Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0FF12A87C4411F18722F505CF1D38B0.roa
File: F0FF12A87C4411F18722F505CF1D38B0.roa (raw, json)
Hash identifier: JHvlSVCbNtuhmaIiXbeUJIi1wtxuWDC3i5zKzD8OxeQ=
Subject key identifier: 83:ED:F4:BE:44:FD:5A:B5:5B:4F:DF:5F:F0:50:10:23:51:E2:B7:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0FF12A87C4411F18722F505CF1D38B0.roa
Signing time: Fri 10 Jul 2026 09:51:37 +0000
ROA not before: Fri 10 Jul 2026 09:51:33 +0000
ROA not after: Tue 18 Aug 2026 09:51:33 +0000
asID: 55020
IP address blocks: 154.193.192.0/18 maxlen: 24
154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.204.183.0/24 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120819 (0x1d7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:51:33 2026 GMT
Not After : Aug 18 09:51:33 2026 GMT
Subject: CN=6a50c0a9-b0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:25:3d:90:39:0a:ba:2d:47:46:09:b2:6d:
9a:82:33:90:33:08:b3:02:fe:5a:e5:cb:b0:ee:9c:
bb:59:29:8e:8d:a9:77:2a:64:44:f7:f0:fc:d2:99:
f9:1e:39:d4:16:81:f0:f0:63:4f:24:50:47:96:8d:
5f:61:6f:5d:41:48:f3:d4:74:7e:6c:b1:f0:63:ff:
3e:64:c0:27:77:22:e6:41:6a:ce:e8:28:ff:12:73:
c2:97:ad:41:7e:a6:23:a2:29:9a:36:c5:01:cc:a7:
06:6f:36:f8:92:19:91:72:a6:59:a4:96:17:47:d8:
b2:5c:82:3e:eb:f7:d7:c2:d1:05:4d:94:fb:c6:20:
65:08:10:af:0c:65:99:17:61:a2:42:f0:91:e3:31:
30:ba:3c:3c:ad:4d:79:2f:d4:12:c0:8f:37:28:ff:
28:46:9f:2f:7a:a0:8e:58:75:cf:20:7f:dd:7d:22:
3b:ff:fd:52:e7:a4:d0:a8:f2:b2:30:ad:96:3a:09:
e5:61:88:27:53:32:06:5b:5d:9e:ae:f6:c5:3f:ec:
6a:dd:71:ed:0f:4a:26:df:ab:0b:7d:ff:b2:92:7c:
ef:46:68:44:08:e8:9d:d5:e3:ac:a3:b6:e9:dd:37:
0b:13:50:3e:99:0d:7e:ed:c9:51:2c:80:27:c3:f3:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:F4:BE:44:FD:5A:B5:5B:4F:DF:5F:F0:50:10:23:51:E2:B7:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0FF12A87C4411F18722F505CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:71:a8:0f:1b:ce:d5:2c:97:7b:dd:6c:69:be:42:2b:e9:84:
84:71:9c:88:7c:7a:33:fb:03:8e:93:c9:51:26:6e:ea:e8:88:
64:28:3e:8d:f0:ef:80:7d:e6:34:b9:df:44:06:59:46:de:18:
1b:02:35:27:78:6b:8d:54:7d:86:72:bd:48:d1:08:6c:16:c3:
95:14:46:cc:b6:1b:6e:5e:24:e7:7a:a1:0d:90:6d:3d:b9:3e:
68:64:52:79:1b:a6:be:09:e4:00:38:4d:3d:6d:d8:42:81:31:
c3:32:8c:08:14:34:46:a6:cd:90:81:80:e0:ca:2a:18:e9:89:
01:11:86:d3:92:64:d6:24:14:4c:74:ab:74:91:73:e6:3e:ae:
8f:d8:91:b3:10:49:3b:75:62:8c:70:73:72:fc:ef:41:23:5c:
61:df:9c:20:3c:70:8b:2a:a6:8d:0c:3c:fa:d5:b8:c2:8b:e9:
54:13:f6:15:b9:a7:72:bc:17:e7:10:e1:ad:c2:d3:b9:32:30:
64:13:33:9a:ff:7c:15:9a:72:1e:82:ff:39:e8:44:9d:ab:78:
43:9a:ad:ad:36:ba:bf:80:df:e2:4d:cb:44:64:b6:3b:b0:68:
e7:6d:73:e1:76:f4:81:d8:9d:02:91:e0:df:e0:4d:53:36:c3:
b1:51:d1:60
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAdfzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEwMDk1MTMzWhcNMjYwODE4MDk1MTMzWjAYMRYw
FAYDVQQDEw02YTUwYzBhOS1iMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0OIlPZA5CrotR0YJsm2agjOQMwizAv5a5cuw7py7WSmOjal3KmRE9/D8
0pn5HjnUFoHw8GNPJFBHlo1fYW9dQUjz1HR+bLHwY/8+ZMAndyLmQWrO6Cj/EnPC
l61BfqYjoimaNsUBzKcGbzb4khmRcqZZpJYXR9iyXII+6/fXwtEFTZT7xiBlCBCv
DGWZF2GiQvCR4zEwujw8rU15L9QSwI83KP8oRp8veqCOWHXPIH/dfSI7//1S56TQ
qPKyMK2WOgnlYYgnUzIGW12ervbFP+xq3XHtD0om36sLff+yknzvRmhECOid1eOs
o7bp3TcLE1A+mQ1+7clRLIAnw/NKZQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFIPt
9L5E/Vq1W0/fX/BQECNR4refMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMEZGMTJBODdDNDQxMUYxODcyMkY1MDVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQGmsHAAwQDmswIAwQGmsyA
AwQAmtICAwQCmtMEMA0GCSqGSIb3DQEBCwUAA4IBAQDScagPG87VLJd73WxpvkIr
6YSEcZyIfHoz+wOOk8lRJm7q6IhkKD6N8O+AfeY0ud9EBllG3hgbAjUneGuNVH2G
cr1I0QhsFsOVFEbMthtuXiTneqENkG09uT5oZFJ5G6a+CeQAOE09bdhCgTHDMowI
FDRGps2QgYDgyioY6YkBEYbTkmTWJBRMdKt0kXPmPq6P2JGzEEk7dWKMcHNy/O9B
I1xh35wgPHCLKqaNDDz61bjCi+lUE/YVuadyvBfnEOGtwtO5MjBkEzOa/3wVmnIe
gv856ESdq3hDmq2tNrq/gN/iTctEZLY7sGjnbXPhdvSB2J0CkeDf4E1TNsOxUdFg
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:30 2026 by rpki-client