Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D0449091D511F1A5248516CF1D38B0.roa
File: A0D0449091D511F1A5248516CF1D38B0.roa (raw, json)
Hash identifier: NFYMp81oOBQR6V/BPTq12VlR1yEacZuHmyeh4HTyVW4=
Subject key identifier: E1:0B:35:AE:CD:FE:29:DC:D2:46:8D:C1:69:73:84:38:4D:99:00:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D0449091D511F1A5248516CF1D38B0.roa
Signing time: Thu 06 Aug 2026 20:30:14 +0000
ROA not before: Thu 06 Aug 2026 20:30:10 +0000
ROA not after: Fri 11 Sep 2026 20:30:10 +0000
asID: 401664
IP address blocks: 154.81.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122115 (0x1dd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 20:30:10 2026 GMT
Not After : Sep 11 20:30:10 2026 GMT
Subject: CN=6a74eed6-22c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:03:e0:9e:13:90:e0:a8:21:cb:19:65:9a:
67:5b:cb:02:87:85:3f:e3:fe:d4:4f:c9:34:e1:d4:
64:94:1e:7d:0d:0d:3a:0e:d7:c1:a0:45:2f:9e:8a:
3d:10:f1:18:c3:41:c2:40:81:67:ca:47:3d:5d:b1:
b8:ca:54:d5:5f:26:2f:8c:04:e5:c1:e2:a7:96:e1:
6b:52:ec:44:62:01:27:c1:27:c5:1f:8f:a6:da:f2:
bb:21:50:fb:95:9e:cd:eb:33:ac:a4:a4:e1:26:b1:
b5:97:e2:cc:c3:8a:8e:e5:d5:52:d4:dd:5b:5b:03:
f3:96:5d:3b:89:85:5f:77:09:b4:9b:e1:1f:5d:a7:
34:9a:cd:6a:94:8a:8b:4f:b4:29:75:9a:cf:ec:3f:
0e:55:98:17:0a:b5:62:56:f0:99:94:9a:a1:44:90:
91:f8:c6:fd:69:9a:fa:0d:57:f6:1d:68:ca:bb:60:
5b:b1:39:dd:4b:cf:40:43:6c:74:28:02:25:de:27:
a8:99:a4:ed:5d:37:41:9b:4a:5e:fd:fc:f9:f9:53:
c3:8a:6a:89:44:cb:9e:c5:7f:37:3c:19:29:b5:9c:
f5:62:fb:18:f7:e4:3d:33:b4:f8:79:2f:62:75:e0:
f9:55:14:f2:76:a8:26:63:ec:e3:48:56:55:bf:fe:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:35:AE:CD:FE:29:DC:D2:46:8D:C1:69:73:84:38:4D:99:00:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D0449091D511F1A5248516CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d3:29:51:2e:cf:ea:4e:e2:4c:7f:13:c0:99:b6:38:5d:67:
b5:26:6a:51:32:92:fc:25:00:56:62:eb:bf:64:a0:13:0f:05:
18:a5:00:6c:0f:5f:bb:ad:ed:9c:79:5b:0a:1f:bf:da:d9:ec:
1f:60:a7:18:5a:6b:fd:5c:f8:fc:60:5e:e9:80:d6:cb:11:ac:
08:96:70:77:53:d2:36:48:45:82:36:83:fc:10:28:36:ec:60:
71:fa:7f:56:43:17:47:c0:12:69:fd:84:42:96:95:f0:26:b6:
05:87:90:ba:6b:07:01:bc:22:55:dc:24:2f:f1:0d:7a:9e:73:
0d:a9:5b:a9:1d:30:df:2d:28:f6:e4:ed:1d:25:c7:60:fb:4b:
6f:cb:8a:6c:e7:32:48:ef:63:47:93:3c:1f:60:59:96:b6:34:
05:96:0e:da:e1:1b:1c:62:51:6d:83:d9:58:68:2b:05:3e:43:
01:11:f6:f8:17:1e:51:2e:01:e2:03:ba:e5:5c:78:87:10:5c:
5e:3f:77:cc:3e:68:d4:f9:a0:34:a6:16:92:d5:2e:d8:b6:6d:
39:91:37:63:6e:0f:4b:ba:30:f5:b8:63:04:e6:37:16:12:cf:
f3:9c:17:53:f1:7f:c3:a5:76:cc:25:1f:60:02:97:f6:aa:4a:
79:20:d6:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd0DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA2MjAzMDEwWhcNMjYwOTExMjAzMDEwWjAYMRYw
FAYDVQQDEw02YTc0ZWVkNi0yMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxN4D4J4TkOCoIcsZZZpnW8sCh4U/4/7UT8k04dRklB59DQ06DtfBoEUv
noo9EPEYw0HCQIFnykc9XbG4ylTVXyYvjATlweKnluFrUuxEYgEnwSfFH4+m2vK7
IVD7lZ7N6zOspKThJrG1l+LMw4qO5dVS1N1bWwPzll07iYVfdwm0m+EfXac0ms1q
lIqLT7QpdZrP7D8OVZgXCrViVvCZlJqhRJCR+Mb9aZr6DVf2HWjKu2BbsTndS89A
Q2x0KAIl3ieomaTtXTdBm0pe/fz5+VPDimqJRMuexX83PBkptZz1YvsY9+Q9M7T4
eS9ideD5VRTydqgmY+zjSFZVv/4eOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOEL
Na7N/inc0kaNwWlzhDhNmQCeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMEQwNDQ5MDkxRDUxMUYxQTUyNDg1MTZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEIMA0GCSqGSIb3DQEB
CwUAA4IBAQB20ylRLs/qTuJMfxPAmbY4XWe1JmpRMpL8JQBWYuu/ZKATDwUYpQBs
D1+7re2ceVsKH7/a2ewfYKcYWmv9XPj8YF7pgNbLEawIlnB3U9I2SEWCNoP8ECg2
7GBx+n9WQxdHwBJp/YRClpXwJrYFh5C6awcBvCJV3CQv8Q16nnMNqVupHTDfLSj2
5O0dJcdg+0tvy4ps5zJI72NHkzwfYFmWtjQFlg7a4RscYlFtg9lYaCsFPkMBEfb4
Fx5RLgHiA7rlXHiHEFxeP3fMPmjU+aA0phaS1S7Ytm05kTdjbg9LujD1uGME5jcW
Es/znBdT8X/DpXbMJR9gApf2qkp5INaD
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:21 2026 by rpki-client