Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F730F507D9F11F1AD2237BBCE1D38B0.roa
File: 9F730F507D9F11F1AD2237BBCE1D38B0.roa (raw, json)
Hash identifier: CvrcA/nAIs90hTauTuQi9i15RIIakiBF3A4k/KfB6DE=
Subject key identifier: 85:79:E5:90:10:2B:FA:EA:F7:32:B2:C5:16:5C:CE:54:C5:42:FB:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D87B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F730F507D9F11F1AD2237BBCE1D38B0.roa
Signing time: Sun 12 Jul 2026 03:13:16 +0000
ROA not before: Sun 12 Jul 2026 03:13:11 +0000
ROA not after: Thu 20 Aug 2026 03:13:11 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120955 (0x1d87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 03:13:11 2026 GMT
Not After : Aug 20 03:13:11 2026 GMT
Subject: CN=6a53064c-fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:97:41:d5:3d:f2:1a:1f:75:b8:f0:cd:50:
6c:9c:ca:c5:50:ae:4b:1b:6f:86:df:22:63:81:ae:
b8:e4:48:52:db:53:37:8a:22:b4:b1:be:1e:1d:75:
ee:42:ee:fb:cd:2a:af:14:19:cf:c1:a3:e9:34:fd:
7d:b3:2a:64:e1:1a:a9:31:9c:e0:b2:58:1c:f9:20:
fb:3d:6e:69:b8:39:fe:35:a0:a7:b7:39:2a:c9:48:
a7:7d:5d:be:aa:d6:06:8a:34:e5:26:66:fc:07:88:
48:1a:d3:54:a6:22:e2:ec:cc:0e:28:6c:2e:68:4a:
d6:be:48:24:69:20:8d:1e:8d:bd:28:23:30:5b:91:
bc:94:b4:2e:89:5c:c9:a4:59:c8:42:9c:c7:19:9d:
bb:35:7e:40:b8:f7:b2:8f:fb:6b:ae:9c:24:32:b5:
90:73:42:b7:f5:b0:e7:6a:75:cf:39:dd:34:15:9c:
28:a8:46:47:95:a2:fb:dd:a0:c3:9e:09:35:72:0c:
ff:9f:ce:88:1f:8c:74:57:2e:90:c2:b7:95:06:3b:
93:29:e1:83:47:7d:bd:49:27:89:ab:5b:e0:02:ea:
94:f2:78:61:80:e4:2a:5d:73:91:fc:e2:ea:14:58:
5b:d4:8e:dc:21:85:19:1c:a1:5f:27:f6:3a:7f:17:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:E5:90:10:2B:FA:EA:F7:32:B2:C5:16:5C:CE:54:C5:42:FB:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F730F507D9F11F1AD2237BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
a2:87:e2:70:6a:66:66:5e:3e:8f:55:96:8e:c1:22:00:30:7d:
b9:d6:ec:f2:9b:3c:32:c1:08:d7:0b:1a:1f:64:bd:fd:53:73:
d9:95:a2:af:c1:af:08:52:87:73:0a:e4:0e:d2:5d:be:e3:a2:
20:aa:0b:c1:3f:e7:14:46:bf:31:e7:88:10:1e:7d:19:e6:e8:
62:ec:0f:ca:7c:d4:aa:bd:fc:0b:c7:5a:7b:0a:b4:42:18:92:
b3:f9:bf:f8:ef:ae:2b:b6:5c:c6:2b:49:6c:38:b1:51:67:46:
cf:18:32:5b:29:b0:3d:cd:08:54:75:b9:d5:6e:18:49:81:13:
0e:78:bc:0d:21:1d:89:68:49:54:f6:c5:57:00:03:45:7c:fc:
56:a8:5a:61:a9:f7:de:e2:0f:4a:d1:76:b1:c5:0f:19:30:2d:
8b:34:52:f1:ba:ba:9c:82:8f:c8:c2:2c:33:9d:00:b0:2c:29:
4a:fe:d6:ba:50:db:a6:fb:f4:b1:c5:29:ce:94:1e:de:26:33:
45:1f:08:b3:37:26:45:48:f1:b7:63:6a:9d:05:2a:da:e4:6b:
c9:e1:96:04:7d:2d:ee:3a:bf:7c:c6:f4:1d:83:38:93:66:a7:
92:04:26:11:8d:f3:1d:60:3f:3e:2d:1f:19:5d:c0:d8:1a:78:
61:67:fd:44
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdh7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEyMDMxMzExWhcNMjYwODIwMDMxMzExWjAYMRYw
FAYDVQQDEw02YTUzMDY0Yy1mZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA03yXQdU98hofdbjwzVBsnMrFUK5LG2+G3yJjga645EhS21M3iiK0sb4e
HXXuQu77zSqvFBnPwaPpNP19sypk4RqpMZzgslgc+SD7PW5puDn+NaCntzkqyUin
fV2+qtYGijTlJmb8B4hIGtNUpiLi7MwOKGwuaErWvkgkaSCNHo29KCMwW5G8lLQu
iVzJpFnIQpzHGZ27NX5AuPeyj/trrpwkMrWQc0K39bDnanXPOd00FZwoqEZHlaL7
3aDDngk1cgz/n86IH4x0Vy6QwreVBjuTKeGDR329SSeJq1vgAuqU8nhhgOQqXXOR
/OLqFFhb1I7cIYUZHKFfJ/Y6fxeWewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIV5
5ZAQK/rq9zKyxRZczlTFQvsWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RjczMEY1MDdEOUYxMUYxQUQyMjM3QkJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACazf0DBACazf4wDQYJ
KoZIhvcNAQELBQADggEBAKKH4nBqZmZePo9Vlo7BIgAwfbnW7PKbPDLBCNcLGh9k
vf1Tc9mVoq/BrwhSh3MK5A7SXb7joiCqC8E/5xRGvzHniBAefRnm6GLsD8p81Kq9
/AvHWnsKtEIYkrP5v/jvriu2XMYrSWw4sVFnRs8YMlspsD3NCFR1udVuGEmBEw54
vA0hHYloSVT2xVcAA0V8/FaoWmGp997iD0rRdrHFDxkwLYs0UvG6upyCj8jCLDOd
ALAsKUr+1rpQ26b79LHFKc6UHt4mM0UfCLM3JkVI8bdjap0FKtrka8nhlgR9Le46
v3zG9B2DOJNmp5IEJhGN8x1gPz4tHxldwNgaeGFn/UQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:08 2026 by rpki-client