Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADBF81E7F5511F186693EACCE1D38B0.roa
File: 9ADBF81E7F5511F186693EACCE1D38B0.roa (raw, json)
Hash identifier: CTMH5DBV9om4k3Y1W6pjNOUufDQD7WFpmHi4H4umWbo=
Subject key identifier: 8F:51:BF:E3:98:76:04:F4:D3:04:20:84:11:4E:F6:68:B8:C7:C7:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADBF81E7F5511F186693EACCE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:28:27 +0000
ROA not before: Tue 14 Jul 2026 07:28:23 +0000
ROA not after: Sun 16 Aug 2026 07:28:23 +0000
asID: 22773
IP address blocks: 154.198.21.0/24 maxlen: 24
154.198.22.0/24 maxlen: 24
154.198.23.0/24 maxlen: 24
154.198.24.0/24 maxlen: 24
154.198.25.0/24 maxlen: 24
154.198.26.0/24 maxlen: 24
154.198.27.0/24 maxlen: 24
154.198.28.0/24 maxlen: 24
154.198.29.0/24 maxlen: 24
154.202.78.0/24 maxlen: 24
154.202.79.0/24 maxlen: 24
154.202.80.0/24 maxlen: 24
154.202.81.0/24 maxlen: 24
154.202.82.0/24 maxlen: 24
154.202.83.0/24 maxlen: 24
154.202.84.0/24 maxlen: 24
154.202.85.0/24 maxlen: 24
154.202.88.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
154.202.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121036 (0x1d8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:28:23 2026 GMT
Not After : Aug 16 07:28:23 2026 GMT
Subject: CN=6a55e51b-f16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:d0:66:ed:fb:df:cb:78:df:80:c9:c4:4a:
fa:e8:4b:d8:b7:1b:6c:5f:de:30:89:e5:cb:71:a4:
e9:7a:7d:9e:61:3b:5e:ff:1f:48:fd:fc:2d:a8:95:
83:ce:2b:94:9f:d3:8d:5e:1d:d8:b2:a2:c7:9a:cf:
ea:ae:d5:92:c7:b3:c3:30:56:97:db:77:90:45:ac:
9c:d1:a5:c6:a4:50:14:f8:70:16:47:bf:f7:67:c8:
78:66:6b:81:9f:b9:72:0e:61:8f:92:2d:38:d0:93:
35:14:70:8f:a7:09:84:77:46:83:e2:69:c1:7f:d8:
b8:93:71:83:50:f0:9c:0e:e0:5f:be:fe:9a:be:e6:
ad:0a:4f:e2:93:85:fa:f8:52:de:ea:1e:8b:73:8f:
0f:29:d3:d2:90:00:39:ef:1c:3a:f5:16:93:ae:57:
96:b1:2f:8a:66:3b:10:49:e1:5c:b4:34:10:52:88:
dc:26:29:9e:5d:b1:45:1f:17:01:d0:83:12:5e:e1:
da:96:ce:56:64:73:65:f5:ca:36:39:ea:20:f0:2b:
ab:78:54:04:13:58:9d:dc:0b:39:87:58:63:16:d7:
8f:8b:6f:9a:20:29:26:27:dc:30:d6:e3:a0:89:9b:
9b:6b:07:38:67:12:f9:2b:88:65:21:81:71:97:8e:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:51:BF:E3:98:76:04:F4:D3:04:20:84:11:4E:F6:68:B8:C7:C7:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADBF81E7F5511F186693EACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.21.0-154.198.29.255
154.202.78.0-154.202.85.255
154.202.88.0/24
154.202.108.0/24
154.202.111.0/24
Signature Algorithm: sha256WithRSAEncryption
36:7a:db:69:b6:46:14:f2:e2:6d:d7:56:e5:1a:34:57:27:8b:
14:95:97:dc:c5:c3:f5:d0:57:d4:cf:5c:5c:49:98:07:58:4e:
1a:fc:ec:55:9d:29:14:71:80:08:88:be:7b:67:3b:07:d7:91:
8f:75:54:91:9e:7e:23:77:a7:11:5d:bb:dc:d1:2a:9a:57:3c:
0f:e1:89:05:23:90:28:71:6f:1b:2b:fc:4f:5e:34:4d:96:3a:
35:09:3c:e7:1b:b1:87:a9:23:24:3b:3d:d3:f6:25:0b:7a:25:
00:01:d2:1e:2a:f1:24:7d:61:1f:1c:9d:a3:a6:86:fb:98:dd:
8b:a6:25:9c:66:2b:cd:e0:1e:95:dc:2f:48:de:7a:60:77:88:
3d:bc:26:5b:4a:c2:fc:84:a0:bf:58:61:55:ea:bb:34:6b:0a:
21:0b:8e:5b:21:df:08:04:f0:4f:a3:a1:ab:53:ec:13:d0:7e:
d0:80:79:98:a3:ac:b7:a5:d2:83:d8:be:58:6e:8a:89:e9:13:
a7:ca:a0:3a:eb:68:4f:5b:1a:32:9b:20:ad:a5:29:c3:04:e4:
8a:d0:8c:0f:62:3d:6c:69:4e:52:95:32:e7:7f:a9:e4:6d:44:
c5:c9:42:6a:95:d9:e6:56:00:b7:5b:be:cc:ab:66:2a:f8:a4:
80:b9:70:17
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAdjMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDcyODIzWhcNMjYwODE2MDcyODIzWjAYMRYw
FAYDVQQDEw02YTU1ZTUxYi1mMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAocPQZu3738t434DJxEr66EvYtxtsX94wieXLcaTpen2eYTte/x9I/fwt
qJWDziuUn9ONXh3YsqLHms/qrtWSx7PDMFaX23eQRayc0aXGpFAU+HAWR7/3Z8h4
ZmuBn7lyDmGPki040JM1FHCPpwmEd0aD4mnBf9i4k3GDUPCcDuBfvv6avuatCk/i
k4X6+FLe6h6Lc48PKdPSkAA57xw69RaTrleWsS+KZjsQSeFctDQQUojcJimeXbFF
HxcB0IMSXuHals5WZHNl9co2Oeog8CureFQEE1id3As5h1hjFtePi2+aICkmJ9ww
1uOgiZubawc4ZxL5K4hlIYFxl44VswIDAQABo4ICzTCCAskwHQYDVR0OBBYEFI9R
v+OYdgT00wQghBFO9mi4x8ceMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QURCRjgxRTdGNTUxMUYxODY2OTNFQUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBACaxhUDBAGaxhwwDAME
AZrKTgMEAZrKVAMEAJrKWAMEAJrKbAMEAJrKbzANBgkqhkiG9w0BAQsFAAOCAQEA
NnrbabZGFPLibddW5Ro0VyeLFJWX3MXD9dBX1M9cXEmYB1hOGvzsVZ0pFHGACIi+
e2c7B9eRj3VUkZ5+I3enEV273NEqmlc8D+GJBSOQKHFvGyv8T140TZY6NQk85xux
h6kjJDs90/YlC3olAAHSHirxJH1hHxydo6aG+5jdi6YlnGYrzeAeldwvSN56YHeI
PbwmW0rC/ISgv1hhVeq7NGsKIQuOWyHfCATwT6Ohq1PsE9B+0IB5mKOst6XSg9i+
WG6KiekTp8qgOutoT1saMpsgraUpwwTkitCMD2I9bGlOUpUy53+p5G1ExclCapXZ
5lYAt1u+zKtmKvikgLlwFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:15 2026 by rpki-client