Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A31AB8AA72B511F190D353B3CE1D38B0.roa
File: A31AB8AA72B511F190D353B3CE1D38B0.roa (raw, json)
Hash identifier: X5cvrtCRAvztytzPt+PYNymVVH20Rn7hPaSGnAmG85U=
Subject key identifier: B3:DE:6A:FE:18:56:44:1A:14:BC:2D:04:96:DB:08:85:2F:BC:64:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A31AB8AA72B511F190D353B3CE1D38B0.roa
Signing time: Sun 28 Jun 2026 05:53:08 +0000
ROA not before: Sun 28 Jun 2026 05:53:03 +0000
ROA not after: Thu 30 Jul 2026 05:53:03 +0000
asID: 9304
IP address blocks: 154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120227 (0x1d5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 05:53:03 2026 GMT
Not After : Jul 30 05:53:03 2026 GMT
Subject: CN=6a40b6c4-eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:10:6e:14:f9:1a:00:0f:77:63:7a:03:f2:
56:2d:ee:85:94:e2:f9:b6:8a:ba:a0:24:ca:6a:fb:
5e:2d:3d:66:6e:6b:1f:7a:1a:e9:78:ac:9e:0d:65:
ee:db:38:1c:84:35:c2:8e:86:bb:2a:c3:64:74:e7:
46:23:6e:df:cd:e4:24:c2:ec:4a:34:c6:1f:fd:44:
a8:e3:b5:cc:5c:6b:43:97:9a:b7:e1:cb:e6:8a:c9:
ad:f8:79:4e:9e:8d:9d:3e:51:f9:8f:b6:c4:82:ad:
3e:64:61:ed:14:db:51:44:b1:d4:65:51:44:3f:20:
40:12:af:a0:04:97:4f:10:94:f0:1a:73:b7:92:72:
af:24:a0:22:b4:1e:72:c5:b7:23:d0:9b:34:88:7d:
bb:2e:cc:89:e4:96:1f:39:da:f9:62:8a:b0:b4:79:
43:d6:9f:4b:36:34:68:dd:aa:2d:15:80:d6:a0:c7:
f7:3e:13:6a:13:9b:76:56:3b:0e:8e:d8:0e:45:45:
7b:b1:df:4b:80:c5:fb:c8:61:de:c5:b2:2c:80:b1:
2d:52:9b:22:93:77:cc:e2:a8:50:1f:bf:6e:da:d8:
bd:6a:ff:ce:13:ab:3e:52:ef:fc:8d:24:11:24:c2:
17:58:46:c2:6b:2e:01:5b:a7:13:d0:00:29:92:87:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:6A:FE:18:56:44:1A:14:BC:2D:04:96:DB:08:85:2F:BC:64:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A31AB8AA72B511F190D353B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
10:f8:f3:86:76:29:00:6d:66:a0:24:5b:aa:22:c9:6a:0b:aa:
67:34:11:01:74:a3:aa:50:1e:07:05:56:b0:0e:ca:38:2a:87:
f4:3b:cb:e1:54:c0:64:d4:2f:1b:63:2b:88:9d:74:3f:de:6f:
78:47:63:e7:64:1d:9d:09:be:2d:cf:b2:c2:27:04:57:ff:6e:
c4:b9:0e:0c:93:7e:7d:d7:c9:48:43:3d:45:55:a6:bb:65:0c:
14:16:35:b9:0a:e7:ff:63:ce:e7:35:f5:ea:83:55:38:50:5a:
72:ad:fe:43:40:fe:e0:69:31:93:4e:23:78:86:4d:e1:83:25:
14:95:57:15:f9:a3:52:97:4d:f1:c1:b3:56:40:9d:57:59:4c:
69:96:dd:6d:9e:02:94:c2:bc:1f:26:b1:6e:e0:a6:f6:ef:b1:
90:42:4e:73:98:7f:b4:72:e5:a7:43:12:b2:91:22:5d:ed:17:
60:b9:f7:ea:10:43:15:3c:a5:0e:a9:7f:66:5b:f1:35:74:38:
f2:b6:ad:52:8b:d4:5a:16:86:74:fe:d3:ad:b2:e7:b7:63:27:
7f:e8:68:45:22:49:b6:72:8d:df:12:67:15:7a:ab:a0:21:c1:
ba:43:5a:37:19:da:af:8d:3b:5e:e1:ee:d5:9a:39:93:b0:99:
75:31:10:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdWjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI4MDU1MzAzWhcNMjYwNzMwMDU1MzAzWjAYMRYw
FAYDVQQDEw02YTQwYjZjNC1lYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmZcQbhT5GgAPd2N6A/JWLe6FlOL5toq6oCTKavteLT1mbmsfehrpeKye
DWXu2zgchDXCjoa7KsNkdOdGI27fzeQkwuxKNMYf/USo47XMXGtDl5q34cvmismt
+HlOno2dPlH5j7bEgq0+ZGHtFNtRRLHUZVFEPyBAEq+gBJdPEJTwGnO3knKvJKAi
tB5yxbcj0Js0iH27LsyJ5JYfOdr5YoqwtHlD1p9LNjRo3aotFYDWoMf3PhNqE5t2
VjsOjtgORUV7sd9LgMX7yGHexbIsgLEtUpsik3fM4qhQH79u2ti9av/OE6s+Uu/8
jSQRJMIXWEbCay4BW6cT0AApkodITQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLPe
av4YVkQaFLwtBJbbCIUvvGRwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMzFBQjhBQTcyQjUxMUYxOTBEMzUzQjNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlzYMA0GCSqGSIb3DQEB
CwUAA4IBAQAQ+POGdikAbWagJFuqIslqC6pnNBEBdKOqUB4HBVawDso4Kof0O8vh
VMBk1C8bYyuInXQ/3m94R2PnZB2dCb4tz7LCJwRX/27EuQ4Mk35918lIQz1FVaa7
ZQwUFjW5Cuf/Y87nNfXqg1U4UFpyrf5DQP7gaTGTTiN4hk3hgyUUlVcV+aNSl03x
wbNWQJ1XWUxplt1tngKUwrwfJrFu4Kb277GQQk5zmH+0cuWnQxKykSJd7Rdguffq
EEMVPKUOqX9mW/E1dDjytq1Si9RaFoZ0/tOtsue3Yyd/6GhFIkm2co3fEmcVequg
IcG6Q1o3GdqvjTte4e7VmjmTsJl1MRA2
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client