Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF5878917111F1B5C591CBCE1D38B0.roa
File: EADF5878917111F1B5C591CBCE1D38B0.roa (raw, json)
Hash identifier: DzZWp08iIgKLRHFaaGO8U8LXaN5PTK+9/IgF+0XJt/M=
Subject key identifier: F8:18:C3:33:1F:53:9F:45:9A:D3:0C:8A:AA:39:27:68:6D:66:59:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF5878917111F1B5C591CBCE1D38B0.roa
Signing time: Thu 06 Aug 2026 08:36:29 +0000
ROA not before: Thu 06 Aug 2026 08:36:24 +0000
ROA not after: Tue 18 Aug 2026 08:36:24 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122093 (0x1dced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 08:36:24 2026 GMT
Not After : Aug 18 08:36:24 2026 GMT
Subject: CN=6a74478c-6ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:11:4c:4e:d4:b4:4c:a9:17:7b:ce:9f:cc:
31:39:19:05:f4:73:2c:da:9e:fe:c8:e6:16:f4:f5:
6e:f2:c7:66:d5:eb:11:12:79:34:6f:e6:a0:55:05:
23:89:01:ba:9f:02:9d:f0:16:7b:4f:54:d1:11:48:
d5:95:c7:d0:83:a5:0d:73:05:be:3b:25:ae:26:0c:
36:76:3d:9a:fc:20:c4:c7:ff:a1:d4:76:08:ff:5f:
50:24:22:5c:ca:78:ed:b9:23:f1:de:d9:15:46:d0:
7c:16:24:f8:62:7f:13:32:dd:93:cd:9a:ab:32:fb:
04:d8:e6:5b:9d:ab:2a:17:d5:60:e7:d2:cd:77:d5:
07:60:cf:84:96:84:9a:05:24:d7:aa:57:1b:62:42:
5b:0d:bb:73:8d:03:b4:54:ed:df:d6:78:e2:22:09:
1c:1e:15:6f:d8:49:58:0c:fd:fb:ab:06:79:47:41:
4c:0e:14:d5:19:28:2f:67:7b:d3:09:9d:1e:92:7b:
c6:8d:d0:90:66:23:82:4b:27:eb:85:3c:e6:a0:5e:
93:d0:f6:5a:6e:9a:23:64:c1:fe:15:1d:1a:f5:c7:
7c:10:78:99:3c:a6:4a:e0:25:9e:c9:32:07:05:b4:
48:6a:94:a6:93:93:1f:68:c4:13:fe:e6:34:ec:5c:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:C3:33:1F:53:9F:45:9A:D3:0C:8A:AA:39:27:68:6D:66:59:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF5878917111F1B5C591CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
88:87:20:f0:9f:61:7e:54:ea:ec:43:c7:5a:1e:7d:bd:7b:4a:
c8:45:f8:65:4a:f0:6d:e3:09:eb:c6:64:e6:5b:24:d1:65:f9:
dc:f2:82:0a:79:cb:82:ea:26:91:ea:5f:5f:4c:66:be:f3:58:
2c:75:8a:0b:06:97:9a:8e:ed:45:9d:ed:ef:09:51:7b:fd:38:
ec:72:64:ad:a3:7f:ef:a1:c7:b1:8b:ae:ee:d7:80:20:bb:1b:
cb:29:df:50:5e:eb:80:8d:cc:75:e1:1e:f3:6f:21:e2:61:09:
72:91:63:db:eb:6d:d3:b6:5a:65:49:96:fc:d7:7e:8b:9d:bd:
6c:ff:c2:0b:ed:c6:72:b6:ef:de:4d:69:dd:39:78:3d:49:42:
40:72:cb:be:22:e8:c2:3f:ae:d6:e3:f5:05:a5:23:b9:73:cf:
98:d4:8d:21:d7:ea:56:0a:e8:61:fc:de:51:28:cc:a2:48:d2:
ad:43:fa:2b:fe:18:c6:04:90:3f:56:16:e0:2f:ba:00:de:ce:
37:80:5d:96:3f:92:31:4d:9c:a6:2f:f6:6d:13:28:55:0f:bb:
c3:a6:75:49:61:49:91:fe:08:5d:7d:05:aa:d4:70:eb:9c:ee:
1c:77:44:e8:59:cb:81:10:07:89:09:d8:c7:89:0c:ca:fd:30:
2a:15:03:9d
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAdztMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA2MDgzNjI0WhcNMjYwODE4MDgzNjI0WjAYMRYw
FAYDVQQDEw02YTc0NDc4Yy02ZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1H0RTE7UtEypF3vOn8wxORkF9HMs2p7+yOYW9PVu8sdm1esREnk0b+ag
VQUjiQG6nwKd8BZ7T1TREUjVlcfQg6UNcwW+OyWuJgw2dj2a/CDEx/+h1HYI/19Q
JCJcynjtuSPx3tkVRtB8FiT4Yn8TMt2TzZqrMvsE2OZbnasqF9Vg59LNd9UHYM+E
loSaBSTXqlcbYkJbDbtzjQO0VO3f1njiIgkcHhVv2ElYDP37qwZ5R0FMDhTVGSgv
Z3vTCZ0eknvGjdCQZiOCSyfrhTzmoF6T0PZabpojZMH+FR0a9cd8EHiZPKZK4CWe
yTIHBbRIapSmk5MfaMQT/uY07FxhqwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPgY
wzMfU59FmtMMiqo5J2htZlmsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQURGNTg3ODkxNzExMUYxQjVDNTkxQ0JDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmt+oAwQDmt+wAwQCmt+8
MA0GCSqGSIb3DQEBCwUAA4IBAQCIhyDwn2F+VOrsQ8daHn29e0rIRfhlSvBt4wnr
xmTmWyTRZfnc8oIKecuC6iaR6l9fTGa+81gsdYoLBpeaju1Fne3vCVF7/TjscmSt
o3/vocexi67u14AguxvLKd9QXuuAjcx14R7zbyHiYQlykWPb623TtlplSZb8136L
nb1s/8IL7cZytu/eTWndOXg9SUJAcsu+IujCP67W4/UFpSO5c8+Y1I0h1+pWCuhh
/N5RKMyiSNKtQ/or/hjGBJA/VhbgL7oA3s43gF2WP5IxTZymL/ZtEyhVD7vDpnVJ
YUmR/ghdfQWq1HDrnO4cd0ToWcuBEAeJCdjHiQzK/TAqFQOd
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:15 2026 by rpki-client