Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE8F225A90A111F198E28FDECE1D38B0.roa
File: CE8F225A90A111F198E28FDECE1D38B0.roa (raw, json)
Hash identifier: RFiloELhMwfIxe2H5hysCNJDpQ5NF5k2+ra2QkpNNek=
Subject key identifier: E6:9B:D1:E5:0B:9D:45:22:E4:3B:DE:57:25:84:66:8E:31:19:CB:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE8F225A90A111F198E28FDECE1D38B0.roa
Signing time: Wed 05 Aug 2026 07:46:46 +0000
ROA not before: Wed 05 Aug 2026 07:46:42 +0000
ROA not after: Sat 15 Aug 2026 07:46:42 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122041 (0x1dcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 07:46:42 2026 GMT
Not After : Aug 15 07:46:42 2026 GMT
Subject: CN=6a72ea66-7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:ff:fd:9d:41:75:1b:0a:24:c4:07:28:b0:
92:87:dd:d5:f5:49:93:4d:cf:dd:fb:8b:e6:e0:e1:
60:24:81:82:4b:5d:2a:04:95:33:db:20:17:0f:c5:
66:d4:7a:fb:59:df:96:c0:9a:76:61:4c:48:40:4f:
18:39:70:5a:2e:44:6b:1b:7b:48:06:87:5f:ba:ef:
30:f6:bb:cb:6f:39:fa:82:6b:8d:22:6b:d4:e5:0d:
3b:c8:f1:fe:00:84:6e:90:d8:52:54:93:bf:f1:55:
d2:a6:0f:35:26:80:0c:ea:1e:d4:ff:31:e8:07:6d:
a7:fd:b5:70:3c:ac:0f:f8:e9:66:ab:9d:44:1e:9d:
98:e2:67:0a:0d:33:78:97:cf:09:6e:08:b1:7a:42:
ee:9d:17:10:d5:60:91:ab:57:09:15:e7:fb:b0:a3:
73:a3:67:b3:05:24:70:62:f5:f2:bf:f8:e4:41:4e:
7d:11:69:0e:27:4a:23:ec:3d:1f:0c:57:ef:ef:e9:
05:4a:d8:90:9c:57:1b:3b:d5:f1:ca:86:09:f4:4b:
c5:b9:d6:c3:32:bb:da:0e:8d:d3:b9:2f:8e:20:56:
d9:fe:6f:a6:a5:86:be:f4:5b:b6:2e:d0:9f:84:77:
e4:c9:6e:92:10:a8:d0:a6:21:a4:9e:6c:cb:05:1b:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9B:D1:E5:0B:9D:45:22:E4:3B:DE:57:25:84:66:8E:31:19:CB:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE8F225A90A111F198E28FDECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f3:66:c6:62:3e:94:b9:3d:14:4a:14:05:cc:09:06:8a:a4:
a4:4b:98:ce:28:00:c8:a5:d0:6e:62:dc:be:10:32:03:ed:a0:
07:81:cc:5d:f6:0e:35:40:2c:75:59:bc:e8:f4:69:1e:6f:bf:
f4:a6:5b:ad:c0:b4:c4:b0:40:12:4c:a0:50:e8:2e:0f:be:67:
0f:9d:4a:8e:0e:13:bf:0a:65:6b:bb:ba:da:50:87:b7:34:c6:
ed:7b:c4:d8:92:ed:3a:70:3f:6c:fc:39:c6:db:73:bb:0f:d9:
64:ef:1f:0e:04:b3:e9:d6:2b:8c:0f:2e:6d:e6:52:9e:82:45:
a4:91:60:38:28:1f:75:9f:76:c8:d5:6d:08:2e:1e:e1:2a:c2:
d7:cc:c6:91:7d:7f:f7:f7:8b:0d:15:bb:ca:48:e6:73:0f:cd:
dc:36:e1:0d:81:9f:ff:cd:45:a4:3c:ec:84:01:a4:22:54:50:
e9:97:78:66:c0:4f:1b:c7:02:51:e8:0f:f1:6c:6f:9b:c9:d7:
5e:2d:86:27:4f:e1:62:38:6a:17:ba:0a:40:e9:c1:a0:99:4b:
e5:45:22:57:c1:b8:27:3c:4b:a6:89:a5:65:27:81:7e:7f:d7:
a4:35:38:fb:5e:28:b0:59:50:a2:df:c9:53:a1:d3:6a:dc:aa:
82:af:ae:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdy5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA1MDc0NjQyWhcNMjYwODE1MDc0NjQyWjAYMRYw
FAYDVQQDEw02YTcyZWE2Ni03YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuDP//Z1BdRsKJMQHKLCSh93V9UmTTc/d+4vm4OFgJIGCS10qBJUz2yAX
D8Vm1Hr7Wd+WwJp2YUxIQE8YOXBaLkRrG3tIBodfuu8w9rvLbzn6gmuNImvU5Q07
yPH+AIRukNhSVJO/8VXSpg81JoAM6h7U/zHoB22n/bVwPKwP+Olmq51EHp2Y4mcK
DTN4l88JbgixekLunRcQ1WCRq1cJFef7sKNzo2ezBSRwYvXyv/jkQU59EWkOJ0oj
7D0fDFfv7+kFStiQnFcbO9XxyoYJ9EvFudbDMrvaDo3TuS+OIFbZ/m+mpYa+9Fu2
LtCfhHfkyW6SEKjQpiGknmzLBRsbQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOab
0eULnUUi5DveVyWEZo4xGcukMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRThGMjI1QTkwQTExMUYxOThFMjhGREVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSZMA0GCSqGSIb3DQEB
CwUAA4IBAQB282bGYj6UuT0UShQFzAkGiqSkS5jOKADIpdBuYty+EDID7aAHgcxd
9g41QCx1Wbzo9Gkeb7/0plutwLTEsEASTKBQ6C4PvmcPnUqODhO/CmVru7raUIe3
NMbte8TYku06cD9s/DnG23O7D9lk7x8OBLPp1iuMDy5t5lKegkWkkWA4KB91n3bI
1W0ILh7hKsLXzMaRfX/394sNFbvKSOZzD83cNuENgZ//zUWkPOyEAaQiVFDpl3hm
wE8bxwJR6A/xbG+byddeLYYnT+FiOGoXugpA6cGgmUvlRSJXwbgnPEumiaVlJ4F+
f9ekNTj7XiiwWVCi38lTodNq3KqCr66o
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:22 2026 by rpki-client