Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFE9F08C8C0511F18599F5D2CE1D38B0.roa
File: FFE9F08C8C0511F18599F5D2CE1D38B0.roa (raw, json)
Hash identifier: IylmsHjA5M9bkPBQnvft+vR1j9IvM8mzkAYnaZelRHg=
Subject key identifier: AD:59:BD:D6:DF:E2:6C:AE:91:6A:EE:B0:BB:B8:BC:B5:D3:8E:BA:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFE9F08C8C0511F18599F5D2CE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:01:23 +0000
ROA not before: Thu 30 Jul 2026 11:01:18 +0000
ROA not after: Sun 04 Oct 2026 11:01:18 +0000
asID: 131267
IP address blocks: 154.222.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121832 (0x1dbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 11:01:18 2026 GMT
Not After : Oct 4 11:01:18 2026 GMT
Subject: CN=6a6b2f02-f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:66:1f:64:61:97:0e:c6:e8:46:05:b8:b2:
1e:2b:63:36:70:1a:64:6f:94:0a:69:82:de:3d:4f:
65:b4:f0:83:e4:bf:af:db:13:3c:74:49:8c:0e:92:
44:f2:3e:f2:61:24:22:72:94:ca:5a:2e:41:7d:9e:
80:bd:b2:59:c0:41:45:ba:67:b4:24:77:34:f6:02:
14:89:5a:9b:e1:47:99:aa:06:ce:32:8c:26:f1:3d:
ee:f5:32:7b:17:1d:56:30:a5:df:2a:27:6b:33:c1:
52:a7:ca:6d:fa:a1:fb:d7:46:61:e8:88:65:e4:67:
95:04:28:54:2a:a1:97:54:35:db:e8:72:46:59:d0:
2b:d2:2a:39:f4:2e:3c:2e:39:58:71:05:b7:3f:be:
18:1c:9f:aa:86:e0:55:9e:fe:56:f9:ad:f2:0e:5d:
80:cd:ae:47:8f:68:01:71:c7:9a:37:08:9d:4b:12:
0b:8d:3e:78:60:18:36:33:8e:a9:92:a1:db:88:d9:
f7:ea:6a:fe:1c:6e:1b:62:ac:2b:c3:e3:55:ab:55:
76:d4:10:8b:c0:e2:f5:20:21:68:05:ff:91:20:bf:
59:55:cf:d1:6d:96:58:4f:11:a3:04:82:18:8b:7d:
25:c4:28:e4:a9:cb:f2:17:a5:31:a1:7e:ae:69:31:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:BD:D6:DF:E2:6C:AE:91:6A:EE:B0:BB:B8:BC:B5:D3:8E:BA:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFE9F08C8C0511F18599F5D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:81:17:79:63:41:2b:b0:7a:dc:f5:69:8f:63:65:79:27:d9:
11:31:46:bc:4e:69:9e:d9:a4:23:72:8b:c6:84:10:39:b0:a9:
be:76:6b:df:ca:be:92:6b:63:7f:a2:ab:bd:93:dd:e7:d7:b1:
f3:b9:58:8a:2e:ca:d1:20:2d:ea:99:30:6e:b5:6f:8c:47:34:
e9:26:da:4f:a1:df:6c:c9:ad:18:59:ad:a6:81:73:9a:1b:3f:
a3:49:fe:1f:89:f5:7c:97:0a:5a:61:f5:13:aa:25:05:90:4b:
33:d0:e6:ac:05:47:19:e9:17:dc:db:f5:6a:e2:c8:26:a0:2e:
2b:54:d1:c2:d2:0f:0e:1d:85:f9:86:bd:0a:13:dd:62:0f:77:
c2:87:c1:33:cc:6e:f2:c7:0e:02:58:41:eb:38:b6:09:73:4d:
55:d9:55:9b:ca:c9:cb:97:a0:36:70:ef:fc:b5:2b:c1:26:e9:
06:61:c4:0c:e3:07:a2:63:51:23:3e:19:77:90:58:1b:4a:89:
ac:f7:bf:ad:c5:05:1b:6f:89:ff:e7:f9:9a:04:39:ed:7f:35:
5d:2e:27:87:51:ce:4b:38:21:8c:73:86:e4:8e:ab:a4:e5:b4:
cd:54:e0:b6:ef:9d:4d:7d:92:62:49:ee:fa:e4:be:cd:3e:84:
41:30:89:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdvoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzMwMTEwMTE4WhcNMjYxMDA0MTEwMTE4WjAYMRYw
FAYDVQQDEw02YTZiMmYwMi1mOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyLBmH2Rhlw7G6EYFuLIeK2M2cBpkb5QKaYLePU9ltPCD5L+v2xM8dEmM
DpJE8j7yYSQicpTKWi5BfZ6AvbJZwEFFume0JHc09gIUiVqb4UeZqgbOMowm8T3u
9TJ7Fx1WMKXfKidrM8FSp8pt+qH710Zh6Ihl5GeVBChUKqGXVDXb6HJGWdAr0io5
9C48LjlYcQW3P74YHJ+qhuBVnv5W+a3yDl2Aza5Hj2gBcceaNwidSxILjT54YBg2
M46pkqHbiNn36mr+HG4bYqwrw+NVq1V21BCLwOL1ICFoBf+RIL9ZVc/RbZZYTxGj
BIIYi30lxCjkqcvyF6UxoX6uaTHoaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK1Z
vdbf4myukWrusLu4vLXTjrrtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkU5RjA4QzhDMDUxMUYxODU5OUY1RDJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4HMA0GCSqGSIb3DQEB
CwUAA4IBAQCbgRd5Y0ErsHrc9WmPY2V5J9kRMUa8Tmme2aQjcovGhBA5sKm+dmvf
yr6Sa2N/oqu9k93n17HzuViKLsrRIC3qmTButW+MRzTpJtpPod9sya0YWa2mgXOa
Gz+jSf4fifV8lwpaYfUTqiUFkEsz0OasBUcZ6Rfc2/Vq4sgmoC4rVNHC0g8OHYX5
hr0KE91iD3fCh8EzzG7yxw4CWEHrOLYJc01V2VWbysnLl6A2cO/8tSvBJukGYcQM
4weiY1EjPhl3kFgbSoms97+txQUbb4n/5/maBDntfzVdLieHUc5LOCGMc4bkjquk
5bTNVOC2751NfZJiSe765L7NPoRBMIn2
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:58 2026 by rpki-client