Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D417B267C5111F1B703B2D1CE1D38B0.roa
File: 9D417B267C5111F1B703B2D1CE1D38B0.roa (raw, json)
Hash identifier: PBeNSTBSZdfFACeaXu7eNr/whBAqM8eOIOt2qYNTSPY=
Subject key identifier: E0:E4:5F:68:24:98:50:27:F4:31:36:51:07:0E:BF:06:6F:D3:8E:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D417B267C5111F1B703B2D1CE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:22:20 +0000
ROA not before: Fri 10 Jul 2026 11:22:15 +0000
ROA not after: Tue 18 Aug 2026 11:22:15 +0000
asID: 61112
IP address blocks: 154.204.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120829 (0x1d7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:22:15 2026 GMT
Not After : Aug 18 11:22:15 2026 GMT
Subject: CN=6a50d5ec-f66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:12:4c:8e:63:a9:11:3e:ba:37:75:f0:4e:
a5:88:d6:d5:4b:79:79:3f:c2:67:49:27:4f:8c:74:
56:f6:ff:cc:9f:59:35:96:2d:e5:a4:57:76:84:56:
6c:04:d1:57:f7:79:5c:ce:cb:e4:4d:a0:88:d6:0c:
14:77:06:80:1f:bd:60:c6:61:94:34:4e:0d:92:8a:
6c:0a:3d:10:1e:9d:02:22:64:4b:c6:c6:b3:23:26:
3f:a6:ff:59:19:8a:a4:78:be:0b:85:59:d1:8b:11:
53:37:8d:b4:3f:ea:91:ff:cb:e5:4f:06:97:6f:4f:
e4:bd:ef:10:42:3f:4c:02:c5:19:f6:42:f8:1d:50:
75:dc:b4:d5:36:db:fd:c1:f4:75:31:41:09:2f:91:
51:76:13:72:cb:37:bd:12:5c:1e:dd:cd:41:0f:4f:
3c:8f:da:87:7f:06:87:07:4c:c9:9b:2d:26:a4:01:
df:b6:90:4a:67:c1:66:e7:a1:8f:03:b4:9e:ef:62:
f0:e9:05:c0:85:f1:0c:94:8f:a9:40:cd:3b:54:1d:
3e:53:f4:71:6d:9b:98:d7:92:a1:07:9a:e5:a1:18:
6a:36:b7:fb:e0:fb:2e:a6:b5:bc:8d:3b:5c:12:99:
f2:1e:29:b1:22:11:be:a6:3a:6d:35:6e:be:69:2a:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:5F:68:24:98:50:27:F4:31:36:51:07:0E:BF:06:6F:D3:8E:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D417B267C5111F1B703B2D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fd:db:d8:ee:7f:32:63:5c:ab:13:d2:78:9c:82:c2:d6:13:
76:a0:0c:ac:fa:92:df:09:46:2c:90:8a:08:e5:c8:34:c0:d8:
d5:f4:cf:23:fe:2f:3d:5d:a0:87:14:d4:ee:8f:e6:5d:1e:40:
51:f0:a7:44:4f:2c:fd:49:b5:4b:dc:e1:0a:4e:5b:22:b9:27:
30:7a:5a:c8:c3:a2:0f:62:4c:2d:21:fd:c1:f4:65:89:cf:80:
07:b2:52:7c:4d:09:bd:3a:b9:25:61:51:ad:88:f3:b3:be:84:
cb:c1:42:2e:6c:0e:74:21:91:55:fe:f0:58:36:50:1a:c7:dd:
d2:50:fa:d4:ed:53:36:64:9f:4c:dd:f3:eb:0f:82:3c:eb:42:
49:83:7d:3d:90:63:40:f4:39:c9:6a:e6:53:0e:8d:97:43:bb:
cd:3d:14:9d:12:1b:ef:31:a2:dc:49:87:0a:4f:dd:e9:59:95:
80:3d:21:79:71:2c:af:f2:c3:cd:e3:4e:cd:f4:af:e6:98:6a:
b3:c5:3e:2f:64:9b:6e:54:99:a9:99:db:9d:3c:07:92:68:38:
7b:5b:95:43:54:1e:99:82:75:f9:7a:8a:88:e0:b1:6e:f7:b4:
39:ba:06:e8:c4:25:82:0c:1e:0a:5e:e1:01:c8:76:e7:14:c9:
40:1f:ae:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdf9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEwMTEyMjE1WhcNMjYwODE4MTEyMjE1WjAYMRYw
FAYDVQQDEw02YTUwZDVlYy1mNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtCgSTI5jqRE+ujd18E6liNbVS3l5P8JnSSdPjHRW9v/Mn1k1li3lpFd2
hFZsBNFX93lczsvkTaCI1gwUdwaAH71gxmGUNE4NkopsCj0QHp0CImRLxsazIyY/
pv9ZGYqkeL4LhVnRixFTN420P+qR/8vlTwaXb0/kve8QQj9MAsUZ9kL4HVB13LTV
Ntv9wfR1MUEJL5FRdhNyyze9Elwe3c1BD088j9qHfwaHB0zJmy0mpAHftpBKZ8Fm
56GPA7Se72Lw6QXAhfEMlI+pQM07VB0+U/RxbZuY15KhB5rloRhqNrf74PsuprW8
jTtcEpnyHimxIhG+pjptNW6+aSrcXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFODk
X2gkmFAn9DE2UQcOvwZv0466MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RDQxN0IyNjdDNTExMUYxQjcwM0IyRDFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsy3MA0GCSqGSIb3DQEB
CwUAA4IBAQA4/dvY7n8yY1yrE9J4nILC1hN2oAys+pLfCUYskIoI5cg0wNjV9M8j
/i89XaCHFNTuj+ZdHkBR8KdETyz9SbVL3OEKTlsiuScwelrIw6IPYkwtIf3B9GWJ
z4AHslJ8TQm9OrklYVGtiPOzvoTLwUIubA50IZFV/vBYNlAax93SUPrU7VM2ZJ9M
3fPrD4I860JJg309kGNA9DnJauZTDo2XQ7vNPRSdEhvvMaLcSYcKT93pWZWAPSF5
cSyv8sPN407N9K/mmGqzxT4vZJtuVJmpmdudPAeSaDh7W5VDVB6ZgnX5eoqI4LFu
97Q5ugboxCWCDB4KXuEByHbnFMlAH64Q
-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:35 2026 by rpki-client