Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9D120E47F5711F1843071B8CE1D38B0.roa
File: B9D120E47F5711F1843071B8CE1D38B0.roa (raw, json)
Hash identifier: 8LQIywFlEhiDRK55XUryKg/Q+DAZEvBrZj/jDp9lpQs=
Subject key identifier: A7:75:69:5A:D6:BD:22:76:F2:F0:6C:3A:5F:A9:9E:14:D3:97:2E:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9D120E47F5711F1843071B8CE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:43:38 +0000
ROA not before: Tue 14 Jul 2026 07:43:33 +0000
ROA not after: Sun 16 Aug 2026 07:43:33 +0000
asID: 22773
IP address blocks: 154.202.14.0/24 maxlen: 24
154.202.15.0/24 maxlen: 24
154.202.16.0/24 maxlen: 24
154.202.17.0/24 maxlen: 24
154.202.18.0/24 maxlen: 24
154.202.19.0/24 maxlen: 24
154.202.20.0/24 maxlen: 24
154.202.21.0/24 maxlen: 24
154.202.22.0/24 maxlen: 24
154.202.23.0/24 maxlen: 24
154.213.206.0/24 maxlen: 24
154.213.207.0/24 maxlen: 24
154.213.208.0/24 maxlen: 24
154.213.209.0/24 maxlen: 24
154.213.210.0/24 maxlen: 24
154.213.213.0/24 maxlen: 24
154.213.214.0/24 maxlen: 24
154.213.215.0/24 maxlen: 24
154.213.216.0/24 maxlen: 24
154.213.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121040 (0x1d8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:43:33 2026 GMT
Not After : Aug 16 07:43:33 2026 GMT
Subject: CN=6a55e8aa-0ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:fa:05:f7:9d:72:4e:08:7e:4d:49:48:da:
b4:68:c3:a4:fa:dd:b5:b2:28:04:8e:f1:77:d9:3e:
7c:26:7c:32:bb:b1:7f:0a:5c:1f:c4:09:c9:cc:78:
92:64:31:51:10:e7:02:4d:36:22:bf:1a:c4:6e:9c:
1f:60:92:a2:fb:1a:05:ba:a8:2f:6d:e3:06:14:a5:
55:9b:e0:af:a3:ff:fc:eb:6a:85:3e:f3:3d:5b:84:
b6:87:ed:5d:65:58:03:86:ad:8e:6b:cc:80:f2:0e:
70:e1:1a:fb:92:dc:46:ce:b5:ab:e7:35:66:37:d5:
6c:1b:ea:14:91:06:da:b9:b2:e9:cc:33:63:6e:e2:
35:ec:91:9a:d0:70:d8:81:07:94:3c:aa:70:f4:13:
46:b1:d8:b8:dd:88:29:34:0b:bf:6b:0f:60:bc:23:
b2:23:b9:d7:7f:13:50:9f:d8:cd:5c:11:3a:22:20:
c3:46:4e:87:40:f2:ee:9a:10:9b:8b:0e:42:d9:5b:
0d:c5:d4:11:86:6a:34:2a:38:7c:d5:7b:a6:01:ec:
8b:e0:7f:e4:23:63:5b:0b:92:b4:ed:d5:14:4e:d9:
61:42:7e:1d:d3:40:18:17:10:ec:83:6b:17:fa:82:
ec:19:ad:d0:0f:b3:d9:04:9c:3c:d2:1a:d4:99:92:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:69:5A:D6:BD:22:76:F2:F0:6C:3A:5F:A9:9E:14:D3:97:2E:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9D120E47F5711F1843071B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.14.0-154.202.23.255
154.213.206.0-154.213.210.255
154.213.213.0-154.213.217.255
Signature Algorithm: sha256WithRSAEncryption
a7:f1:c0:aa:6d:96:05:7c:ad:05:64:2d:f8:a8:68:0d:0d:f9:
95:21:fb:15:d2:e2:b3:48:59:d0:3a:d0:22:d2:8d:15:07:ea:
5f:72:72:cd:c6:02:ae:da:b8:07:43:fb:7b:1e:f1:46:7a:b5:
f8:96:29:cc:cf:4a:1a:1a:c4:bc:bd:f6:8b:0f:2f:43:9b:18:
40:71:e5:94:5f:13:40:83:db:b9:61:e0:be:62:03:f9:73:b5:
7f:b0:22:be:f9:81:74:e9:24:fd:2d:a5:6d:5d:2c:34:8c:dc:
4d:60:64:c4:04:03:0f:5e:58:d0:b3:14:a1:26:e1:3b:8b:7c:
3a:6a:e4:a8:20:e4:b8:98:17:2a:43:2d:ed:06:a4:d8:90:59:
9d:f9:83:1a:67:95:ce:fd:d9:76:b9:8f:76:87:27:28:39:73:
3d:3c:36:4a:17:1d:a0:fd:e8:82:28:ba:bd:8e:7d:1d:7f:4f:
da:0f:f8:6c:02:c2:45:1a:ef:5b:ed:b6:42:0e:19:5a:0e:5d:
2d:bf:4a:66:de:7f:54:31:cf:ba:40:e2:33:9e:a0:dd:13:e3:
ab:20:67:7c:0c:62:61:58:c6:ec:4a:37:6d:b9:a4:19:fb:db:
24:2d:cc:c8:7f:77:4b:67:3d:5b:79:b2:d1:ea:03:c3:fa:5f:
2f:04:d1:45
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAdjQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDc0MzMzWhcNMjYwODE2MDc0MzMzWjAYMRYw
FAYDVQQDEw02YTU1ZThhYS0wY2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwzD6Bfedck4Ifk1JSNq0aMOk+t21sigEjvF32T58Jnwyu7F/ClwfxAnJ
zHiSZDFREOcCTTYivxrEbpwfYJKi+xoFuqgvbeMGFKVVm+Cvo//862qFPvM9W4S2
h+1dZVgDhq2Oa8yA8g5w4Rr7ktxGzrWr5zVmN9VsG+oUkQbaubLpzDNjbuI17JGa
0HDYgQeUPKpw9BNGsdi43YgpNAu/aw9gvCOyI7nXfxNQn9jNXBE6IiDDRk6HQPLu
mhCbiw5C2VsNxdQRhmo0Kjh81XumAeyL4H/kI2NbC5K07dUUTtlhQn4d00AYFxDs
g2sX+oLsGa3QD7PZBJw80hrUmZJi4QIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFKd1
aVrWvSJ28vBsOl+pnhTTly6JMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9COUQxMjBFNDdGNTcxMUYxODQzMDcxQjhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAGayg4DBAOayhAwDAME
AZrVzgMEAJrV0jAMAwQAmtXVAwQBmtXYMA0GCSqGSIb3DQEBCwUAA4IBAQCn8cCq
bZYFfK0FZC34qGgNDfmVIfsV0uKzSFnQOtAi0o0VB+pfcnLNxgKu2rgHQ/t7HvFG
erX4linMz0oaGsS8vfaLDy9DmxhAceWUXxNAg9u5YeC+YgP5c7V/sCK++YF06ST9
LaVtXSw0jNxNYGTEBAMPXljQsxShJuE7i3w6auSoIOS4mBcqQy3tBqTYkFmd+YMa
Z5XO/dl2uY92hycoOXM9PDZKFx2g/eiCKLq9jn0df0/aD/hsAsJFGu9b7bZCDhla
Dl0tv0pm3n9UMc+6QOIznqDdE+OrIGd8DGJhWMbsSjdtuaQZ+9skLczIf3dLZz1b
ebLR6gPD+l8vBNFF
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:05 2026 by rpki-client