Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DD6FF48E4911F1A63BB8A7CE1D38B0.roa
File: B6DD6FF48E4911F1A63BB8A7CE1D38B0.roa (raw, json)
Hash identifier: 3HA8cawuTmOAqoE3yv+h/cxdJkZV/ztTc+c8LOjIajs=
Subject key identifier: E7:B5:39:ED:36:29:9D:DD:02:AD:A3:A3:67:54:A2:0E:71:99:59:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DD6FF48E4911F1A63BB8A7CE1D38B0.roa
Signing time: Sun 02 Aug 2026 08:11:08 +0000
ROA not before: Sun 02 Aug 2026 08:11:04 +0000
ROA not after: Sun 13 Sep 2026 08:11:04 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121925 (0x1dc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 08:11:04 2026 GMT
Not After : Sep 13 08:11:04 2026 GMT
Subject: CN=6a6efb9c-3cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:af:72:cb:99:3a:5d:f4:b9:57:84:ce:76:
4c:44:57:4b:0f:fd:e3:b2:04:a9:86:a9:fd:fe:22:
06:2f:7c:2f:f8:60:b9:39:c1:0c:2c:d5:a5:af:45:
6c:8f:51:cf:98:15:08:ff:1a:26:68:92:26:58:6b:
9a:0c:05:55:ed:86:19:75:5c:4c:b8:73:d5:37:62:
12:bd:c9:f7:bd:64:6a:a6:d2:97:0b:d1:13:a9:70:
e5:28:89:b8:db:ba:88:e1:9a:fb:17:8d:8c:70:14:
fa:d2:3a:be:a4:78:b1:a9:d0:3d:fe:b2:ff:32:44:
5f:53:54:fb:2d:3b:56:4d:a8:dc:1c:93:5b:57:b2:
2a:da:ed:7c:34:3d:da:3d:21:06:b1:fe:7d:11:20:
28:09:43:0d:c2:6e:b0:26:c8:29:aa:4a:6e:e3:e7:
b7:b6:bf:96:a4:db:c9:dd:33:fa:c8:bd:a8:f8:49:
1a:75:66:7c:a0:bf:a0:c1:68:49:69:e0:4c:8b:cf:
d4:c4:a6:76:19:d3:d0:69:8c:dd:e1:45:83:33:9f:
60:da:26:d3:f2:1d:aa:82:7a:22:26:9e:f3:e3:22:
34:0a:9f:f3:33:4c:63:9c:6d:a4:f9:da:8e:19:8e:
70:ea:c0:ff:5b:f5:34:a4:d0:d2:db:88:ae:2b:18:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:39:ED:36:29:9D:DD:02:AD:A3:A3:67:54:A2:0E:71:99:59:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DD6FF48E4911F1A63BB8A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4b:62:b5:eb:47:12:d7:97:17:34:a6:93:97:0e:8f:25:1f:
b7:10:30:53:2a:c6:2e:74:d6:7a:b5:b5:1f:5f:1f:13:f1:bc:
93:d4:25:a2:9a:17:41:83:d1:3c:55:5c:37:13:35:96:b0:ba:
c2:a4:d0:8f:ef:e6:a7:d7:08:eb:ac:eb:97:05:5f:e0:1d:2d:
d3:fa:98:a4:d4:b2:a7:d6:01:6c:a3:cb:ea:c4:1d:c1:96:ab:
b2:64:35:99:9d:91:86:56:4a:2e:dc:a0:48:91:ce:fe:46:40:
a3:8f:c2:f3:20:fb:0b:d5:07:a7:5e:37:11:c4:87:5b:51:16:
88:97:46:1f:76:06:84:2e:c1:e0:27:b4:0e:c1:d9:2a:54:3d:
c2:56:81:1f:e6:fc:00:3c:66:05:3b:47:2c:cf:d9:7d:99:da:
d7:cf:73:ca:10:bf:f4:db:6f:73:1f:5d:fa:80:2d:5e:a2:13:
d0:80:9c:d1:d9:cb:dc:b5:7d:15:35:0a:86:6d:9f:4b:5a:b6:
97:20:e0:ab:bd:11:01:8d:d8:be:92:91:8b:df:ca:19:27:24:
45:bf:6b:2b:84:a6:4d:68:d0:cf:47:02:df:ff:67:e0:e0:55:
21:fb:6f:73:ce:6a:93:2a:34:60:5f:d6:31:df:ee:0d:fa:25:
4a:72:a3:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdxFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODAyMDgxMTA0WhcNMjYwOTEzMDgxMTA0WjAYMRYw
FAYDVQQDEw02YTZlZmI5Yy0zY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7mqvcsuZOl30uVeEznZMRFdLD/3jsgSphqn9/iIGL3wv+GC5OcEMLNWl
r0Vsj1HPmBUI/xomaJImWGuaDAVV7YYZdVxMuHPVN2ISvcn3vWRqptKXC9ETqXDl
KIm427qI4Zr7F42McBT60jq+pHixqdA9/rL/MkRfU1T7LTtWTajcHJNbV7Iq2u18
ND3aPSEGsf59ESAoCUMNwm6wJsgpqkpu4+e3tr+WpNvJ3TP6yL2o+EkadWZ8oL+g
wWhJaeBMi8/UxKZ2GdPQaYzd4UWDM59g2ibT8h2qgnoiJp7z4yI0Cp/zM0xjnG2k
+dqOGY5w6sD/W/U0pNDS24iuKxjQawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOe1
Oe02KZ3dAq2jo2dUog5xmVloMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNkRENkZGNDhFNDkxMUYxQTYzQkI4QTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVuMA0GCSqGSIb3DQEB
CwUAA4IBAQAPS2K160cS15cXNKaTlw6PJR+3EDBTKsYudNZ6tbUfXx8T8byT1CWi
mhdBg9E8VVw3EzWWsLrCpNCP7+an1wjrrOuXBV/gHS3T+pik1LKn1gFso8vqxB3B
lquyZDWZnZGGVkou3KBIkc7+RkCjj8LzIPsL1QenXjcRxIdbURaIl0YfdgaELsHg
J7QOwdkqVD3CVoEf5vwAPGYFO0csz9l9mdrXz3PKEL/0229zH136gC1eohPQgJzR
2cvctX0VNQqGbZ9LWraXIOCrvREBjdi+kpGL38oZJyRFv2srhKZNaNDPRwLf/2fg
4FUh+29zzmqTKjRgX9Yx3+4N+iVKcqNy
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:56 2026 by rpki-client