Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE2AC728920711F1A72B9FC5CE1D38B0.roa
File: AE2AC728920711F1A72B9FC5CE1D38B0.roa (raw, json)
Hash identifier: vc3lg9Wdm1KKOb4+5QxkxuVIeIdPwEnTFeSxyx+ysQU=
Subject key identifier: BD:3E:DD:32:B3:29:BD:9F:D5:1B:4F:F6:6B:CA:AF:0A:D0:E1:02:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE2AC728920711F1A72B9FC5CE1D38B0.roa
Signing time: Fri 07 Aug 2026 02:28:31 +0000
ROA not before: Fri 07 Aug 2026 02:28:27 +0000
ROA not after: Fri 14 Aug 2026 02:28:27 +0000
asID: 274913
IP address blocks: 154.88.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122130 (0x1dd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 02:28:27 2026 GMT
Not After : Aug 14 02:28:27 2026 GMT
Subject: CN=6a7542cf-dcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:19:cb:f8:65:55:69:29:5e:63:1b:4d:16:
f9:c5:12:39:97:80:12:06:eb:7f:95:e8:1d:86:1a:
8b:05:12:4e:2b:36:cf:95:a6:c7:c1:ed:71:47:94:
6d:e4:6c:0d:88:e1:51:91:bf:ac:a9:d2:0d:7c:39:
af:6c:3f:26:fa:38:28:79:d3:50:d8:45:1d:27:89:
21:1f:5c:73:c2:7f:91:b6:75:bc:d2:a0:bd:88:8e:
7c:54:fd:cd:30:3b:6e:09:25:f0:1a:02:62:5a:34:
22:3a:da:5b:20:df:f0:68:ac:c1:a5:c9:d5:57:14:
1f:ab:e2:5c:71:59:45:11:a3:a8:51:84:85:72:da:
8a:f2:16:66:cb:b8:aa:a2:c0:f4:79:44:4a:3c:8c:
f9:92:28:1c:50:e8:ef:4c:29:27:33:a3:17:3c:96:
0d:68:82:a4:2d:8e:07:dc:93:bb:19:01:d0:f7:e3:
b8:62:14:68:af:ce:b5:22:63:fc:cc:1d:91:47:00:
77:11:64:df:5a:3b:77:2e:a3:c8:11:da:0f:20:a1:
85:92:32:6d:c2:a6:88:a8:ba:85:d5:ab:7a:1a:ea:
7e:bf:22:2b:e1:9c:1d:cf:07:8b:18:b2:82:da:a5:
fa:6d:44:0d:b4:e9:b4:eb:f6:54:00:56:2b:2e:6e:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:DD:32:B3:29:BD:9F:D5:1B:4F:F6:6B:CA:AF:0A:D0:E1:02:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE2AC728920711F1A72B9FC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.180.0/23
Signature Algorithm: sha256WithRSAEncryption
04:40:83:9f:de:1a:51:5c:4c:70:87:0b:87:e6:65:e1:c9:09:
0b:d0:9a:30:00:93:a3:ce:1b:ae:ec:3d:7b:3a:01:1c:ed:14:
ac:fb:e4:aa:09:06:1e:e6:a7:ed:9d:51:ad:cb:ce:43:26:9d:
e3:4c:dd:a1:45:7c:d5:2b:78:f6:35:4f:8a:ea:ec:78:44:de:
04:1c:e6:01:36:9e:53:7d:dc:c9:35:70:51:15:18:5d:eb:23:
a5:60:f2:49:69:5e:49:da:07:5f:65:97:e9:94:10:36:2e:23:
ec:42:2b:23:2e:12:61:0a:ed:48:35:6c:18:0e:41:67:b5:67:
06:55:1c:e9:69:8e:0b:25:e4:9b:0d:78:3c:77:19:6e:99:70:
fa:02:e4:9b:33:a5:59:86:a1:6e:94:40:75:56:60:4b:d4:cc:
fe:1e:d6:92:da:e2:cd:9e:e6:4f:19:2d:0b:cf:f6:46:0f:c9:
02:cf:ef:af:37:9b:7f:7b:c5:fb:40:a4:fa:9d:2f:88:f2:d8:
6d:57:16:35:13:09:6c:f2:43:b1:95:30:c4:fa:19:db:0c:d0:
af:43:bb:ff:a0:aa:e9:ce:c2:cf:39:e8:d2:c1:fa:72:8b:c9:
f1:49:80:d9:33:45:ea:53:12:2d:79:32:0d:76:7f:38:99:2c:
a7:d9:48:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd0SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA3MDIyODI3WhcNMjYwODE0MDIyODI3WjAYMRYw
FAYDVQQDEw02YTc1NDJjZi1kY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2VIZy/hlVWkpXmMbTRb5xRI5l4ASBut/legdhhqLBRJOKzbPlabHwe1x
R5Rt5GwNiOFRkb+sqdINfDmvbD8m+jgoedNQ2EUdJ4khH1xzwn+RtnW80qC9iI58
VP3NMDtuCSXwGgJiWjQiOtpbIN/waKzBpcnVVxQfq+JccVlFEaOoUYSFctqK8hZm
y7iqosD0eURKPIz5kigcUOjvTCknM6MXPJYNaIKkLY4H3JO7GQHQ9+O4YhRor861
ImP8zB2RRwB3EWTfWjt3LqPIEdoPIKGFkjJtwqaIqLqF1at6Gup+vyIr4ZwdzweL
GLKC2qX6bUQNtOm06/ZUAFYrLm4KgwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL0+
3TKzKb2f1RtP9mvKrwrQ4QKSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRTJBQzcyODkyMDcxMUYxQTcyQjlGQzVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmli0MA0GCSqGSIb3DQEB
CwUAA4IBAQAEQIOf3hpRXExwhwuH5mXhyQkL0JowAJOjzhuu7D17OgEc7RSs++Sq
CQYe5qftnVGty85DJp3jTN2hRXzVK3j2NU+K6ux4RN4EHOYBNp5TfdzJNXBRFRhd
6yOlYPJJaV5J2gdfZZfplBA2LiPsQisjLhJhCu1INWwYDkFntWcGVRzpaY4LJeSb
DXg8dxlumXD6AuSbM6VZhqFulEB1VmBL1Mz+HtaS2uLNnuZPGS0Lz/ZGD8kCz++v
N5t/e8X7QKT6nS+I8thtVxY1Ewls8kOxlTDE+hnbDNCvQ7v/oKrpzsLPOejSwfpy
i8nxSYDZM0XqUxIteTINdn84mSyn2UhR
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:24 2026 by rpki-client