Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A472225A7D4C11F1B0C5C9BFCE1D38B0.roa
File: A472225A7D4C11F1B0C5C9BFCE1D38B0.roa (raw, json)
Hash identifier: aB7K1y9qHHxRwNqKJhS1mFt9g77YLIGnYcSMCVscsNo=
Subject key identifier: BF:94:51:DF:EA:E0:A1:1C:5D:47:B9:0F:A8:9C:CF:E9:FD:32:7F:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D846
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A472225A7D4C11F1B0C5C9BFCE1D38B0.roa
Signing time: Sat 11 Jul 2026 17:19:16 +0000
ROA not before: Sat 11 Jul 2026 17:19:09 +0000
ROA not after: Mon 17 Aug 2026 17:19:09 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120902 (0x1d846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 17:19:09 2026 GMT
Not After : Aug 17 17:19:09 2026 GMT
Subject: CN=6a527b14-e046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:e6:d3:66:98:bb:4b:8f:95:35:a7:d9:0f:
f0:e1:0f:76:87:66:ab:e1:6c:e1:cd:fb:a0:f9:ff:
bc:51:e2:17:28:5f:47:52:c0:5e:11:46:e4:78:0e:
30:61:2e:ca:4c:8a:7e:72:64:ec:08:15:93:14:26:
6d:d8:fe:6b:ca:2e:48:23:1b:8e:65:36:0a:b8:28:
bb:1b:a6:52:c4:70:f4:3e:a2:c4:ed:56:2e:50:57:
f0:d3:0e:ee:c5:6f:6d:cc:49:84:8e:38:28:4a:44:
4b:ef:93:7e:29:17:9c:5d:e3:1e:a6:f2:4f:93:fd:
80:2d:15:9e:56:3f:3a:51:ce:b4:10:74:22:df:2c:
a4:5d:5f:ef:43:31:bb:43:f0:1b:34:95:0d:ea:35:
79:ec:c9:ec:93:5a:5f:ff:b4:02:fa:09:16:a1:4b:
95:0d:3a:41:62:4c:c2:7b:12:35:0f:89:53:44:ec:
47:89:fb:9f:23:fa:c5:f7:c0:9e:f1:11:f2:19:21:
d1:49:d6:65:df:07:ae:48:59:fe:2a:21:4d:6d:fd:
03:8d:23:51:de:de:7d:03:1a:c7:16:d9:92:15:7b:
1e:45:8e:ed:40:dd:a2:55:ce:73:7c:9b:5c:4b:96:
38:dd:9d:f9:19:cd:fe:c4:69:c0:05:09:0d:6a:33:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:94:51:DF:EA:E0:A1:1C:5D:47:B9:0F:A8:9C:CF:E9:FD:32:7F:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A472225A7D4C11F1B0C5C9BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a5:33:93:e6:f8:d1:01:2b:75:0e:01:5f:bc:45:b5:24:5d:
85:3c:1c:27:63:30:5b:a4:84:17:4a:ec:28:5d:c6:4e:b8:df:
83:ea:fb:ac:18:b4:9c:11:39:27:25:6d:1d:70:a9:83:bf:f3:
5a:7e:0e:36:b2:85:34:f6:c7:6b:1e:02:bb:78:18:a5:b7:26:
e3:95:44:42:95:e8:ab:c5:f3:51:b4:a5:f0:60:32:bd:76:6f:
32:1f:a1:37:3e:f5:18:bf:50:f6:61:a0:d2:4c:92:7e:6a:4f:
96:2d:20:84:b7:a3:16:73:c7:5b:94:09:e4:1d:2d:c9:42:0c:
7f:bb:07:2e:49:cb:8b:0b:ed:61:b6:61:3b:84:c5:40:e7:17:
cf:4c:42:35:77:13:ef:87:07:e8:98:52:8f:74:af:de:90:1a:
c2:74:39:3f:6c:67:c1:75:b7:64:01:11:33:4e:05:46:59:69:
81:5f:76:05:f2:d6:9a:45:5a:ae:c7:43:7f:c0:4c:6f:d9:25:
f3:86:cc:16:19:66:e0:cf:e7:39:62:fc:25:c4:7b:2b:20:e9:
87:8a:0e:7e:30:5b:e5:cd:b2:32:69:ce:77:6c:2d:9f:e0:25:
35:0d:01:1b:27:56:8f:31:46:ae:9e:90:01:08:ac:5f:78:d8:
d7:85:a4:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdhGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzExMTcxOTA5WhcNMjYwODE3MTcxOTA5WjAYMRYw
FAYDVQQDEw02YTUyN2IxNC1lMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt/bm02aYu0uPlTWn2Q/w4Q92h2ar4Wzhzfug+f+8UeIXKF9HUsBeEUbk
eA4wYS7KTIp+cmTsCBWTFCZt2P5ryi5IIxuOZTYKuCi7G6ZSxHD0PqLE7VYuUFfw
0w7uxW9tzEmEjjgoSkRL75N+KRecXeMepvJPk/2ALRWeVj86Uc60EHQi3yykXV/v
QzG7Q/AbNJUN6jV57Mnsk1pf/7QC+gkWoUuVDTpBYkzCexI1D4lTROxHifufI/rF
98Ce8RHyGSHRSdZl3weuSFn+KiFNbf0DjSNR3t59AxrHFtmSFXseRY7tQN2iVc5z
fJtcS5Y43Z35Gc3+xGnABQkNajPs5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL+U
Ud/q4KEcXUe5D6icz+n9Mn/lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNDcyMjI1QTdENEMxMUYxQjBDNUM5QkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmscBMA0GCSqGSIb3DQEB
CwUAA4IBAQCBpTOT5vjRASt1DgFfvEW1JF2FPBwnYzBbpIQXSuwoXcZOuN+D6vus
GLScETknJW0dcKmDv/Nafg42soU09sdrHgK7eBiltybjlURCleirxfNRtKXwYDK9
dm8yH6E3PvUYv1D2YaDSTJJ+ak+WLSCEt6MWc8dblAnkHS3JQgx/uwcuScuLC+1h
tmE7hMVA5xfPTEI1dxPvhwfomFKPdK/ekBrCdDk/bGfBdbdkAREzTgVGWWmBX3YF
8taaRVqux0N/wExv2SXzhswWGWbgz+c5YvwlxHsrIOmHig5+MFvlzbIyac53bC2f
4CU1DQEbJ1aPMUaunpABCKxfeNjXhaSZ
-----END CERTIFICATE-----
Generated at Fri Jul 17 06:43:39 2026 by rpki-client