Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA048E28954B11F18DDC4EA1CE1D38B0.roa
File: DA048E28954B11F18DDC4EA1CE1D38B0.roa (raw, json)
Hash identifier: pFRnm8ISjL63B2/Z4WAo/Ys9GeICQSf1TbKUzZDM1Kk=
Subject key identifier: CB:7D:93:DE:B6:B6:98:85:2E:92:B2:43:7B:44:A4:C7:6A:E3:0A:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DE00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA048E28954B11F18DDC4EA1CE1D38B0.roa
Signing time: Tue 11 Aug 2026 06:14:04 +0000
ROA not before: Tue 11 Aug 2026 06:14:00 +0000
ROA not after: Fri 18 Sep 2026 06:14:00 +0000
asID: 22773
IP address blocks: 154.82.224.0/19 maxlen: 24
154.85.4.0/22 maxlen: 24
154.85.13.0/24 maxlen: 24
154.85.121.0/24 maxlen: 24
154.85.122.0/24 maxlen: 24
154.94.32.0/24 maxlen: 24
154.94.36.0/23 maxlen: 24
154.94.40.0/24 maxlen: 24
154.94.43.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122368 (0x1de00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 06:14:00 2026 GMT
Not After : Sep 18 06:14:00 2026 GMT
Subject: CN=6a7abdac-e858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:97:fb:9f:2a:5c:42:23:9b:90:42:db:56:
e6:84:53:50:c7:4c:f2:7c:ea:40:60:20:fe:d6:aa:
c7:2f:d5:be:65:f6:3e:13:f5:cf:f7:78:f6:0f:d5:
51:02:96:5c:5f:cc:05:cf:d8:eb:7d:07:c8:a3:ef:
90:3d:ba:6a:11:61:ca:6a:9d:c6:b5:12:4b:af:06:
d3:74:fe:b9:19:ef:c3:62:58:14:ae:cd:e5:4f:62:
59:f1:81:00:c4:85:40:d4:7d:b1:e6:aa:5e:33:86:
27:93:cc:65:e4:cd:15:3a:99:21:8c:c1:7e:29:db:
30:7f:ee:3e:d5:fc:e1:56:b2:91:de:63:72:7d:09:
2a:6e:28:39:a1:35:25:1f:b3:fd:b6:b4:94:b7:0b:
1a:89:bd:a5:fe:a6:47:d9:9f:ef:da:8e:0d:ed:50:
e2:0b:f0:c2:85:a1:4d:05:67:14:fb:c4:d8:68:5d:
fd:c9:62:fb:80:c2:0d:f6:aa:3b:3e:6e:b1:87:81:
00:dd:a8:d9:fc:cb:33:f4:48:5b:92:40:83:2c:fd:
f1:4b:36:a0:4c:27:ea:f5:9b:76:b2:86:aa:9e:ad:
90:40:41:28:95:e1:6c:74:0b:f2:7c:a0:6b:02:97:
59:68:1b:a4:b6:53:4e:d6:bd:0e:e4:77:d0:30:b9:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:93:DE:B6:B6:98:85:2E:92:B2:43:7B:44:A4:C7:6A:E3:0A:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA048E28954B11F18DDC4EA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.224.0/19
154.85.4.0/22
154.85.13.0/24
154.85.121.0-154.85.122.255
154.94.32.0/24
154.94.36.0/23
154.94.40.0/24
154.94.43.0/24
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:26:1b:38:e5:b5:9d:fe:1f:8f:d5:8e:1a:fd:18:f9:9f:d6:
32:49:54:f7:ea:c7:ee:6b:3a:5f:c0:ad:d4:bb:2c:70:2c:90:
1d:97:d4:27:4d:47:ff:5b:10:f8:5b:2e:ed:3e:7d:12:3b:e3:
4c:e6:0b:56:d9:b3:cd:81:e5:ba:8d:82:25:ff:88:b0:84:67:
fc:d8:a2:f4:e9:16:af:de:9c:08:3d:8c:16:04:d8:df:b3:d0:
97:6c:4f:f7:15:e6:be:d5:20:25:da:5c:a2:8d:b2:8c:89:c4:
02:9b:52:d9:07:b9:13:70:9d:1d:83:e3:d3:3f:6b:7c:a8:c0:
69:ff:52:73:3a:f4:a1:ae:0e:37:d3:fb:c5:75:10:ea:f2:f9:
ce:88:6a:88:9a:ef:83:7c:98:59:e4:da:7f:4c:1e:aa:4d:5f:
fd:0c:0c:81:87:4d:c9:f8:89:52:03:48:3d:67:c2:22:3c:59:
7f:43:02:56:ba:7c:ae:14:b1:29:a7:4f:e2:9a:ce:1f:50:63:
f8:88:98:62:43:7b:e3:df:21:37:46:f0:d3:ab:fd:b2:5a:41:
0c:b3:02:71:ef:ee:41:90:3c:9a:fa:94:77:7c:31:f8:9f:db:
c8:8c:0c:2b:92:14:58:a4:f7:ec:ed:0a:ae:92:e7:4d:25:ab:
7d:35:86:50
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAd4AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODExMDYxNDAwWhcNMjYwOTE4MDYxNDAwWjAYMRYw
FAYDVQQDEw02YTdhYmRhYy1lODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0YKX+58qXEIjm5BC21bmhFNQx0zyfOpAYCD+1qrHL9W+ZfY+E/XP93j2
D9VRApZcX8wFz9jrfQfIo++QPbpqEWHKap3GtRJLrwbTdP65Ge/DYlgUrs3lT2JZ
8YEAxIVA1H2x5qpeM4Ynk8xl5M0VOpkhjMF+Kdswf+4+1fzhVrKR3mNyfQkqbig5
oTUlH7P9trSUtwsaib2l/qZH2Z/v2o4N7VDiC/DChaFNBWcU+8TYaF39yWL7gMIN
9qo7Pm6xh4EA3ajZ/Msz9EhbkkCDLP3xSzagTCfq9Zt2soaqnq2QQEEoleFsdAvy
fKBrApdZaBuktlNO1r0O5HfQMLnJNwIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFMt9
k962tpiFLpKyQ3tEpMdq4wpDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQTA0OEUyODk1NEIxMUYxOEREQzRFQTFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQFmlLgAwQCmlUEAwQAmlUN
MAwDBACaVXkDBACaVXoDBACaXiADBAGaXiQDBACaXigDBACaXisDBACaXj8wDQYJ
KoZIhvcNAQELBQADggEBAMEmGzjltZ3+H4/Vjhr9GPmf1jJJVPfqx+5rOl/ArdS7
LHAskB2X1CdNR/9bEPhbLu0+fRI740zmC1bZs82B5bqNgiX/iLCEZ/zYovTpFq/e
nAg9jBYE2N+z0JdsT/cV5r7VICXaXKKNsoyJxAKbUtkHuRNwnR2D49M/a3yowGn/
UnM69KGuDjfT+8V1EOry+c6Iaoia74N8mFnk2n9MHqpNX/0MDIGHTcn4iVIDSD1n
wiI8WX9DAla6fK4UsSmnT+Kazh9QY/iImGJDe+PfITdG8NOr/bJaQQyzAnHv7kGQ
PJr6lHd8Mfif28iMDCuSFFik9+ztCq6S500lq301hlA=
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:18 2026 by rpki-client