Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76A46ECA880311F197DF32D6CE1D38B0.roa
File: 76A46ECA880311F197DF32D6CE1D38B0.roa (raw, json)
Hash identifier: fIpAHTTyKYjp1hSkuPcUZQzlmYcC3k1KATRV5abXHVM=
Subject key identifier: 58:67:28:3A:88:CD:98:19:02:FF:BE:6B:42:52:55:06:4E:46:8B:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76A46ECA880311F197DF32D6CE1D38B0.roa
Signing time: Sat 25 Jul 2026 08:33:08 +0000
ROA not before: Sat 25 Jul 2026 08:33:03 +0000
ROA not after: Thu 27 Aug 2026 08:33:03 +0000
asID: 984
IP address blocks: 154.200.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121655 (0x1db37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:33:03 2026 GMT
Not After : Aug 27 08:33:03 2026 GMT
Subject: CN=6a6474c4-5540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:30:f8:fe:34:b5:c9:b0:7a:41:40:16:ae:
8e:f6:00:06:93:b1:a5:cc:bc:4b:af:1a:bd:10:81:
55:9b:e5:d6:e3:62:9c:aa:69:4d:9e:dc:b2:c1:f1:
e4:34:5b:d1:75:4f:b4:45:26:8d:94:43:61:6b:d3:
a2:e0:48:ad:a7:39:49:a4:d5:fa:c7:70:ca:ea:7f:
a4:d3:f3:4e:be:87:73:29:e0:40:dc:03:30:ca:05:
22:1b:86:53:6e:45:12:3f:5b:81:fc:73:78:74:9b:
a5:78:4c:42:04:10:a7:cb:6c:f7:36:1b:e1:9b:6a:
bd:e9:88:c5:41:2c:ba:c7:8c:4a:fd:97:9a:d9:b4:
e2:d1:2a:32:e6:d4:e7:b2:e5:78:78:cd:7c:66:75:
f9:94:d5:fc:21:4d:14:71:8f:80:a1:f6:c8:fb:7c:
39:05:28:ca:c2:bb:a8:61:9d:4f:cd:a1:d6:42:87:
e0:2e:b5:2f:2c:2e:09:dc:cf:9d:21:6e:ae:90:3b:
95:63:45:9d:32:cd:a6:fc:85:51:c8:e5:aa:a9:e6:
82:09:78:43:da:dc:a7:38:a6:54:3f:a9:6d:d1:e7:
49:9a:cb:94:24:f7:00:7b:02:12:3c:d0:42:7e:e0:
b3:1e:5c:b5:b0:91:24:d1:e6:99:49:53:6f:7c:84:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:28:3A:88:CD:98:19:02:FF:BE:6B:42:52:55:06:4E:46:8B:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76A46ECA880311F197DF32D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.50.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a1:21:76:3e:c2:0c:31:74:bd:bb:a6:30:33:77:2f:05:08:
d6:bf:2a:b3:30:4f:bd:69:08:a3:c1:26:4f:48:6a:d4:cb:02:
96:6b:90:f1:65:f1:95:58:9b:ff:b3:9c:a7:9d:48:79:39:de:
5e:46:99:0c:6a:a1:ca:90:84:0e:50:cc:0f:f0:62:be:dc:3a:
9a:70:f4:2e:a0:f2:b2:b7:fb:66:02:3f:42:66:28:13:61:a1:
be:4a:f7:10:ee:04:05:fb:fe:85:77:a6:3c:de:91:ce:02:d9:
05:9a:92:30:fb:0f:d4:54:00:25:16:6d:df:9a:0d:81:da:b2:
a3:c4:c2:4e:46:1e:23:bd:42:db:b3:3f:9d:cb:e6:e8:b7:6d:
50:a8:a0:e1:b7:36:d4:c1:18:3d:ba:f1:34:b1:91:c8:ce:0d:
81:d2:ea:d1:b0:ce:8e:31:dd:0a:52:11:ee:00:36:34:64:6e:
26:f9:f1:53:56:19:11:68:b4:ff:11:39:b9:cd:26:8e:46:35:
f9:4e:5f:57:e2:2a:2c:3b:37:19:dc:24:a0:69:47:a3:c1:85:
af:a2:41:48:85:ac:1d:7c:bf:c7:e1:12:3f:a1:c1:31:2c:ac:
58:e2:6c:5c:47:36:91:4e:28:50:76:6f:5b:1a:71:e2:a9:8f:
40:9f:fb:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAds3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI1MDgzMzAzWhcNMjYwODI3MDgzMzAzWjAYMRYw
FAYDVQQDEw02YTY0NzRjNC01NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3oMw+P40tcmwekFAFq6O9gAGk7GlzLxLrxq9EIFVm+XW42KcqmlNntyy
wfHkNFvRdU+0RSaNlENha9Oi4EitpzlJpNX6x3DK6n+k0/NOvodzKeBA3AMwygUi
G4ZTbkUSP1uB/HN4dJuleExCBBCny2z3Nhvhm2q96YjFQSy6x4xK/Zea2bTi0Soy
5tTnsuV4eM18ZnX5lNX8IU0UcY+AofbI+3w5BSjKwruoYZ1PzaHWQofgLrUvLC4J
3M+dIW6ukDuVY0WdMs2m/IVRyOWqqeaCCXhD2tynOKZUP6lt0edJmsuUJPcAewIS
PNBCfuCzHly1sJEk0eaZSVNvfIS+WwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFhn
KDqIzZgZAv++a0JSVQZORoveMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NkE0NkVDQTg4MDMxMUYxOTdERjMyRDZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsgyMA0GCSqGSIb3DQEB
CwUAA4IBAQCDoSF2PsIMMXS9u6YwM3cvBQjWvyqzME+9aQijwSZPSGrUywKWa5Dx
ZfGVWJv/s5ynnUh5Od5eRpkMaqHKkIQOUMwP8GK+3DqacPQuoPKyt/tmAj9CZigT
YaG+SvcQ7gQF+/6Fd6Y83pHOAtkFmpIw+w/UVAAlFm3fmg2B2rKjxMJORh4jvULb
sz+dy+bot21QqKDhtzbUwRg9uvE0sZHIzg2B0urRsM6OMd0KUhHuADY0ZG4m+fFT
VhkRaLT/ETm5zSaORjX5Tl9X4iosOzcZ3CSgaUejwYWvokFIhawdfL/H4RI/ocEx
LKxY4mxcRzaRTihQdm9bGnHiqY9An/tL
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:18 2026 by rpki-client