Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8961AF96618411F1A7CB34EECE1D38B0.roa
File: 8961AF96618411F1A7CB34EECE1D38B0.roa (raw, json)
Hash identifier: eANZyTwMvBmZ+z4MzqFyw4ibOvP/8UEsuEpzS2CpEgs=
Subject key identifier: 8F:AF:D0:EE:C6:DD:0D:24:E6:30:59:2F:71:CD:DB:31:FA:1A:8B:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8961AF96618411F1A7CB34EECE1D38B0.roa
Signing time: Sat 06 Jun 2026 08:48:50 +0000
ROA not before: Sat 06 Jun 2026 08:48:45 +0000
ROA not after: Sun 12 Jul 2026 08:48:45 +0000
asID: 328608
IP address blocks: 154.88.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119287 (0x1d1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 08:48:45 2026 GMT
Not After : Jul 12 08:48:45 2026 GMT
Subject: CN=6a23def2-3f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:6b:89:a3:79:40:e8:0a:e8:c1:b8:28:20:
74:2b:40:78:a3:e0:23:69:1e:fb:53:a6:a5:fc:e3:
dd:d2:0e:8c:df:d5:47:6f:ad:74:fc:df:53:9d:9d:
6b:c1:91:e0:c3:31:0a:88:88:a5:a9:57:89:53:37:
46:7f:23:75:00:fb:55:9e:49:98:ac:63:0b:97:c8:
0e:a0:e3:fb:44:c7:d8:94:4f:f6:8b:5f:36:ee:f8:
f0:e9:0b:39:67:d3:de:be:c7:72:01:ff:a0:2d:3e:
13:a6:8d:18:2b:07:0f:43:1e:7d:bc:71:73:bb:e8:
34:63:05:8d:58:86:2a:cb:6f:61:01:31:af:21:93:
e5:47:f5:70:b2:c1:f2:8d:88:f2:cc:df:92:33:d8:
04:43:1e:9e:28:1f:2f:44:d1:49:be:ff:bc:75:fe:
36:83:66:8b:a8:67:96:8d:09:d1:ef:f8:3d:0d:15:
6c:4c:90:dd:0a:04:9e:59:87:31:ab:32:3a:95:02:
61:a6:62:ba:06:41:6a:67:02:a7:c5:24:ba:f9:44:
3b:3e:48:36:2f:ca:59:3b:1b:e4:71:b2:91:aa:46:
35:d8:02:3c:bd:ad:b7:64:cc:1e:e9:e7:f4:89:6f:
c6:e2:f4:0d:e8:59:9e:21:ba:d9:9e:38:92:15:ed:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:D0:EE:C6:DD:0D:24:E6:30:59:2F:71:CD:DB:31:FA:1A:8B:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8961AF96618411F1A7CB34EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.0.0/23
Signature Algorithm: sha256WithRSAEncryption
52:13:6a:d8:a4:63:4b:5e:12:14:06:48:cf:76:e2:2d:61:5c:
ca:85:d2:03:05:6e:82:c4:b0:ce:d7:c8:53:db:14:79:a8:a5:
32:a4:cf:de:5d:77:67:2d:9a:db:26:1c:7f:b0:5a:40:57:11:
c0:52:de:9d:c1:b4:af:20:16:2f:8c:e5:93:17:39:f2:30:e1:
d4:99:23:08:ed:07:2a:75:03:40:9b:6f:b5:58:e8:9c:a8:45:
a8:67:86:c4:87:01:f1:f8:6e:55:f9:a3:9e:31:b9:a5:bd:dc:
da:57:c5:90:25:7e:5a:0a:fd:72:6a:63:6c:10:bb:ad:41:21:
b1:52:1d:71:2c:4b:9a:2a:ad:c9:97:55:7c:67:dd:c6:3f:09:
dc:a4:17:3b:bb:c2:97:76:57:0f:2f:07:3d:19:64:ea:3a:2c:
6b:e1:26:f3:bf:4a:bf:36:f8:ac:41:e0:3f:62:41:c6:7f:58:
8d:46:6f:06:35:f1:a5:51:67:94:b5:a0:26:25:55:04:02:76:
69:5c:a5:4a:ff:11:b8:1b:1d:be:1d:87:18:33:54:32:b6:9f:
9b:31:99:6d:0d:13:18:fd:ad:6d:c7:13:90:2a:a7:d6:54:4a:
e7:fb:88:8b:ab:be:59:4a:43:02:7a:e0:37:34:0d:50:90:9a:
2d:5e:52:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdH3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDg0ODQ1WhcNMjYwNzEyMDg0ODQ1WjAYMRYw
FAYDVQQDEw02YTIzZGVmMi0zZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx7triaN5QOgK6MG4KCB0K0B4o+AjaR77U6al/OPd0g6M39VHb610/N9T
nZ1rwZHgwzEKiIilqVeJUzdGfyN1APtVnkmYrGMLl8gOoOP7RMfYlE/2i1827vjw
6Qs5Z9PevsdyAf+gLT4Tpo0YKwcPQx59vHFzu+g0YwWNWIYqy29hATGvIZPlR/Vw
ssHyjYjyzN+SM9gEQx6eKB8vRNFJvv+8df42g2aLqGeWjQnR7/g9DRVsTJDdCgSe
WYcxqzI6lQJhpmK6BkFqZwKnxSS6+UQ7Pkg2L8pZOxvkcbKRqkY12AI8va23ZMwe
6ef0iW/G4vQN6FmeIbrZnjiSFe3ocQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI+v
0O7G3Q0k5jBZL3HN2zH6GovtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTYxQUY5NjYxODQxMUYxQTdDQjM0RUVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlgAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSE2rYpGNLXhIUBkjPduItYVzKhdIDBW6CxLDO18hT2xR5qKUypM/e
XXdnLZrbJhx/sFpAVxHAUt6dwbSvIBYvjOWTFznyMOHUmSMI7QcqdQNAm2+1WOic
qEWoZ4bEhwHx+G5V+aOeMbmlvdzaV8WQJX5aCv1yamNsELutQSGxUh1xLEuaKq3J
l1V8Z93GPwncpBc7u8KXdlcPLwc9GWTqOixr4Sbzv0q/NvisQeA/YkHGf1iNRm8G
NfGlUWeUtaAmJVUEAnZpXKVK/xG4Gx2+HYcYM1Qytp+bMZltDRMY/a1txxOQKqfW
VErn+4iLq75ZSkMCeuA3NA1QkJotXlIe
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:46 2026 by rpki-client