Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCBF400076AA11F1B99A1AC3CE1D38B0.roa
File: DCBF400076AA11F1B99A1AC3CE1D38B0.roa (raw, json)
Hash identifier: SG4jtJ8WnkZ2PQ43E1cY0d85TSX2TCbwkg5gIgFIjBc=
Subject key identifier: A0:61:C1:7B:54:62:59:DB:D2:41:01:1C:53:CE:75:15:9F:37:C3:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D699
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCBF400076AA11F1B99A1AC3CE1D38B0.roa
Signing time: Fri 03 Jul 2026 06:46:05 +0000
ROA not before: Fri 03 Jul 2026 06:45:59 +0000
ROA not after: Thu 23 Jul 2026 06:45:59 +0000
asID: 215224
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120473 (0x1d699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 06:45:59 2026 GMT
Not After : Jul 23 06:45:59 2026 GMT
Subject: CN=6a475aad-74ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:af:83:29:a2:77:7c:19:0b:1b:ea:2e:06:
f1:6b:ba:87:0d:41:f7:cc:c0:4e:a3:d9:f7:45:db:
2b:1e:de:c5:22:3c:a2:0d:68:ee:0d:cb:86:95:cc:
59:28:12:44:94:e8:63:61:4a:d0:87:5a:47:97:85:
4a:7a:09:96:37:c2:c7:4d:a5:8a:4b:f1:55:89:40:
7a:b5:c8:ea:bd:e1:76:d1:54:47:f0:95:fe:df:7c:
3e:48:8e:58:41:53:e9:d2:4d:d3:0f:8c:03:89:3c:
26:bc:e8:6b:0b:eb:9b:d3:a5:6e:30:2c:26:a1:37:
f5:f4:ff:c5:4d:49:ba:cd:98:0d:d1:25:11:ef:9a:
79:01:6c:fe:50:b9:dc:60:a5:15:16:c3:ef:ee:e4:
64:a4:d9:b3:97:0a:2c:e2:49:10:2f:0f:f0:92:e5:
58:59:9b:30:a0:96:a1:6e:26:74:e9:47:47:85:54:
2c:fc:29:72:73:b3:19:e3:12:84:60:55:f1:8d:9a:
21:46:b1:70:ea:d9:7c:cf:7c:62:18:7e:d1:44:5e:
8c:7f:32:10:f0:48:ad:0b:5a:bf:bc:6c:2f:73:4c:
c7:b0:a0:c0:cc:4a:a7:9a:5b:24:1e:73:51:2a:65:
d6:e4:10:45:be:3d:1b:b1:da:17:a0:81:9b:cd:40:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:C1:7B:54:62:59:DB:D2:41:01:1C:53:CE:75:15:9F:37:C3:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCBF400076AA11F1B99A1AC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b3:97:78:e7:4e:ab:58:23:56:76:e3:ed:55:1a:43:9d:56:
04:ce:b7:d0:8d:77:e6:ad:76:9e:d7:d9:10:45:d1:68:0e:f2:
66:89:a8:f8:fb:b4:18:f9:de:c7:d8:1c:96:0e:24:7f:5b:05:
14:aa:56:9c:68:94:3b:3a:a7:24:41:d8:ee:ec:95:4b:53:a1:
20:8d:61:08:ba:f5:25:a7:ac:c2:4d:fa:44:1d:46:1e:7f:cd:
ba:1b:cd:23:ae:a5:34:88:16:9d:35:55:b7:cd:c7:56:72:85:
ec:99:b9:73:03:c0:d7:2e:bc:31:d9:19:14:24:42:44:c4:bf:
6d:53:5b:6f:68:df:32:6f:07:c1:eb:4e:9c:10:60:7d:49:fb:
3f:77:67:6a:b5:5d:0d:15:30:f5:f8:44:4f:d7:0e:b6:53:88:
e1:01:bf:12:92:e6:64:b7:bb:0d:2e:e8:2a:88:39:b2:68:01:
62:12:e4:20:68:73:1d:45:88:5e:3a:99:60:6b:d9:d3:4f:c8:
31:a4:e2:ca:f9:08:9e:8a:e5:07:89:5a:cd:63:d5:fd:47:65:
6f:64:8d:71:1e:71:0b:19:29:aa:08:63:55:3a:07:87:18:1e:
0f:8b:f9:80:e7:3c:08:e7:ff:6e:aa:19:f7:57:a5:eb:27:c0:
33:c9:c6:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdaZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMDY0NTU5WhcNMjYwNzIzMDY0NTU5WjAYMRYw
FAYDVQQDEw02YTQ3NWFhZC03NGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxcOvgymid3wZCxvqLgbxa7qHDUH3zMBOo9n3RdsrHt7FIjyiDWjuDcuG
lcxZKBJElOhjYUrQh1pHl4VKegmWN8LHTaWKS/FViUB6tcjqveF20VRH8JX+33w+
SI5YQVPp0k3TD4wDiTwmvOhrC+ub06VuMCwmoTf19P/FTUm6zZgN0SUR75p5AWz+
ULncYKUVFsPv7uRkpNmzlwos4kkQLw/wkuVYWZswoJahbiZ06UdHhVQs/Clyc7MZ
4xKEYFXxjZohRrFw6tl8z3xiGH7RRF6MfzIQ8EitC1q/vGwvc0zHsKDAzEqnmlsk
HnNRKmXW5BBFvj0bsdoXoIGbzUBQnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKBh
wXtUYlnb0kEBHFPOdRWfN8NsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQ0JGNDAwMDc2QUExMUYxQjk5QTFBQzNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOGMA0GCSqGSIb3DQEB
CwUAA4IBAQBvs5d4506rWCNWduPtVRpDnVYEzrfQjXfmrXae19kQRdFoDvJmiaj4
+7QY+d7H2ByWDiR/WwUUqlacaJQ7OqckQdju7JVLU6EgjWEIuvUlp6zCTfpEHUYe
f826G80jrqU0iBadNVW3zcdWcoXsmblzA8DXLrwx2RkUJEJExL9tU1tvaN8ybwfB
606cEGB9Sfs/d2dqtV0NFTD1+ERP1w62U4jhAb8SkuZkt7sNLugqiDmyaAFiEuQg
aHMdRYheOplga9nTT8gxpOLK+QieiuUHiVrNY9X9R2VvZI1xHnELGSmqCGNVOgeH
GB4Pi/mA5zwI5/9uqhn3V6XrJ8Azyca9
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:53 2026 by rpki-client