Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72663EB27F5011F1B850DB0DCF1D38B0.roa
File: 72663EB27F5011F1B850DB0DCF1D38B0.roa (raw, json)
Hash identifier: 2SfPoOrPSgqKTr5wJtfxRERkER3xMVMVynKiuzO57hs=
Subject key identifier: EC:E7:2F:21:58:F6:3E:A0:18:04:64:99:98:D4:47:5C:50:D6:7B:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72663EB27F5011F1B850DB0DCF1D38B0.roa
Signing time: Tue 14 Jul 2026 06:51:32 +0000
ROA not before: Tue 14 Jul 2026 06:51:27 +0000
ROA not after: Sun 16 Aug 2026 06:51:27 +0000
asID: 22773
IP address blocks: 154.82.3.0/24 maxlen: 24
154.82.4.0/24 maxlen: 24
154.82.5.0/24 maxlen: 24
154.82.6.0/24 maxlen: 24
154.82.7.0/24 maxlen: 24
154.82.8.0/24 maxlen: 24
154.82.9.0/24 maxlen: 24
154.82.10.0/24 maxlen: 24
154.82.11.0/24 maxlen: 24
154.82.12.0/24 maxlen: 24
154.82.13.0/24 maxlen: 24
154.82.14.0/24 maxlen: 24
154.82.15.0/24 maxlen: 24
154.85.12.0/24 maxlen: 24
154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.94.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121016 (0x1d8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 06:51:27 2026 GMT
Not After : Aug 16 06:51:27 2026 GMT
Subject: CN=6a55dc74-88c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:8b:d7:3d:fd:45:db:4b:90:0d:dc:04:df:
be:3c:17:b1:71:0c:76:ec:5e:b0:83:eb:e1:a1:76:
7c:5a:24:4d:94:35:6c:18:e9:07:44:2d:49:e8:c5:
f2:6b:3f:3f:bf:ba:5d:bd:c5:0a:b0:8d:86:d4:9e:
e4:0b:71:f8:a0:f7:24:0b:73:28:41:40:f8:81:12:
d2:b0:74:61:43:b7:89:13:56:85:70:b5:1c:34:9b:
d2:cc:15:6a:0c:4a:28:78:a4:9f:7b:ed:96:9d:b7:
a1:8a:41:3f:90:08:7c:68:aa:e4:35:03:b5:01:b5:
54:d1:f3:c1:aa:23:aa:e3:59:b1:c1:1a:ec:73:0e:
7a:6b:aa:ec:4f:33:05:c5:20:5b:ec:db:13:59:a4:
c8:0e:b8:57:01:e4:a2:7a:ae:b4:c3:ce:29:09:25:
31:ab:70:f3:6a:b1:ef:11:59:3f:2c:e5:cf:8c:fa:
04:71:7f:0c:ba:d4:9a:09:ce:ea:f0:5a:bc:22:49:
72:c7:52:8b:82:83:91:eb:d8:2b:e4:77:61:eb:1c:
ec:82:f9:f2:11:23:69:79:84:fc:54:c6:b9:0a:fa:
cb:eb:58:7b:8c:fa:01:9b:25:9f:76:f3:9b:4f:38:
13:52:10:79:00:dd:d0:08:5e:ad:2b:b9:b9:8b:67:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:2F:21:58:F6:3E:A0:18:04:64:99:98:D4:47:5C:50:D6:7B:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72663EB27F5011F1B850DB0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.3.0-154.82.15.255
154.85.12.0/24
154.85.107.0-154.85.111.255
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
42:a8:b7:88:cd:4c:0e:ba:22:c8:64:90:a1:24:de:a5:de:06:
65:e8:05:be:54:37:dc:75:23:18:67:0a:8d:e1:d7:16:ba:ad:
77:45:64:e9:1d:ab:fe:19:2c:f6:bb:98:1f:60:70:45:e8:ee:
4b:a3:68:84:91:cd:9c:01:5a:fc:f3:df:32:f2:18:3b:59:aa:
9b:85:46:94:5e:c6:26:c9:3a:71:7d:41:77:23:f1:59:08:4a:
2b:6e:d6:1a:b8:51:82:aa:22:e3:54:0c:79:1a:9c:c2:96:1f:
fe:ed:46:92:ca:e1:c1:a4:b2:e9:e9:2a:d6:c9:a4:88:bc:4d:
37:82:7d:ff:e7:78:ff:f0:f2:91:50:de:ed:1f:8a:29:8d:9d:
8c:91:b9:9f:f4:c3:92:eb:59:0d:1a:d2:58:34:1a:21:4e:7b:
a2:fa:ca:05:4e:28:7e:2f:6b:23:52:d7:fd:7e:07:22:09:d7:
73:5b:2c:aa:02:df:b9:1b:e2:f3:a8:40:ce:2e:b8:d0:b1:e9:
80:d2:c5:10:0c:e0:ad:75:ec:d5:8d:00:5c:09:f0:36:d1:98:
14:dd:52:61:f3:35:ff:93:de:dc:62:ac:60:4b:2d:b7:a4:12:
8e:df:7b:54:45:4a:81:63:e1:be:57:60:a0:6a:73:f9:22:2f:
f5:2b:18:bf
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAdi4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDY1MTI3WhcNMjYwODE2MDY1MTI3WjAYMRYw
FAYDVQQDEw02YTU1ZGM3NC04OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtrCL1z39RdtLkA3cBN++PBexcQx27F6wg+vhoXZ8WiRNlDVsGOkHRC1J
6MXyaz8/v7pdvcUKsI2G1J7kC3H4oPckC3MoQUD4gRLSsHRhQ7eJE1aFcLUcNJvS
zBVqDEooeKSfe+2WnbehikE/kAh8aKrkNQO1AbVU0fPBqiOq41mxwRrscw56a6rs
TzMFxSBb7NsTWaTIDrhXAeSieq60w84pCSUxq3DzarHvEVk/LOXPjPoEcX8MutSa
Cc7q8Fq8Iklyx1KLgoOR69gr5Hdh6xzsgvnyESNpeYT8VMa5CvrL61h7jPoBmyWf
dvObTzgTUhB5AN3QCF6tK7m5i2c/6QIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFOzn
LyFY9j6gGARkmZjUR1xQ1nujMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MjY2M0VCMjdGNTAxMUYxQjg1MERCMERDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACaUgMDBASaUgADBACa
VQwwDAMEAJpVawMEBJpVYAMEBZpewDANBgkqhkiG9w0BAQsFAAOCAQEAQqi3iM1M
DroiyGSQoSTepd4GZegFvlQ33HUjGGcKjeHXFrqtd0Vk6R2r/hks9ruYH2BwReju
S6NohJHNnAFa/PPfMvIYO1mqm4VGlF7GJsk6cX1BdyPxWQhKK27WGrhRgqoi41QM
eRqcwpYf/u1GksrhwaSy6ekq1smkiLxNN4J9/+d4//DykVDe7R+KKY2djJG5n/TD
kutZDRrSWDQaIU57ovrKBU4ofi9rI1LX/X4HIgnXc1ssqgLfuRvi86hAzi640LHp
gNLFEAzgrXXs1Y0AXAnwNtGYFN1SYfM1/5Pe3GKsYEstt6QSjt97VEVKgWPhvldg
oGpz+SIv9SsYvw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:56 2026 by rpki-client