Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F525F03A91DA11F19190DFB5CE1D38B0.roa
File: F525F03A91DA11F19190DFB5CE1D38B0.roa (raw, json)
Hash identifier: SoVInI5fJwsKs0ndyNQFvoDzHFCNq7Wdv9/3bwXfqiE=
Subject key identifier: 4F:B5:1F:0A:E5:45:D1:05:43:AF:9A:78:34:F8:81:9D:D4:9F:74:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F525F03A91DA11F19190DFB5CE1D38B0.roa
Signing time: Thu 06 Aug 2026 21:08:23 +0000
ROA not before: Thu 06 Aug 2026 21:08:19 +0000
ROA not after: Sun 20 Sep 2026 21:08:19 +0000
asID: 212238
IP address blocks: 154.83.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122119 (0x1dd07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 21:08:19 2026 GMT
Not After : Sep 20 21:08:19 2026 GMT
Subject: CN=6a74f7c7-27f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:2a:fd:5b:65:a8:5f:5c:6a:70:b2:6c:93:
7d:c8:f6:35:91:69:01:38:92:ed:fe:16:06:c4:64:
b5:9b:f8:45:65:90:e3:61:10:27:d1:57:b9:c2:e3:
1a:05:05:2a:0c:12:08:13:7f:41:0f:2c:f5:dc:00:
21:c1:10:3e:df:82:1b:80:7a:36:41:db:92:7a:47:
24:ef:82:f1:12:ce:fb:fe:f2:03:f4:07:e5:7a:6a:
eb:3a:92:09:8b:a7:bc:f9:df:d6:6c:92:05:45:62:
0e:b7:43:39:87:c9:6d:f4:55:21:fe:3c:8b:d6:3e:
e5:61:0b:51:14:1f:c5:d4:28:99:28:f3:a4:7a:e3:
b1:86:07:09:35:fc:da:83:5f:42:bb:ac:a6:14:9d:
3f:c6:e3:75:a4:3b:99:c5:88:46:8b:92:86:61:22:
28:58:54:0a:cc:21:01:2f:f2:74:04:5b:b4:2e:0c:
5a:09:11:0b:b0:f1:32:1f:02:8d:88:46:51:f7:75:
82:90:6b:45:13:e1:fe:4f:70:19:29:bd:8e:0b:6a:
6f:9a:bf:a3:c8:22:3c:a7:ab:22:9e:b9:1b:37:25:
54:ea:be:e7:d8:50:e3:37:2c:50:ec:43:a6:89:ce:
ca:f5:e0:ba:64:a4:44:7e:31:20:e5:63:36:33:c3:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B5:1F:0A:E5:45:D1:05:43:AF:9A:78:34:F8:81:9D:D4:9F:74:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F525F03A91DA11F19190DFB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:05:1f:53:f6:46:5d:26:dd:36:3f:20:77:de:f7:a0:8e:2a:
dc:b2:b3:39:5a:cc:f3:c5:b6:c7:14:58:82:b2:7d:47:89:f1:
72:fb:5f:ce:d3:8a:ae:9a:55:b9:b7:4b:24:33:42:61:c0:c7:
b6:31:85:5d:0d:d7:31:fb:7a:76:e3:6b:bb:fd:b6:81:4a:18:
b8:58:cc:5a:31:ef:fe:20:e0:34:4c:fc:96:22:0e:28:98:32:
30:f9:7f:90:44:49:4c:1d:ef:5a:ce:ea:1c:68:e5:b4:bb:70:
ae:01:11:45:c5:8a:47:3d:35:61:96:fa:e7:26:61:ca:a7:3c:
95:e5:87:e6:ea:af:3a:6c:c8:60:54:17:6f:ee:c2:5a:2c:ee:
14:9e:15:7a:b0:f0:aa:3f:36:34:d3:8c:74:f4:58:9a:63:d1:
9c:be:36:ba:4c:64:ec:0b:d4:af:a6:b2:72:2a:68:59:c9:cb:
07:6f:ee:ec:90:0c:0e:15:3d:e7:f7:0c:35:b1:9c:ec:64:2e:
c8:04:e5:c9:27:a1:3d:04:55:f9:6d:1b:6a:49:05:68:03:07:
db:65:7d:c5:89:f0:0f:87:51:4e:25:31:d5:67:c2:e2:a8:26:
45:b4:71:3a:13:eb:ab:51:b8:5b:7b:46:58:62:7f:65:67:78:
d4:30:12:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd0HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA2MjEwODE5WhcNMjYwOTIwMjEwODE5WjAYMRYw
FAYDVQQDEw02YTc0ZjdjNy0yN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuKcq/VtlqF9canCybJN9yPY1kWkBOJLt/hYGxGS1m/hFZZDjYRAn0Ve5
wuMaBQUqDBIIE39BDyz13AAhwRA+34IbgHo2QduSekck74LxEs77/vID9Aflemrr
OpIJi6e8+d/WbJIFRWIOt0M5h8lt9FUh/jyL1j7lYQtRFB/F1CiZKPOkeuOxhgcJ
Nfzag19Cu6ymFJ0/xuN1pDuZxYhGi5KGYSIoWFQKzCEBL/J0BFu0LgxaCRELsPEy
HwKNiEZR93WCkGtFE+H+T3AZKb2OC2pvmr+jyCI8p6sinrkbNyVU6r7n2FDjNyxQ
7EOmic7K9eC6ZKREfjEg5WM2M8OqUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE+1
HwrlRdEFQ6+aeDT4gZ3Un3SQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNTI1RjAzQTkxREExMUYxOTE5MERGQjVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlP2MA0GCSqGSIb3DQEB
CwUAA4IBAQC0BR9T9kZdJt02PyB33vegjircsrM5WszzxbbHFFiCsn1HifFy+1/O
04qumlW5t0skM0JhwMe2MYVdDdcx+3p242u7/baBShi4WMxaMe/+IOA0TPyWIg4o
mDIw+X+QRElMHe9azuocaOW0u3CuARFFxYpHPTVhlvrnJmHKpzyV5Yfm6q86bMhg
VBdv7sJaLO4UnhV6sPCqPzY004x09FiaY9Gcvja6TGTsC9SvprJyKmhZycsHb+7s
kAwOFT3n9ww1sZzsZC7IBOXJJ6E9BFX5bRtqSQVoAwfbZX3FifAPh1FOJTHVZ8Li
qCZFtHE6E+urUbhbe0ZYYn9lZ3jUMBLM
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:46 2026 by rpki-client