Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0EB3EA84FD11F19B7582DFCE1D38B0.roa
File: BA0EB3EA84FD11F19B7582DFCE1D38B0.roa (raw, json)
Hash identifier: M2C4U5ncdYKtOihsw46VkPnf8TrybUdJmXb2dGF8tI8=
Subject key identifier: CA:5F:92:C6:A1:0F:43:26:1E:B9:2D:1E:CE:DD:9C:B5:2E:8F:08:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0EB3EA84FD11F19B7582DFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:14:31 +0000
ROA not before: Tue 21 Jul 2026 12:14:27 +0000
ROA not after: Mon 07 Sep 2026 12:14:27 +0000
asID: 401783
IP address blocks: 154.81.160.0/24 maxlen: 24
154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121476 (0x1da84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:14:27 2026 GMT
Not After : Sep 7 12:14:27 2026 GMT
Subject: CN=6a5f62a7-fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:31:fd:4f:1a:b5:bc:a0:19:ba:5a:4c:5b:
e7:a6:27:59:7d:23:17:f9:b1:4d:c5:c5:28:18:22:
04:c8:e1:42:60:17:ac:e9:26:08:79:33:a3:01:3e:
3d:4d:7b:41:e3:1b:a5:54:de:04:bf:7d:ef:4d:14:
80:bc:d9:3f:4e:02:bf:f7:2a:ef:2a:54:a3:ef:41:
94:b4:4f:cb:b9:c2:53:94:2d:f6:03:7d:14:5a:b8:
8a:b7:41:df:07:66:9f:36:51:c1:a9:53:fc:8e:42:
c4:85:a5:19:ac:27:aa:54:cb:e6:59:02:46:e0:d4:
a7:33:95:76:9b:3d:ab:58:d3:bc:c9:4f:27:89:1a:
80:57:b3:17:a2:24:e4:f5:3d:22:67:c9:2e:bc:8b:
05:e4:72:74:2f:43:6b:30:f3:d9:ee:9f:65:8e:68:
55:53:20:07:05:e3:07:ba:b8:91:b1:7b:f0:84:b1:
ab:58:ca:ea:36:6a:e7:68:f5:ad:6d:8d:26:d5:8a:
72:dc:de:72:42:85:63:b4:f4:51:ab:f2:cf:4a:6e:
65:a6:67:38:f2:d2:f8:c1:0f:57:0f:d9:3b:51:b6:
e4:f6:75:4d:8c:de:4d:40:7a:a0:0b:7d:72:92:d6:
67:c3:c1:eb:4c:f9:8d:1f:41:f4:b7:00:76:69:18:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:92:C6:A1:0F:43:26:1E:B9:2D:1E:CE:DD:9C:B5:2E:8F:08:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0EB3EA84FD11F19B7582DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/24
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:7c:f2:3f:32:46:2f:80:a3:fd:ec:5d:94:ff:26:bb:5c:a6:
d0:6b:c7:c9:38:2e:44:50:01:3d:2c:79:8b:21:b0:44:32:0d:
8f:e9:0f:b8:3c:68:09:73:69:d8:05:29:66:8f:a9:a1:88:f2:
72:0b:66:4c:67:b5:8c:05:5f:de:b2:eb:28:4e:d7:d9:15:e4:
37:dc:37:f9:92:98:6a:cb:f4:24:bb:e4:39:23:c8:bf:5c:38:
ef:77:94:2a:82:ae:e6:2b:7a:80:9d:42:15:1f:1f:d1:86:64:
97:09:f7:88:73:65:db:60:15:7a:cc:88:76:86:74:8e:83:c3:
16:9f:06:aa:28:37:9e:3a:55:8a:f4:e7:ff:75:14:0f:a4:44:
12:66:46:f0:8e:1c:46:83:91:dd:b7:22:fe:ef:83:52:f2:0e:
48:bb:b9:37:14:6b:7f:d9:15:38:c5:17:df:d0:29:2d:d3:a4:
68:e1:72:27:98:c3:98:50:46:ad:31:59:bd:f8:3c:80:ba:f6:
74:ec:42:a7:fd:a3:a7:1d:d6:95:e4:f4:ad:63:05:a9:b6:f0:
e3:11:7c:35:93:d0:b7:55:e0:fd:ef:b6:4b:35:5f:d5:d2:41:
bf:8f:93:ec:25:3d:ec:bd:f9:38:ac:f5:fe:2e:b0:07:21:31:
7f:2e:50:31
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIDAdqEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIxMTIxNDI3WhcNMjYwOTA3MTIxNDI3WjAYMRYw
FAYDVQQDEw02YTVmNjJhNy1mYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuRwx/U8atbygGbpaTFvnpidZfSMX+bFNxcUoGCIEyOFCYBes6SYIeTOj
AT49TXtB4xulVN4Ev33vTRSAvNk/TgK/9yrvKlSj70GUtE/LucJTlC32A30UWriK
t0HfB2afNlHBqVP8jkLEhaUZrCeqVMvmWQJG4NSnM5V2mz2rWNO8yU8niRqAV7MX
oiTk9T0iZ8kuvIsF5HJ0L0NrMPPZ7p9ljmhVUyAHBeMHuriRsXvwhLGrWMrqNmrn
aPWtbY0m1Ypy3N5yQoVjtPRRq/LPSm5lpmc48tL4wQ9XD9k7Ubbk9nVNjN5NQHqg
C31yktZnw8HrTPmNH0H0twB2aRg6aQIDAQABo4IC/zCCAvswHQYDVR0OBBYEFMpf
ksahD0MmHrktHs7dnLUujwj/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQTBFQjNFQTg0RkQxMUYxOUI3NTgyREZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAmlGgAwQAmlKGAwQAmlKU
AwQAmlKZAwQAmlKeAwQCmlLEAwQAmlNBAwQAmlNDAwQAmlmEAwQAmlpBAwQAmlpD
AwQAmlqAAwQAmlqGAwQBmlqIAwQAmlqMAwQAmlq9MA0GCSqGSIb3DQEBCwUAA4IB
AQDKfPI/MkYvgKP97F2U/ya7XKbQa8fJOC5EUAE9LHmLIbBEMg2P6Q+4PGgJc2nY
BSlmj6mhiPJyC2ZMZ7WMBV/esusoTtfZFeQ33Df5kphqy/Qku+Q5I8i/XDjvd5Qq
gq7mK3qAnUIVHx/RhmSXCfeIc2XbYBV6zIh2hnSOg8MWnwaqKDeeOlWK9Of/dRQP
pEQSZkbwjhxGg5HdtyL+74NS8g5Iu7k3FGt/2RU4xRff0Ckt06Ro4XInmMOYUEat
MVm9+DyAuvZ07EKn/aOnHdaV5PStYwWptvDjEXw1k9C3VeD977ZLNV/V0kG/j5Ps
JT3svfk4rPX+LrAHITF/LlAx
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:47 2026 by rpki-client