Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/774BD18C88BD11F1881014C9CE1D38B0.roa
File: 774BD18C88BD11F1881014C9CE1D38B0.roa (raw, json)
Hash identifier: +2pbl/WR7R2lswFpZGEQG3VXL3iA4eAqOOUDHG796hw=
Subject key identifier: 8E:FA:0A:3A:AF:D9:76:77:BB:90:5B:32:0F:63:78:30:BE:5A:01:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/774BD18C88BD11F1881014C9CE1D38B0.roa
Signing time: Sun 26 Jul 2026 06:44:36 +0000
ROA not before: Sun 26 Jul 2026 06:44:32 +0000
ROA not after: Fri 04 Sep 2026 06:44:32 +0000
asID: 20326
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121672 (0x1db48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 06:44:32 2026 GMT
Not After : Sep 4 06:44:32 2026 GMT
Subject: CN=6a65acd4-e5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:81:74:1a:f9:6f:93:09:44:02:8d:bb:01:
74:b7:34:53:96:3c:f5:bf:e6:5e:9a:99:1e:58:39:
10:13:99:b3:49:00:49:5a:ea:b2:4f:b6:dd:ed:05:
24:06:da:39:0b:44:ec:66:7e:65:23:fb:4a:b1:96:
46:45:db:a0:b0:0d:8c:65:72:38:31:df:ba:45:1b:
b8:c4:87:48:9f:be:02:ce:46:78:de:d3:e2:63:8e:
82:45:04:ef:6a:76:04:f3:34:ac:9e:1b:76:e9:98:
9d:22:51:41:67:ed:e7:ed:a2:7e:b0:a5:38:22:f2:
35:49:c6:a7:13:66:e1:d4:91:f5:d5:e2:33:70:b2:
34:f6:36:a9:26:1a:0d:02:f4:7e:c6:b9:29:60:4d:
e2:ab:4d:a1:9b:1c:e6:09:93:98:cd:81:84:a6:12:
07:71:20:c6:c7:04:df:1e:47:99:8c:bd:e1:9a:45:
16:e6:9a:69:61:9b:ea:37:14:2a:e7:af:bb:9f:9b:
a5:0b:e4:72:f5:95:65:ac:d2:e6:56:6e:c5:f2:c4:
a6:ff:42:f9:2b:40:40:dc:ed:7a:b1:b7:9a:86:6b:
93:ca:f5:89:6f:12:a3:df:33:1f:ba:62:61:48:2e:
c2:19:4c:62:ce:2e:c7:bc:24:13:78:ad:3f:1f:ef:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:0A:3A:AF:D9:76:77:BB:90:5B:32:0F:63:78:30:BE:5A:01:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/774BD18C88BD11F1881014C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
15:85:20:43:b5:94:92:5b:08:27:a8:d7:95:c7:34:7a:a7:0d:
f7:54:af:30:6a:fa:dd:a8:17:1e:fd:01:62:8e:f3:61:e0:dc:
47:8c:77:73:38:3d:f9:3a:00:be:35:b4:b5:f9:6e:5d:43:a5:
ca:1a:07:1b:67:af:6a:98:2b:80:17:52:ab:14:d6:f7:ca:91:
c1:ce:be:f7:1b:d1:b1:b6:ce:01:49:4c:53:ff:c7:7b:56:b9:
30:31:bf:85:f2:62:18:56:3a:4c:db:e2:c5:98:fb:f0:e2:e0:
24:26:ac:ac:4b:9d:ee:12:a8:71:9d:cb:8a:53:a6:b2:60:b6:
b7:e4:21:d6:f0:9d:8b:77:a2:99:f4:fe:8f:5c:c5:dd:f5:b5:
5d:8b:43:cf:bb:5c:52:d8:cf:d1:e2:f7:a3:e3:3a:13:b5:00:
aa:db:37:b6:d0:1f:96:c1:dd:1d:54:22:ef:44:a2:dd:d8:c1:
23:dc:f6:3c:e2:96:10:be:79:61:a8:3a:92:7c:0f:f1:b3:aa:
2e:c8:6c:e9:a7:a9:d6:13:0f:3b:48:ac:d2:06:f5:15:7a:c0:
69:e5:d4:d3:5c:ef:78:ca:41:63:51:dc:d8:dd:cf:7e:e5:ab:
56:34:f3:42:1a:51:54:f5:71:00:1e:48:e4:0a:71:55:a5:34:
6d:f9:fc:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdtIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI2MDY0NDMyWhcNMjYwOTA0MDY0NDMyWjAYMRYw
FAYDVQQDEw02YTY1YWNkNC1lNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyy2BdBr5b5MJRAKNuwF0tzRTljz1v+ZempkeWDkQE5mzSQBJWuqyT7bd
7QUkBto5C0TsZn5lI/tKsZZGRdugsA2MZXI4Md+6RRu4xIdIn74CzkZ43tPiY46C
RQTvanYE8zSsnht26ZidIlFBZ+3n7aJ+sKU4IvI1ScanE2bh1JH11eIzcLI09jap
JhoNAvR+xrkpYE3iq02hmxzmCZOYzYGEphIHcSDGxwTfHkeZjL3hmkUW5pppYZvq
NxQq56+7n5ulC+Ry9ZVlrNLmVm7F8sSm/0L5K0BA3O16sbeahmuTyvWJbxKj3zMf
umJhSC7CGUxizi7HvCQTeK0/H+8LfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI76
Cjqv2XZ3u5BbMg9jeDC+WgGvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NzRCRDE4Qzg4QkQxMUYxODgxMDE0QzlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGjMA0GCSqGSIb3DQEB
CwUAA4IBAQAVhSBDtZSSWwgnqNeVxzR6pw33VK8wavrdqBce/QFijvNh4NxHjHdz
OD35OgC+NbS1+W5dQ6XKGgcbZ69qmCuAF1KrFNb3ypHBzr73G9Gxts4BSUxT/8d7
VrkwMb+F8mIYVjpM2+LFmPvw4uAkJqysS53uEqhxncuKU6ayYLa35CHW8J2Ld6KZ
9P6PXMXd9bVdi0PPu1xS2M/R4vej4zoTtQCq2ze20B+Wwd0dVCLvRKLd2MEj3PY8
4pYQvnlhqDqSfA/xs6ouyGzpp6nWEw87SKzSBvUVesBp5dTTXO94ykFjUdzY3c9+
5atWNPNCGlFU9XEAHkjkCnFVpTRt+fy/
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:54:50 2026 by rpki-client