Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90235686844D11F1BCB594A9CE1D38B0.roa
File: 90235686844D11F1BCB594A9CE1D38B0.roa (raw, json)
Hash identifier: MNvMDO5wZsEPp3eocmSYYWZFKLiERUivse5vuj1wJ6U=
Subject key identifier: B2:DB:C2:B6:86:21:53:2A:B6:7D:04:9B:12:EE:31:F5:0A:A1:9A:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90235686844D11F1BCB594A9CE1D38B0.roa
Signing time: Mon 20 Jul 2026 15:13:29 +0000
ROA not before: Mon 20 Jul 2026 15:13:25 +0000
ROA not after: Sat 22 Aug 2026 15:13:25 +0000
asID: 17497
IP address blocks: 154.196.156.0/22 maxlen: 24
154.196.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121400 (0x1da38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 15:13:25 2026 GMT
Not After : Aug 22 15:13:25 2026 GMT
Subject: CN=6a5e3b19-0fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:cc:8d:2c:29:21:9e:e3:7e:24:43:a5:0e:
bf:02:84:3b:bd:a7:5f:0b:84:2f:8a:38:ba:31:f9:
64:d2:df:a9:7d:25:bb:f4:b2:0f:19:01:de:c7:f7:
9b:74:ae:95:a6:73:20:81:e2:15:34:7e:99:28:cf:
49:ee:fd:fe:c8:fb:3f:82:48:0b:53:e7:62:a2:4f:
07:07:58:3e:4a:1f:bb:66:49:11:a2:d0:94:c7:c5:
94:d2:ce:38:79:ab:f7:c9:b0:8b:9c:13:7e:d6:fa:
f5:f9:b4:47:e8:19:b6:96:e9:51:48:e2:20:ab:dc:
46:07:7d:c1:fe:17:12:89:c0:9d:f3:0b:1c:61:a2:
33:af:ff:77:0b:26:4c:6f:15:44:71:e3:1f:5a:6f:
c1:38:f6:46:b7:ae:71:a1:47:05:e8:8b:b0:ab:55:
66:4f:c3:c0:e0:a6:3a:2a:b7:d4:32:6b:be:07:b4:
1c:73:94:3d:97:17:10:6a:78:c1:69:57:ac:63:a1:
85:8d:c0:cd:1f:33:aa:b5:8d:d4:c8:67:58:b9:c7:
2c:61:13:5f:ad:fd:02:c4:dc:07:01:6b:4f:25:c4:
4e:87:73:1c:67:1a:75:2c:0c:2e:89:1f:bf:aa:91:
ce:0b:87:fe:01:e4:ce:41:4a:d2:cf:f8:4b:08:74:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:C2:B6:86:21:53:2A:B6:7D:04:9B:12:EE:31:F5:0A:A1:9A:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90235686844D11F1BCB594A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.156.0/22
154.196.172.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b3:20:01:35:07:a5:27:81:b7:3f:7e:0f:d9:41:26:58:5d:
03:b8:95:54:9f:22:5c:95:25:dd:71:e9:5d:32:b3:55:72:62:
42:8f:5f:c2:80:ce:e3:50:ae:cb:ca:6d:c7:51:8f:d3:fc:86:
a2:95:b7:8b:90:0f:ff:a7:c4:8f:36:e0:f9:76:44:68:78:f8:
cf:ab:eb:ee:31:9f:1f:ee:cf:fa:e0:20:c1:f9:fc:ea:3e:3b:
b7:51:b1:66:06:31:9e:7c:0b:ac:52:41:16:60:16:d5:6b:be:
6e:74:3b:d7:dd:20:3e:7f:d7:03:3d:a2:54:6e:4a:4b:b0:76:
8e:47:4b:35:b9:bc:c4:fe:0b:3c:71:63:f8:c9:26:47:18:22:
70:8f:69:ae:9d:99:c6:8d:af:45:4e:7f:5b:33:26:8b:4f:7c:
34:eb:7a:d0:d8:12:5e:54:08:55:45:78:79:6b:79:93:81:d3:
91:ce:0d:01:2a:da:30:8c:37:76:e6:cf:35:bf:38:35:2d:7e:
f1:cc:a8:b9:a4:fd:e9:19:8c:a2:ad:f0:e7:d5:3e:d9:b9:15:
63:52:ee:a4:36:11:e2:e6:6b:bb:ee:ce:0b:76:58:08:95:5f:
90:b6:39:65:21:e2:bf:b9:70:56:06:b7:1e:fa:2e:f8:cc:cb:
71:bf:75:41
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAdo4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIwMTUxMzI1WhcNMjYwODIyMTUxMzI1WjAYMRYw
FAYDVQQDEw02YTVlM2IxOS0wZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzy7MjSwpIZ7jfiRDpQ6/AoQ7vadfC4Qviji6Mflk0t+pfSW79LIPGQHe
x/ebdK6VpnMggeIVNH6ZKM9J7v3+yPs/gkgLU+diok8HB1g+Sh+7ZkkRotCUx8WU
0s44eav3ybCLnBN+1vr1+bRH6Bm2lulRSOIgq9xGB33B/hcSicCd8wscYaIzr/93
CyZMbxVEceMfWm/BOPZGt65xoUcF6Iuwq1VmT8PA4KY6KrfUMmu+B7Qcc5Q9lxcQ
anjBaVesY6GFjcDNHzOqtY3UyGdYuccsYRNfrf0CxNwHAWtPJcROh3McZxp1LAwu
iR+/qpHOC4f+AeTOQUrSz/hLCHRmvwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLLb
wraGIVMqtn0EmxLuMfUKoZqnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MDIzNTY4Njg0NEQxMUYxQkNCNTk0QTlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsScAwQCmsSsMA0GCSqG
SIb3DQEBCwUAA4IBAQAJsyABNQelJ4G3P34P2UEmWF0DuJVUnyJclSXdceldMrNV
cmJCj1/CgM7jUK7Lym3HUY/T/IailbeLkA//p8SPNuD5dkRoePjPq+vuMZ8f7s/6
4CDB+fzqPju3UbFmBjGefAusUkEWYBbVa75udDvX3SA+f9cDPaJUbkpLsHaOR0s1
ubzE/gs8cWP4ySZHGCJwj2munZnGja9FTn9bMyaLT3w063rQ2BJeVAhVRXh5a3mT
gdORzg0BKtowjDd25s81vzg1LX7xzKi5pP3pGYyirfDn1T7ZuRVjUu6kNhHi5mu7
7s4LdlgIlV+QtjllIeK/uXBWBrce+i74zMtxv3VB
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:16 2026 by rpki-client