Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99203990843211F18D945905CF1D38B0.roa
File: 99203990843211F18D945905CF1D38B0.roa (raw, json)
Hash identifier: 0/WNq2GxE9ugWQ7h76qpNheLayag3U3h34dpvCQqdHg=
Subject key identifier: E1:90:1D:3E:74:B8:AD:BF:88:CC:F8:72:28:E9:23:1C:53:D4:83:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99203990843211F18D945905CF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:00:28 +0000
ROA not before: Mon 20 Jul 2026 12:00:24 +0000
ROA not after: Thu 27 Aug 2026 12:00:24 +0000
asID: 63139
IP address blocks: 154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121378 (0x1da22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 12:00:24 2026 GMT
Not After : Aug 27 12:00:24 2026 GMT
Subject: CN=6a5e0ddc-7bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:74:6c:7e:60:1c:b1:36:82:d5:01:56:7a:
d7:94:2f:a9:8e:aa:96:15:66:bb:76:ae:4d:24:79:
d0:5a:b6:72:c8:33:90:63:1d:a3:6a:c4:a7:dc:9b:
c7:49:0e:03:19:3e:3d:29:aa:06:ce:62:ba:9c:85:
a2:96:10:fd:0b:85:47:5b:4b:38:ea:6f:3c:dd:54:
7d:ea:76:c1:5f:2e:14:55:68:54:02:1f:f5:17:6f:
b4:a8:e6:af:ef:cb:36:e0:ee:db:cf:76:fd:67:6b:
8a:d6:7b:b6:cc:50:0e:2b:60:ba:25:7d:af:df:ef:
a7:bf:41:6b:14:93:3b:45:e7:54:9b:5c:6b:43:b8:
74:f8:d4:3b:3f:db:e4:a0:1b:c5:40:08:da:f3:da:
24:01:a4:96:0e:8d:5a:27:57:75:76:2f:c9:6f:e2:
b3:7d:50:d8:29:3d:d4:7e:d8:13:e8:c4:2b:af:4d:
f1:1b:b7:7a:c0:17:1e:fc:46:69:b5:d5:4e:ee:75:
e7:84:d5:cb:56:0c:1f:10:df:35:0a:8f:22:78:7f:
97:b7:97:1d:6c:aa:a7:42:e1:80:c1:25:18:0c:0b:
87:56:c1:cd:2d:5a:ce:07:f1:00:13:74:fb:49:d4:
9e:c6:63:3e:81:ce:22:94:63:ba:20:eb:08:8c:86:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:90:1D:3E:74:B8:AD:BF:88:CC:F8:72:28:E9:23:1C:53:D4:83:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99203990843211F18D945905CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.112.0-154.94.121.255
Signature Algorithm: sha256WithRSAEncryption
77:ce:09:b7:89:dc:6e:40:f3:db:a6:8e:3e:1b:97:40:4a:87:
59:28:da:63:ee:d9:5d:0f:93:c4:f0:d3:6c:67:f7:ef:e2:e9:
f7:fb:07:87:fb:24:0b:80:ce:0b:7f:96:12:4a:94:16:ef:7b:
04:5c:ce:cd:c5:c6:04:e3:0a:22:7b:4d:8d:d6:08:0c:1f:e5:
77:90:93:fd:16:fd:72:ba:ad:98:50:84:6b:32:d6:e0:73:af:
d5:7f:8c:a2:fb:12:a5:4e:d0:7f:74:17:04:87:b7:55:52:99:
e2:59:d1:71:60:db:9f:22:f8:9c:3e:e6:12:b6:dd:de:9b:6a:
ae:8e:55:b3:77:db:c5:b9:56:0b:8e:1d:87:c3:df:88:04:f8:
51:e3:a7:ed:35:97:f9:9a:f4:4e:b8:00:50:b7:15:80:c5:8a:
9c:4c:b4:3a:fe:5f:e1:a7:ed:dc:49:66:68:45:08:ca:3d:99:
05:32:6e:dc:1c:be:ad:e7:bc:37:d6:52:74:35:82:5b:95:65:
2c:12:0a:06:a4:b6:2a:94:43:d6:a8:99:b5:33:55:65:7f:88:
2c:7a:20:8a:6f:b3:96:a4:26:2f:9e:e9:d0:87:e4:18:b4:ad:
3b:e9:90:63:c2:a9:01:57:b5:60:f4:5c:9c:1f:a1:9f:58:e3:
ac:b7:f9:88
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdoiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIwMTIwMDI0WhcNMjYwODI3MTIwMDI0WjAYMRYw
FAYDVQQDEw02YTVlMGRkYy03YmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuQh0bH5gHLE2gtUBVnrXlC+pjqqWFWa7dq5NJHnQWrZyyDOQYx2jasSn
3JvHSQ4DGT49KaoGzmK6nIWilhD9C4VHW0s46m883VR96nbBXy4UVWhUAh/1F2+0
qOav78s24O7bz3b9Z2uK1nu2zFAOK2C6JX2v3++nv0FrFJM7RedUm1xrQ7h0+NQ7
P9vkoBvFQAja89okAaSWDo1aJ1d1di/Jb+KzfVDYKT3UftgT6MQrr03xG7d6wBce
/EZptdVO7nXnhNXLVgwfEN81Co8ieH+Xt5cdbKqnQuGAwSUYDAuHVsHNLVrOB/EA
E3T7SdSexmM+gc4ilGO6IOsIjIYTYQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOGQ
HT50uK2/iMz4cijpIxxT1IMhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OTIwMzk5MDg0MzIxMUYxOEQ5NDU5MDVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaXnADBAGaXngwDQYJ
KoZIhvcNAQELBQADggEBAHfOCbeJ3G5A89umjj4bl0BKh1ko2mPu2V0Pk8Tw02xn
9+/i6ff7B4f7JAuAzgt/lhJKlBbvewRczs3FxgTjCiJ7TY3WCAwf5XeQk/0W/XK6
rZhQhGsy1uBzr9V/jKL7EqVO0H90FwSHt1VSmeJZ0XFg258i+Jw+5hK23d6baq6O
VbN328W5VguOHYfD34gE+FHjp+01l/ma9E64AFC3FYDFipxMtDr+X+Gn7dxJZmhF
CMo9mQUybtwcvq3nvDfWUnQ1gluVZSwSCgaktiqUQ9aombUzVWV/iCx6IIpvs5ak
Ji+e6dCH5Bi0rTvpkGPCqQFXtWD0XJwfoZ9Y46y3+Yg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:31:37 2026 by rpki-client