Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7744C27484E511F19697FECDCE1D38B0.roa
File: 7744C27484E511F19697FECDCE1D38B0.roa (raw, json)
Hash identifier: YWizVUb/yDA1VG+EhxZjfbIoktX6Zx6VN1K7/sGF5SA=
Subject key identifier: C0:5F:6C:3F:A4:99:A0:10:85:C6:1B:77:91:22:3A:A0:44:C9:36:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7744C27484E511F19697FECDCE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:20:51 +0000
ROA not before: Tue 21 Jul 2026 09:20:47 +0000
ROA not after: Thu 27 Aug 2026 09:20:47 +0000
asID: 154177
IP address blocks: 154.205.151.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121446 (0x1da66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 09:20:47 2026 GMT
Not After : Aug 27 09:20:47 2026 GMT
Subject: CN=6a5f39f3-5097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:e1:61:92:d7:bc:47:bf:93:b1:3e:bc:a9:
87:95:3a:85:48:e4:d0:4d:c4:4c:76:52:5f:76:2a:
e2:8a:03:88:75:6d:ae:c0:17:78:cb:db:55:9d:40:
be:26:44:22:00:aa:96:1a:75:f6:fe:cc:5f:f7:c6:
02:73:e0:f7:3d:63:48:0a:69:07:10:78:9f:e9:1c:
d2:0d:80:8c:99:c8:59:5d:0e:fa:6b:c0:4e:fc:b0:
7b:de:e7:b4:74:8e:7c:6c:79:f2:bb:4e:ea:9c:ac:
50:b2:f8:7d:4d:51:01:9c:b1:5c:f5:c9:4d:56:91:
e1:7d:9d:fe:ad:c3:51:68:44:ee:59:a6:ab:ab:dc:
d0:e9:c4:57:b8:0d:17:55:de:90:50:23:e8:4a:d5:
23:a7:43:a7:65:73:93:e4:cf:b6:fa:5a:fb:cb:05:
05:63:60:27:d7:04:68:38:41:31:c8:54:16:a6:be:
55:30:3f:9c:57:35:8d:c8:36:a4:ee:20:b1:f9:7e:
2d:b8:ef:f2:c4:d6:64:a2:af:54:f3:7c:ff:5b:6d:
74:b7:1c:c1:1c:c4:2e:db:ba:2e:db:80:b9:6d:16:
3d:41:b9:8a:02:d2:fe:22:ae:ea:11:7a:f1:ba:ab:
fc:9c:4a:5a:8f:d9:7a:33:52:a2:8c:10:6d:b7:8b:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5F:6C:3F:A4:99:A0:10:85:C6:1B:77:91:22:3A:A0:44:C9:36:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7744C27484E511F19697FECDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.151.0-154.205.154.255
154.205.156.0/24
154.205.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:62:dd:39:58:9c:a3:24:01:75:f7:e0:4e:ac:47:be:f8:52:
6a:05:d4:07:55:a3:d9:f3:69:7c:78:4a:fe:97:a2:67:b4:11:
6b:9b:47:f2:03:4e:7e:83:4a:f6:f7:dd:10:1d:e9:01:ea:e7:
62:de:bf:f8:55:5b:93:11:53:06:eb:55:01:0c:1a:6b:a4:74:
ef:7d:c1:eb:1a:8f:b1:cd:88:72:07:68:d8:de:f5:34:b3:4b:
55:a3:83:83:42:d6:70:b7:2a:ee:23:4d:a5:5a:87:89:53:06:
93:21:05:ca:45:f2:d2:8e:65:ae:2d:8c:f2:90:1c:14:c3:d8:
ad:c8:2d:59:fc:f2:fe:cc:a1:4b:e0:96:9a:8f:ae:8a:18:ad:
cc:b9:f9:fe:0f:77:08:2e:68:9b:8a:79:ba:e5:7e:d5:5a:de:
bd:23:a9:6a:2c:87:ec:b3:e5:22:97:72:3f:90:a0:ee:72:29:
64:85:68:60:75:f1:58:d3:81:ec:1f:36:a4:d3:58:d9:5f:06:
2b:d0:e3:ce:f1:9c:95:a4:40:6a:39:d0:4a:36:62:85:18:37:
9a:e5:b6:b5:89:2f:59:78:73:1a:79:5b:f7:d6:09:b7:a1:fd:
61:ad:a8:22:a7:cf:f2:88:69:69:b6:77:4c:72:37:2f:03:98:
82:3b:cd:6c
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAdpmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIxMDkyMDQ3WhcNMjYwODI3MDkyMDQ3WjAYMRYw
FAYDVQQDEw02YTVmMzlmMy01MDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsxzhYZLXvEe/k7E+vKmHlTqFSOTQTcRMdlJfdiriigOIdW2uwBd4y9tV
nUC+JkQiAKqWGnX2/sxf98YCc+D3PWNICmkHEHif6RzSDYCMmchZXQ76a8BO/LB7
3ue0dI58bHnyu07qnKxQsvh9TVEBnLFc9clNVpHhfZ3+rcNRaETuWaarq9zQ6cRX
uA0XVd6QUCPoStUjp0OnZXOT5M+2+lr7ywUFY2An1wRoOEExyFQWpr5VMD+cVzWN
yDak7iCx+X4tuO/yxNZkoq9U83z/W210txzBHMQu27ou24C5bRY9QbmKAtL+Iq7q
EXrxuqv8nEpaj9l6M1KijBBtt4u2tQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMBf
bD+kmaAQhcYbd5EiOqBEyTYHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NzQ0QzI3NDg0RTUxMUYxOTY5N0ZFQ0RDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACazZcDBACazZoDBACa
zZwDBAGazZ4wDQYJKoZIhvcNAQELBQADggEBALdi3TlYnKMkAXX34E6sR774UmoF
1AdVo9nzaXx4Sv6Xome0EWubR/IDTn6DSvb33RAd6QHq52Lev/hVW5MRUwbrVQEM
GmukdO99wesaj7HNiHIHaNje9TSzS1Wjg4NC1nC3Ku4jTaVah4lTBpMhBcpF8tKO
Za4tjPKQHBTD2K3ILVn88v7MoUvglpqProoYrcy5+f4PdwguaJuKebrlftVa3r0j
qWosh+yz5SKXcj+QoO5yKWSFaGB18VjTgewfNqTTWNlfBivQ487xnJWkQGo50Eo2
YoUYN5rltrWJL1l4cxp5W/fWCbeh/WGtqCKnz/KIaWm2d0xyNy8DmII7zWw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:51 2026 by rpki-client