Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC48395A785711F19E8DD8EECE1D38B0.roa
File: AC48395A785711F19E8DD8EECE1D38B0.roa (raw, json)
Hash identifier: NzOT4YQ5uDzZwRN47wGk3uvadwGneL7+ICE1bUDSN2I=
Subject key identifier: 24:90:2E:3C:23:AB:F5:5B:83:AF:16:A7:76:4A:F4:D1:7F:ED:B9:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D710
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC48395A785711F19E8DD8EECE1D38B0.roa
Signing time: Sun 05 Jul 2026 09:55:38 +0000
ROA not before: Sun 05 Jul 2026 09:55:33 +0000
ROA not after: Sun 16 Aug 2026 09:55:33 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120592 (0x1d710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 09:55:33 2026 GMT
Not After : Aug 16 09:55:33 2026 GMT
Subject: CN=6a4a2a19-025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:64:52:dc:47:64:db:5c:e4:bf:53:38:49:
28:7e:16:15:0c:3f:b5:11:9f:85:f4:2f:79:39:30:
b6:da:90:53:b7:23:ba:46:85:49:1f:8b:df:c8:b2:
fd:3b:85:c3:e8:fc:a1:b4:db:48:cf:74:e1:f1:7a:
65:e2:1d:ec:3c:fd:5a:6b:3f:4b:fb:44:4b:ef:ab:
be:5b:df:1e:fe:c4:0d:ab:46:06:4d:dc:fb:3a:5e:
e5:1f:a0:62:d0:3d:6a:5e:1a:36:6d:a7:f3:c7:64:
5f:43:56:46:49:a6:f5:3a:37:02:7d:8d:a9:54:2e:
ea:39:59:bb:56:fd:71:9c:4d:e2:98:b8:f1:38:0d:
67:79:ca:7d:7e:b7:e6:6d:6a:06:d8:23:4f:a1:9a:
56:ac:d2:06:38:56:71:fb:a6:5d:56:15:0f:f6:a9:
f9:33:43:49:0f:f4:ce:37:b5:80:5e:ca:86:33:60:
ef:59:33:db:c0:41:93:ec:41:44:dd:98:f5:a6:92:
71:ff:3b:f9:22:54:7c:0f:e4:f3:b4:63:17:b4:84:
18:f8:a5:5e:b0:55:4d:39:40:24:3b:ea:4b:40:90:
b5:f9:5e:c4:62:22:0e:d1:17:6e:07:71:27:01:01:
03:af:1c:26:cf:23:fe:77:78:3c:b9:de:ad:15:92:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:2E:3C:23:AB:F5:5B:83:AF:16:A7:76:4A:F4:D1:7F:ED:B9:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC48395A785711F19E8DD8EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
06:f4:82:48:d6:3b:d1:72:cd:28:49:a7:ad:08:4f:dd:f6:16:
ce:13:c9:44:b7:b9:ba:ff:9c:8f:13:30:41:ea:1c:59:4a:ab:
60:b0:57:29:da:31:19:63:a0:cf:49:2b:78:b5:d4:74:4c:09:
08:8b:29:5b:97:f8:3b:98:32:77:6d:31:9c:27:11:06:0e:6e:
ec:33:b8:16:b7:8d:0e:cc:79:e8:4e:8d:4f:4c:1c:47:ee:e6:
25:84:39:c5:74:fa:22:39:ce:4f:70:6c:45:26:04:40:2b:f5:
18:f1:91:2b:51:ee:87:45:5a:90:98:c1:01:17:85:3c:94:01:
8c:3d:78:77:ba:a0:6f:2f:ab:69:bd:26:88:8c:9f:d9:3c:80:
2e:a9:07:fb:b9:87:71:43:d0:e1:1e:52:ba:15:da:1d:48:44:
7c:09:a9:71:fa:24:77:38:ab:3b:b5:94:35:0d:6f:8f:86:39:
56:08:ce:5d:a6:2e:09:6f:f2:11:7d:44:80:40:d1:3d:45:84:
9d:bd:84:7c:ce:f3:e6:56:b5:64:4b:4e:d2:ef:91:28:3a:b5:
19:cd:05:95:81:b7:09:9f:e4:5d:f1:39:00:98:fc:42:2c:90:
8e:49:5d:9c:f5:75:ea:b1:56:8e:86:50:20:61:84:fb:f4:ba:
f1:9d:c7:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdcQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzA1MDk1NTMzWhcNMjYwODE2MDk1NTMzWjAYMRYw
FAYDVQQDEw02YTRhMmExOS0wMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxAdkUtxHZNtc5L9TOEkofhYVDD+1EZ+F9C95OTC22pBTtyO6RoVJH4vf
yLL9O4XD6PyhtNtIz3Th8Xpl4h3sPP1aaz9L+0RL76u+W98e/sQNq0YGTdz7Ol7l
H6Bi0D1qXho2bafzx2RfQ1ZGSab1OjcCfY2pVC7qOVm7Vv1xnE3imLjxOA1necp9
frfmbWoG2CNPoZpWrNIGOFZx+6ZdVhUP9qn5M0NJD/TON7WAXsqGM2DvWTPbwEGT
7EFE3Zj1ppJx/zv5IlR8D+TztGMXtIQY+KVesFVNOUAkO+pLQJC1+V7EYiIO0Rdu
B3EnAQEDrxwmzyP+d3g8ud6tFZINqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCSQ
Ljwjq/Vbg68Wp3ZK9NF/7bl0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQzQ4Mzk1QTc4NTcxMUYxOUU4REQ4RUVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQAG9IJI1jvRcs0oSaetCE/d9hbOE8lEt7m6/5yPEzBB6hxZSqtgsFcp
2jEZY6DPSSt4tdR0TAkIiylbl/g7mDJ3bTGcJxEGDm7sM7gWt40OzHnoTo1PTBxH
7uYlhDnFdPoiOc5PcGxFJgRAK/UY8ZErUe6HRVqQmMEBF4U8lAGMPXh3uqBvL6tp
vSaIjJ/ZPIAuqQf7uYdxQ9DhHlK6FdodSER8Calx+iR3OKs7tZQ1DW+PhjlWCM5d
pi4Jb/IRfUSAQNE9RYSdvYR8zvPmVrVkS07S75EoOrUZzQWVgbcJn+Rd8TkAmPxC
LJCOSV2c9XXqsVaOhlAgYYT79Lrxnccy
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:54 2026 by rpki-client