETZO9RfGDQJ85SdfPEnffHXFSmjDiI08mUwN1bjtu8xY3W
kFVumF8uYpMsGimsN8xi2jFTcFFeklfgkGuqvSyZwFXl3eXGRzs1osqBpcHvNr0i
WseJh5nmmyzbj+Lwjf/SqiHLZKF2EQfWwLhdAoOTDG2+7M+Hq40nOm1lkKyfKbcA
tZKBSKLcB2m38MJE6NxtoIGUZFNnhDlNwSnrPWf5reKLvevH8t7GBwpZlW7Dc3+q
zfFtp9YWZVbmJqoJBzmsAWHx0JgVCW2mXAo/J6tkViXsiQfX0+a+7kFEuFaVBwDE
IEcBOOOp+lRuZQq9xqyRuvJCVnT+qDMe
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:35 2026 by rpki-client