Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18DF6E272F911F1909F2AC6CE1D38B0.roa
File: B18DF6E272F911F1909F2AC6CE1D38B0.roa (raw, json)
Hash identifier: QayhGOP53ezgeFXqesr6qObdyxr8kVp9kZjYuzdaTGQ=
Subject key identifier: 24:BC:D5:E0:76:F7:25:7E:AE:DE:22:4F:86:07:C6:55:FB:F7:11:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18DF6E272F911F1909F2AC6CE1D38B0.roa
Signing time: Sun 28 Jun 2026 14:00:18 +0000
ROA not before: Sun 28 Jun 2026 14:00:13 +0000
ROA not after: Tue 04 Aug 2026 14:00:13 +0000
asID: 213169
IP address blocks: 154.94.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120275 (0x1d5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 14:00:13 2026 GMT
Not After : Aug 4 14:00:13 2026 GMT
Subject: CN=6a4128f2-5926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:e0:d3:90:92:a0:0a:16:43:0b:5f:80:c3:
e2:b4:b0:70:98:83:e9:2b:f8:50:4b:f2:54:cc:f4:
a7:0a:32:1e:45:49:3a:87:ad:bc:63:bf:e7:80:84:
62:72:bd:54:06:fd:fa:85:35:86:ec:16:c4:2c:57:
07:69:95:44:3c:6d:5d:9a:1d:86:e3:2b:a7:59:44:
35:9f:96:b0:72:e4:17:02:3a:5a:68:42:43:7e:b5:
4d:4f:b8:22:17:81:3a:78:21:63:4c:ce:55:58:46:
8c:54:d8:af:2e:28:fd:90:26:61:ea:04:86:2b:63:
39:e0:30:50:5b:38:4f:d8:38:1e:c6:93:ff:74:af:
f5:25:59:95:0b:e3:4b:85:db:bd:d2:ea:9c:ce:12:
da:35:ae:12:53:72:97:af:64:0d:65:59:c7:84:41:
33:e4:c1:46:25:0e:f1:9b:ba:d9:83:10:2f:f4:b4:
f6:3e:46:e4:81:5c:7b:fb:f5:dc:2c:66:ab:a8:28:
2f:0d:7e:75:3e:11:18:5b:51:99:97:4a:15:df:61:
d7:ed:20:a9:91:88:dd:2f:67:2b:72:a3:0a:c0:a2:
75:09:6b:25:cb:c3:34:d0:5c:17:72:9f:97:7e:89:
d7:05:df:8e:d4:3f:0b:ea:63:03:ba:1b:c0:0b:97:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:D5:E0:76:F7:25:7E:AE:DE:22:4F:86:07:C6:55:FB:F7:11:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18DF6E272F911F1909F2AC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:7e:0a:16:21:30:bb:47:54:74:7c:9a:96:e4:62:68:1a:bb:
cd:48:5f:1e:ff:0c:0d:30:f6:9a:a3:84:a8:a6:f6:0e:b6:72:
7f:8e:f8:32:c7:d3:e9:df:fb:79:df:e5:c8:c8:5e:5d:81:ea:
d9:d4:a8:71:86:4d:ee:02:d7:8e:29:c1:c8:67:33:96:2b:d4:
20:9d:83:8e:2f:07:eb:8a:93:f5:25:ce:4c:a9:73:80:bb:fe:
61:3f:09:ba:50:15:6e:58:8b:61:69:b0:ca:1e:cd:fb:f6:32:
78:9e:78:1d:43:16:bd:d5:c2:ec:7d:79:36:88:4f:20:36:e4:
44:ff:fe:ca:72:9d:fc:46:17:50:23:cb:57:f4:48:5d:94:08:
f2:be:e5:ff:dc:ef:88:e7:9e:78:72:f3:62:7b:90:43:cb:70:
bc:a9:3e:1f:d6:b1:76:cb:79:32:a0:f8:5b:a9:5d:17:a8:80:
0c:b2:39:5b:27:90:b4:d4:42:49:5d:f2:01:b9:94:16:29:e3:
1c:10:dd:2e:ba:d2:ff:b2:81:fb:d6:e8:08:f1:ab:c6:69:15:
2e:c0:4a:4d:18:e0:89:83:ad:eb:01:18:5d:cc:9e:15:42:e2:
34:4f:39:6b:b3:dd:35:9f:a3:eb:27:71:79:0f:ad:35:80:26:
91:be:9b:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdXTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI4MTQwMDEzWhcNMjYwODA0MTQwMDEzWjAYMRYw
FAYDVQQDEw02YTQxMjhmMi01OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxSbg05CSoAoWQwtfgMPitLBwmIPpK/hQS/JUzPSnCjIeRUk6h628Y7/n
gIRicr1UBv36hTWG7BbELFcHaZVEPG1dmh2G4yunWUQ1n5awcuQXAjpaaEJDfrVN
T7giF4E6eCFjTM5VWEaMVNivLij9kCZh6gSGK2M54DBQWzhP2DgexpP/dK/1JVmV
C+NLhdu90uqczhLaNa4SU3KXr2QNZVnHhEEz5MFGJQ7xm7rZgxAv9LT2PkbkgVx7
+/XcLGarqCgvDX51PhEYW1GZl0oV32HX7SCpkYjdL2crcqMKwKJ1CWsly8M00FwX
cp+XfonXBd+O1D8L6mMDuhvAC5cPgwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCS8
1eB29yV+rt4iT4YHxlX79xGxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMThERjZFMjcyRjkxMUYxOTA5RjJBQzZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml4wMA0GCSqGSIb3DQEB
CwUAA4IBAQA+fgoWITC7R1R0fJqW5GJoGrvNSF8e/wwNMPaao4SopvYOtnJ/jvgy
x9Pp3/t53+XIyF5dgerZ1Khxhk3uAteOKcHIZzOWK9QgnYOOLwfripP1Jc5MqXOA
u/5hPwm6UBVuWIthabDKHs379jJ4nngdQxa91cLsfXk2iE8gNuRE//7Kcp38RhdQ
I8tX9EhdlAjyvuX/3O+I5554cvNie5BDy3C8qT4f1rF2y3kyoPhbqV0XqIAMsjlb
J5C01EJJXfIBuZQWKeMcEN0uutL/soH71ugI8avGaRUuwEpNGOCJg63rARhdzJ4V
QuI0Tzlrs901n6PrJ3F5D601gCaRvpta
-----END CERTIFICATE-----
Generated at Fri Jul 17 21:06:25 2026 by rpki-client