Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F863366EDF11F1AF3F27DCCE1D38B0.roa
File: D1F863366EDF11F1AF3F27DCCE1D38B0.roa (raw, json)
Hash identifier: Qwe/TX1AlTFPFLFSxgK+Ioc8RblAJFuiMZGVldbXvvM=
Subject key identifier: A0:CE:A8:44:32:DC:0C:D7:AE:F3:66:54:9B:8D:D5:DC:D0:82:BD:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D480
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F863366EDF11F1AF3F27DCCE1D38B0.roa
Signing time: Tue 23 Jun 2026 08:45:01 +0000
ROA not before: Tue 23 Jun 2026 08:44:56 +0000
ROA not after: Sat 08 Aug 2026 08:44:56 +0000
asID: 202036
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119936 (0x1d480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 08:44:56 2026 GMT
Not After : Aug 8 08:44:56 2026 GMT
Subject: CN=6a3a478d-7e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:1b:67:15:05:e0:b8:da:6f:21:4f:6d:7f:
a4:83:33:13:4f:2f:57:32:70:f0:81:77:cd:54:3f:
aa:b1:9e:0b:2a:a6:36:cb:ed:67:2a:5a:7b:10:0c:
42:0a:d0:84:86:06:c4:38:a2:f5:2a:2a:96:b3:85:
99:2f:80:d7:74:15:b6:a7:8e:9c:18:1e:36:3e:bd:
de:cd:cf:cc:0f:4a:c0:7d:fd:1a:ae:7f:46:10:f1:
10:fb:10:f7:e8:df:4c:58:9d:0c:21:26:c3:05:0e:
ac:71:85:5e:e5:b5:ee:76:45:cb:85:c5:63:3a:11:
bc:cc:18:ae:44:f4:96:67:37:92:8d:b6:44:05:37:
1b:51:5d:a1:8e:77:b6:15:e9:8e:8a:fa:66:2e:76:
c8:7c:43:52:54:3e:69:f5:e2:a1:0a:fd:33:45:fb:
93:33:b4:d9:5c:10:51:59:dd:50:76:f4:ee:ce:e5:
46:f1:45:3b:5f:66:c5:15:5e:f3:b4:ef:fe:39:8c:
17:4c:ee:10:ea:be:77:2d:a8:b1:b2:45:b9:88:61:
1c:9a:f8:6a:41:45:77:b8:1f:75:9b:9d:5a:88:88:
20:52:c1:c2:1b:75:65:76:a5:63:f4:73:a7:07:aa:
04:a3:6c:e2:70:2c:02:28:78:9b:33:24:4a:d5:73:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:A8:44:32:DC:0C:D7:AE:F3:66:54:9B:8D:D5:DC:D0:82:BD:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F863366EDF11F1AF3F27DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:72:d6:c1:94:5f:73:22:58:75:2a:2b:86:5d:69:fe:44:10:
84:30:12:81:31:a3:eb:56:de:7f:70:6c:3a:00:b1:60:4b:b0:
24:ed:41:b0:d7:a4:ff:6e:70:00:3b:c6:69:f5:8a:41:dd:f8:
cc:9e:4f:55:a1:25:cc:1d:6e:d7:e9:2e:6e:3a:5e:6c:43:06:
83:37:fc:5d:72:f5:7f:21:72:f1:27:dc:6b:59:5f:23:c2:d6:
35:ca:09:5a:d0:ca:6b:17:4d:6b:fa:ae:5e:d2:8b:b4:d2:2a:
7b:3b:03:e7:6b:80:19:e3:ce:6b:57:21:4d:73:c6:05:35:cc:
d1:0f:86:ab:1b:cf:22:f6:f0:3d:a0:78:ea:54:0a:b7:2c:16:
4c:e5:e3:10:c5:78:f9:17:eb:4e:8f:80:8a:a2:ed:51:66:b9:
23:49:73:13:70:1c:c3:97:f4:47:c9:e9:46:0f:dd:24:fd:42:
bf:38:27:75:93:32:50:06:42:23:36:d0:d7:31:3b:1c:50:93:
7b:58:25:1e:02:11:79:d8:15:ca:4d:30:6f:b0:c4:bc:e2:1a:
13:8c:ba:8f:36:19:b6:ac:c1:90:7d:f4:c7:f2:5e:ad:82:19:
ed:9c:7e:53:8a:a0:e5:02:ec:4a:74:de:4e:62:ca:49:a1:7d:
e8:ce:6c:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdSAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIzMDg0NDU2WhcNMjYwODA4MDg0NDU2WjAYMRYw
FAYDVQQDEw02YTNhNDc4ZC03ZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs4EbZxUF4LjabyFPbX+kgzMTTy9XMnDwgXfNVD+qsZ4LKqY2y+1nKlp7
EAxCCtCEhgbEOKL1KiqWs4WZL4DXdBW2p46cGB42Pr3ezc/MD0rAff0arn9GEPEQ
+xD36N9MWJ0MISbDBQ6scYVe5bXudkXLhcVjOhG8zBiuRPSWZzeSjbZEBTcbUV2h
jne2FemOivpmLnbIfENSVD5p9eKhCv0zRfuTM7TZXBBRWd1QdvTuzuVG8UU7X2bF
FV7ztO/+OYwXTO4Q6r53LaixskW5iGEcmvhqQUV3uB91m51aiIggUsHCG3VldqVj
9HOnB6oEo2zicCwCKHibMyRK1XOzaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKDO
qEQy3AzXrvNmVJuN1dzQgr2jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMUY4NjMzNjZFREYxMUYxQUYzRjI3RENDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlNoMA0GCSqGSIb3DQEB
CwUAA4IBAQB9ctbBlF9zIlh1KiuGXWn+RBCEMBKBMaPrVt5/cGw6ALFgS7Ak7UGw
16T/bnAAO8Zp9YpB3fjMnk9VoSXMHW7X6S5uOl5sQwaDN/xdcvV/IXLxJ9xrWV8j
wtY1ygla0MprF01r+q5e0ou00ip7OwPna4AZ485rVyFNc8YFNczRD4arG88i9vA9
oHjqVAq3LBZM5eMQxXj5F+tOj4CKou1RZrkjSXMTcBzDl/RHyelGD90k/UK/OCd1
kzJQBkIjNtDXMTscUJN7WCUeAhF52BXKTTBvsMS84hoTjLqPNhm2rMGQffTH8l6t
ghntnH5TiqDlAuxKdN5OYspJoX3ozmzy
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:19 2026 by rpki-client