Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A885D3A87F5611F1A95FBCB0CE1D38B0.roa
File: A885D3A87F5611F1A95FBCB0CE1D38B0.roa (raw, json)
Hash identifier: VHB/He99XiBzvGho6pbb9aobR/CsdlxfETpzwyIUSRw=
Subject key identifier: F9:86:11:55:AE:5A:21:A9:0D:ED:35:E5:97:3C:88:6B:66:4A:15:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A885D3A87F5611F1A95FBCB0CE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:36:00 +0000
ROA not before: Tue 14 Jul 2026 07:35:55 +0000
ROA not after: Sun 16 Aug 2026 07:35:55 +0000
asID: 22773
IP address blocks: 154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.198.44.0/24 maxlen: 24
154.198.45.0/24 maxlen: 24
154.198.46.0/24 maxlen: 24
154.198.47.0/24 maxlen: 24
154.202.2.0/24 maxlen: 24
154.202.5.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
154.202.13.0/24 maxlen: 24
154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121038 (0x1d8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:35:55 2026 GMT
Not After : Aug 16 07:35:55 2026 GMT
Subject: CN=6a55e6e0-06fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2c:5c:90:fc:38:0b:13:35:fb:db:21:2e:4b:
96:1f:44:38:07:ef:d5:18:5a:73:b3:e1:2f:a5:ba:
95:90:f3:10:5a:e9:d7:5b:d2:a1:4e:51:25:53:aa:
ca:e8:29:5f:ee:6b:3b:99:de:1d:15:33:5a:2b:86:
73:84:03:09:46:6c:e8:7e:bc:38:f0:66:14:37:44:
04:74:48:be:00:5b:57:49:68:35:96:fb:06:dc:ff:
8f:1f:e5:4d:68:d7:6a:c4:ec:1d:8d:65:7c:4c:21:
4c:38:82:66:36:6a:4c:5a:37:74:32:f9:49:2a:0d:
fc:2b:37:a0:7c:fa:42:72:c1:82:18:95:15:c5:2f:
0a:8b:78:ed:63:f8:69:b9:13:5f:f9:a6:29:a0:d2:
c7:89:32:93:2e:e7:65:92:61:5f:4b:5a:0b:5d:f2:
89:b8:ad:09:8a:3d:93:fa:76:72:22:c0:1a:37:09:
ef:93:bb:b4:27:cd:e3:0f:e1:92:a8:1f:b9:81:c2:
c1:74:09:65:e5:ce:00:36:f5:3d:5d:87:2c:31:69:
16:59:b5:7a:27:14:1d:80:b1:cd:a2:36:04:6d:39:
b3:2d:f6:79:14:b4:d2:2b:57:b3:0a:ab:e1:e1:e6:
ef:3d:7f:51:99:5d:c6:0c:36:d6:c4:86:e8:7b:6a:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:11:55:AE:5A:21:A9:0D:ED:35:E5:97:3C:88:6B:66:4A:15:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A885D3A87F5611F1A95FBCB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.30.0/23
154.198.44.0/22
154.202.2.0/24
154.202.5.0/24
154.202.12.0/23
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cf:1e:64:85:0d:3b:c3:7a:58:66:d6:be:52:dc:3f:89:a6:
a5:f5:33:ab:19:35:fb:ea:eb:3f:83:d2:07:6b:6d:45:ed:0f:
04:ca:14:8c:f0:2e:27:17:59:a3:cf:1b:b7:a4:21:b6:13:26:
7e:c1:93:60:db:2b:2c:37:69:44:bd:68:fc:38:fc:c1:67:7b:
ce:b4:9b:52:d6:5e:04:7b:b8:ac:94:74:7d:10:1c:8f:83:a3:
c3:18:ef:e4:48:f6:0e:1a:97:eb:df:98:8d:62:92:c3:e4:cb:
7d:19:0c:05:c3:de:93:a7:5f:af:1f:b9:03:93:a3:21:1b:0b:
ef:e7:29:6e:eb:76:64:0b:d9:e2:0f:12:3a:bb:3d:42:e1:35:
20:2a:c6:7a:44:17:59:60:2a:b1:39:da:c8:96:57:10:04:21:
3c:fc:60:84:85:2e:36:b1:54:7e:8b:73:3c:a3:62:ef:d1:18:
71:1f:5b:23:4f:b3:49:66:a8:06:e4:1b:d3:d3:7c:c3:8a:8b:
6f:42:ec:69:53:0f:e2:61:26:95:77:0d:03:39:82:b7:33:a1:
5f:be:0a:f4:14:c1:08:19:ab:ca:a6:5a:8c:66:18:9d:bb:1e:
f1:83:85:30:ad:67:51:c0:cd:b2:49:97:b5:20:a4:dd:23:b9:
d3:39:79:4d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAdjOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDczNTU1WhcNMjYwODE2MDczNTU1WjAYMRYw
FAYDVQQDEw02YTU1ZTZlMC0wNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3yxckPw4CxM1+9shLkuWH0Q4B+/VGFpzs+EvpbqVkPMQWunXW9KhTlEl
U6rK6Clf7ms7md4dFTNaK4ZzhAMJRmzofrw48GYUN0QEdEi+AFtXSWg1lvsG3P+P
H+VNaNdqxOwdjWV8TCFMOIJmNmpMWjd0MvlJKg38KzegfPpCcsGCGJUVxS8Ki3jt
Y/hpuRNf+aYpoNLHiTKTLudlkmFfS1oLXfKJuK0Jij2T+nZyIsAaNwnvk7u0J83j
D+GSqB+5gcLBdAll5c4ANvU9XYcsMWkWWbV6JxQdgLHNojYEbTmzLfZ5FLTSK1ez
Cqvh4ebvPX9RmV3GDDbWxIboe2odZwIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFPmG
EVWuWiGpDe015Zc8iGtmShVjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BODg1RDNBODdGNTYxMUYxQTk1RkJDQjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBmsYeAwQCmsYsAwQAmsoC
AwQAmsoFAwQBmsoMAwQAmspaMAwDBAKaylwDBACaymIDBACaymYDBACaymswDQYJ
KoZIhvcNAQELBQADggEBAE/PHmSFDTvDelhm1r5S3D+JpqX1M6sZNfvq6z+D0gdr
bUXtDwTKFIzwLicXWaPPG7ekIbYTJn7Bk2DbKyw3aUS9aPw4/MFne860m1LWXgR7
uKyUdH0QHI+Do8MY7+RI9g4al+vfmI1iksPky30ZDAXD3pOnX68fuQOToyEbC+/n
KW7rdmQL2eIPEjq7PULhNSAqxnpEF1lgKrE52siWVxAEITz8YISFLjaxVH6Lczyj
Yu/RGHEfWyNPs0lmqAbkG9PTfMOKi29C7GlTD+JhJpV3DQM5grczoV++CvQUwQgZ
q8qmWoxmGJ27HvGDhTCtZ1HAzbJJl7UgpN0judM5eU0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:25 2026 by rpki-client