Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF34B3C707711F1AF183D0ACF1D38B0.roa
File: 4AF34B3C707711F1AF183D0ACF1D38B0.roa (raw, json)
Hash identifier: 0qd3Ul2nEB35vl7igNq0sC8s5K6pgTMi0hKvsFSzBrY=
Subject key identifier: 4B:25:0F:4B:E6:DC:9C:0D:41:F7:61:B2:13:B1:45:75:5F:E0:A9:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D526
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF34B3C707711F1AF183D0ACF1D38B0.roa
Signing time: Thu 25 Jun 2026 09:21:49 +0000
ROA not before: Thu 25 Jun 2026 09:21:44 +0000
ROA not after: Sat 01 Aug 2026 09:21:44 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.205.247.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120102 (0x1d526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:21:44 2026 GMT
Not After : Aug 1 09:21:44 2026 GMT
Subject: CN=6a3cf32d-8e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:db:4b:82:b2:99:d7:f9:1e:92:65:c1:c4:
10:f5:9b:9f:f1:7d:ac:a0:1f:f1:d5:6e:6b:05:f2:
86:c4:78:17:01:07:94:26:9a:6e:83:2a:da:34:25:
91:fe:3e:9c:66:72:df:7f:0b:f1:44:fc:d0:ca:ef:
a0:a0:14:4f:1f:ee:07:27:76:b0:26:b0:fa:d9:24:
70:ad:66:0e:5f:e4:85:aa:0c:db:ad:ba:60:ce:a8:
d5:56:50:14:2b:10:ff:bf:ae:cc:8e:71:04:01:ef:
f6:cc:ec:7f:f2:8a:09:66:98:6c:79:d0:a4:5a:95:
89:9a:59:55:23:58:0e:29:3e:89:e2:6f:c6:64:db:
7d:52:ba:fd:3a:5d:b5:67:a4:48:fb:73:b1:fe:61:
5a:05:e1:25:51:45:c2:a3:5e:ef:0a:ba:75:57:26:
6c:80:56:db:46:02:6a:b1:a5:6f:54:64:95:35:d5:
18:30:e8:bb:10:f3:a4:b9:7a:85:b1:d0:72:9d:21:
e7:e1:8d:f4:2e:62:c7:e7:82:19:b5:c1:a2:c3:5b:
44:df:c3:6e:f6:65:fa:b3:b1:c3:7d:81:44:15:04:
49:90:01:11:c5:83:65:c6:32:4b:cb:ec:44:69:29:
4d:82:3c:7e:b8:d9:86:7e:37:1d:2f:fa:80:ca:a6:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:0F:4B:E6:DC:9C:0D:41:F7:61:B2:13:B1:45:75:5F:E0:A9:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF34B3C707711F1AF183D0ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/22
154.223.198.0-154.223.203.255
Signature Algorithm: sha256WithRSAEncryption
21:8f:d3:69:39:2c:aa:f1:17:1f:29:7d:1f:bb:48:cf:4e:3f:
a3:f9:34:27:0a:f8:31:70:6d:97:23:74:a1:92:5c:a6:5b:31:
c7:9b:73:f2:e1:4c:a1:26:92:0d:97:c9:fe:3f:50:4a:a5:8f:
1a:86:1f:e3:80:75:51:7d:50:34:6a:58:0b:12:ca:23:f4:85:
c1:09:f7:48:46:89:70:0d:d6:b8:0a:8b:92:70:71:09:7b:4b:
6f:af:fc:07:d1:9f:c6:61:f1:dd:66:98:19:43:c3:b9:18:af:
c7:32:17:45:eb:c4:31:86:b1:75:bb:c3:1a:c6:45:cc:5a:9b:
84:db:55:7a:4f:f8:18:a4:86:b5:dc:1d:a3:49:02:63:c5:30:
cc:b9:d8:32:ef:9a:69:b7:91:4f:f1:cf:72:7f:a0:f1:48:2f:
1d:49:1f:7e:db:5a:d2:eb:37:43:e3:53:2b:f0:8c:59:25:56:
dd:fd:48:dd:9f:05:be:2f:b7:ca:ad:5e:b9:9a:f1:12:f0:e7:
0f:b8:56:50:30:e3:2d:b7:2a:22:39:8d:8b:d5:ea:1f:ef:a3:
1a:77:e9:8f:00:34:3d:ec:b5:9a:7e:f4:69:53:33:45:a5:92:
ab:e1:0d:5a:44:00:f4:5a:32:5f:8c:1a:30:e1:87:5c:75:3c:
44:8d:68:a9
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdUmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI1MDkyMTQ0WhcNMjYwODAxMDkyMTQ0WjAYMRYw
FAYDVQQDEw02YTNjZjMyZC04ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu0/bS4Kymdf5HpJlwcQQ9Zuf8X2soB/x1W5rBfKGxHgXAQeUJppugyra
NCWR/j6cZnLffwvxRPzQyu+goBRPH+4HJ3awJrD62SRwrWYOX+SFqgzbrbpgzqjV
VlAUKxD/v67MjnEEAe/2zOx/8ooJZphsedCkWpWJmllVI1gOKT6J4m/GZNt9Urr9
Ol21Z6RI+3Ox/mFaBeElUUXCo17vCrp1VyZsgFbbRgJqsaVvVGSVNdUYMOi7EPOk
uXqFsdBynSHn4Y30LmLH54IZtcGiw1tE38Nu9mX6s7HDfYFEFQRJkAERxYNlxjJL
y+xEaSlNgjx+uNmGfjcdL/qAyqZlUwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEsl
D0vm3JwNQfdhshOxRXVf4KlPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QUYzNEIzQzcwNzcxMUYxQUYxODNEMEFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCms30MAwDBAGa38YDBAKa
38gwDQYJKoZIhvcNAQELBQADggEBACGP02k5LKrxFx8pfR+7SM9OP6P5NCcK+DFw
bZcjdKGSXKZbMcebc/LhTKEmkg2Xyf4/UEqljxqGH+OAdVF9UDRqWAsSyiP0hcEJ
90hGiXAN1rgKi5JwcQl7S2+v/AfRn8Zh8d1mmBlDw7kYr8cyF0XrxDGGsXW7wxrG
Rcxam4TbVXpP+BikhrXcHaNJAmPFMMy52DLvmmm3kU/xz3J/oPFILx1JH37bWtLr
N0PjUyvwjFklVt39SN2fBb4vt8qtXrma8RLw5w+4VlAw4y23KiI5jYvV6h/voxp3
6Y8AND3stZp+9GlTM0WlkqvhDVpEAPRaMl+MGjDhh1x1PESNaKk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:43 2026 by rpki-client