Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DD3292713211F1B23617FACE1D38B0.roa
File: 26DD3292713211F1B23617FACE1D38B0.roa (raw, json)
Hash identifier: 7Y6g0GuftM4wvAXGPV8D95GU1aqsJcE+mYJ1tqjjnQw=
Subject key identifier: B6:6A:62:BC:FF:02:A5:27:EC:96:50:E0:86:62:79:5C:EA:3E:F1:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D541
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DD3292713211F1B23617FACE1D38B0.roa
Signing time: Fri 26 Jun 2026 07:39:24 +0000
ROA not before: Fri 26 Jun 2026 07:39:20 +0000
ROA not after: Mon 31 Aug 2026 07:39:20 +0000
asID: 399077
IP address blocks: 154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120129 (0x1d541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:39:20 2026 GMT
Not After : Aug 31 07:39:20 2026 GMT
Subject: CN=6a3e2cac-0b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:37:c9:a4:c9:37:2e:18:78:96:73:c5:ab:
e7:06:de:e9:c0:dc:08:82:25:36:b1:7e:c1:f7:e5:
73:b6:a2:f8:24:ff:2a:14:b9:e3:67:db:b2:72:b6:
a4:03:1b:d2:7f:1d:f0:3f:03:8b:c4:b2:f8:51:60:
e5:31:9f:b3:df:b3:73:dd:d9:b0:c7:6d:85:70:5a:
46:5f:11:9c:bb:ca:d1:20:52:ff:20:54:24:69:4c:
24:41:33:13:a1:00:e4:e4:02:44:7a:5e:db:23:9d:
cc:5e:b8:b5:88:ac:ac:be:33:57:3a:2d:dc:92:58:
91:fa:2a:a6:7b:60:5e:b7:3e:bb:64:b9:54:26:ed:
9b:ed:33:80:64:d9:9f:2a:d8:10:d9:58:ba:79:5b:
0c:6d:74:32:7b:ef:b0:8e:b4:98:da:b1:f0:82:71:
9f:ea:58:0e:0c:fe:aa:f6:91:30:50:50:5d:ac:80:
94:2a:c8:19:4d:32:e5:27:cc:e0:de:d7:0e:85:55:
4c:e6:67:f6:bd:64:4c:6a:de:47:70:06:db:57:02:
33:b9:f4:7d:d2:65:47:13:a7:00:98:be:13:dd:7b:
ef:c0:ac:ca:a9:fe:96:d6:a0:86:ec:c2:34:35:3c:
75:0d:9d:be:cb:0e:1b:55:58:55:4a:2c:06:3f:28:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:62:BC:FF:02:A5:27:EC:96:50:E0:86:62:79:5C:EA:3E:F1:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DD3292713211F1B23617FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.71.0-154.91.80.255
Signature Algorithm: sha256WithRSAEncryption
61:9d:b4:b9:ef:36:da:f5:e8:31:58:91:53:b4:c4:ea:97:8d:
44:a6:91:5b:78:c4:5c:0b:f4:27:48:cb:25:58:d2:da:70:39:
cf:8e:e0:45:e2:c1:09:32:89:db:fb:a2:98:fb:1a:c9:c0:29:
dd:14:7c:93:a5:d2:82:d1:41:52:f8:1e:de:05:30:a5:66:3c:
81:2c:19:04:6c:2d:59:83:2e:a2:86:6c:29:8f:35:e1:cb:55:
50:77:c7:80:6f:4b:88:0d:24:0e:71:c6:16:39:13:6a:08:3b:
67:ca:af:0b:c2:5f:ad:9b:b3:b2:76:38:f3:10:40:aa:fc:01:
f0:2f:3e:f3:c9:3a:ec:47:94:70:11:be:17:ac:28:99:fd:b9:
8c:a7:b4:e1:0a:9c:0b:9c:c2:2e:00:7b:18:36:44:d5:0f:59:
99:28:aa:cd:2f:60:03:26:e8:8a:ef:bc:40:7c:21:dc:02:b1:
09:30:89:7a:3e:9c:02:04:f6:47:71:96:94:8c:04:89:ef:88:
85:f3:ef:f1:f0:1c:8a:b1:56:bb:cf:02:6f:68:fb:7e:c2:44:
52:27:4a:8e:54:3e:8f:eb:0d:66:2d:08:d6:8c:7b:c4:48:cf:
fb:1c:27:2f:0c:68:11:2f:e6:94:99:75:5f:53:5a:7a:dc:03:
94:09:83:0b
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdVBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MDczOTIwWhcNMjYwODMxMDczOTIwWjAYMRYw
FAYDVQQDEw02YTNlMmNhYy0wYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyhU3yaTJNy4YeJZzxavnBt7pwNwIgiU2sX7B9+VztqL4JP8qFLnjZ9uy
crakAxvSfx3wPwOLxLL4UWDlMZ+z37Nz3dmwx22FcFpGXxGcu8rRIFL/IFQkaUwk
QTMToQDk5AJEel7bI53MXri1iKysvjNXOi3ckliR+iqme2Betz67ZLlUJu2b7TOA
ZNmfKtgQ2Vi6eVsMbXQye++wjrSY2rHwgnGf6lgODP6q9pEwUFBdrICUKsgZTTLl
J8zg3tcOhVVM5mf2vWRMat5HcAbbVwIzufR90mVHE6cAmL4T3XvvwKzKqf6W1qCG
7MI0NTx1DZ2+yw4bVVhVSiwGPyil8wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLZq
Yrz/AqUn7JZQ4IZieVzqPvEjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNkREMzI5MjcxMzIxMUYxQjIzNjE3RkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaW0cDBACaW1AwDQYJ
KoZIhvcNAQELBQADggEBAGGdtLnvNtr16DFYkVO0xOqXjUSmkVt4xFwL9CdIyyVY
0tpwOc+O4EXiwQkyidv7opj7GsnAKd0UfJOl0oLRQVL4Ht4FMKVmPIEsGQRsLVmD
LqKGbCmPNeHLVVB3x4BvS4gNJA5xxhY5E2oIO2fKrwvCX62bs7J2OPMQQKr8AfAv
PvPJOuxHlHARvhesKJn9uYyntOEKnAucwi4Aexg2RNUPWZkoqs0vYAMm6IrvvEB8
IdwCsQkwiXo+nAIE9kdxlpSMBInviIXz7/HwHIqxVrvPAm9o+37CRFInSo5UPo/r
DWYtCNaMe8RIz/scJy8MaBEv5pSZdV9TWnrcA5QJgws=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:59 2026 by rpki-client