Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F165840835C11F18EA445EFCE1D38B0.roa
File: 1F165840835C11F18EA445EFCE1D38B0.roa (raw, json)
Hash identifier: rPS7RlezEg8x8qAHsQqHXpapz/3UKAGPnf3cRNZPpLo=
Subject key identifier: D6:8E:81:5D:10:A3:68:A4:CE:D8:B3:14:22:50:56:1B:7F:86:E3:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F165840835C11F18EA445EFCE1D38B0.roa
Signing time: Sun 19 Jul 2026 10:25:11 +0000
ROA not before: Sun 19 Jul 2026 10:25:07 +0000
ROA not after: Wed 02 Sep 2026 10:25:07 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
154.94.1.0/24 maxlen: 24
154.94.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121265 (0x1d9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 10:25:07 2026 GMT
Not After : Sep 2 10:25:07 2026 GMT
Subject: CN=6a5ca607-85b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:07:42:14:55:a7:61:ef:45:34:5a:1f:65:
d6:7c:cd:df:9d:ab:f6:c3:29:c0:9d:f3:d2:6b:2f:
40:16:a2:90:ff:e8:0e:b5:f9:c8:da:20:19:15:bb:
a9:24:e9:7f:29:c0:51:da:62:ff:9d:18:5c:68:e2:
a5:2e:8e:4c:56:bc:ff:6d:ca:71:c4:78:bf:be:0b:
b6:72:35:de:5f:47:2d:db:ca:b8:d6:84:59:fa:7a:
02:df:04:0c:a6:59:ee:8a:47:2d:1c:32:70:65:41:
ee:ee:53:ec:be:09:61:6a:2f:26:7b:75:d8:ae:f0:
c4:68:c9:86:af:27:d5:0d:9d:ec:63:92:a9:82:0a:
ac:1d:86:c5:ce:c6:71:80:46:b6:2a:f0:77:b2:41:
b2:f5:9b:ea:d5:1c:e6:09:b7:6c:6f:2e:a3:ee:05:
ab:4a:82:c6:bd:42:92:41:14:97:d1:6b:cc:82:6c:
2a:59:9f:fa:8f:b5:1e:dd:2d:3b:2b:cb:ff:93:d7:
90:6e:08:ce:62:e4:10:d0:6c:32:a6:c5:91:31:9b:
e7:91:14:9f:8d:0c:39:68:dc:90:af:ca:32:be:55:
1c:dd:e9:f8:5d:22:bb:8d:25:9c:5e:fb:fa:2f:c8:
53:67:6f:14:e2:87:cb:26:d2:23:ff:c1:5e:c7:0f:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8E:81:5D:10:A3:68:A4:CE:D8:B3:14:22:50:56:1B:7F:86:E3:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F165840835C11F18EA445EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
154.94.1.0/24
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
08:67:ad:b1:c9:0b:2a:34:3e:c5:82:3f:94:bc:da:26:76:45:
f3:1a:66:74:02:16:25:b6:79:01:b0:cf:db:07:88:f9:28:4d:
e2:e2:90:34:d9:23:0f:b7:be:a9:3d:23:85:7a:e1:cb:97:cc:
50:e6:f6:cf:73:6b:f7:d2:63:f2:5a:e6:4f:41:a3:04:78:08:
36:20:15:84:24:bd:c0:c3:c9:79:93:70:c0:aa:46:b2:f5:fd:
31:18:3a:65:98:40:7a:7f:97:47:6f:7c:a6:07:4d:88:17:3d:
46:5a:40:9b:86:c2:62:b3:f4:64:e7:1e:e9:8a:5d:89:fa:91:
09:34:1e:99:49:48:fb:d3:1d:1a:d8:4b:24:ad:57:88:d5:ed:
74:cb:52:ab:98:23:d4:25:6e:ce:57:ee:85:04:3c:a5:91:66:
7e:14:65:ac:30:5a:d3:ff:83:43:44:ff:00:57:f6:ce:eb:7f:
bd:9f:66:8e:fb:42:44:7e:30:e3:c1:7e:b0:de:29:7f:38:a8:
a3:51:c3:f4:9e:6d:8f:67:19:df:d8:54:02:76:f7:dc:25:79:
36:7a:40:bb:57:b5:b7:a8:33:0e:3d:5f:6b:a4:4b:fb:51:3e:
e2:4b:0c:2d:5b:f8:ef:c0:60:4d:0f:82:4b:e2:98:be:65:b9:
19:2e:0e:34
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAdmxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE5MTAyNTA3WhcNMjYwOTAyMTAyNTA3WjAYMRYw
FAYDVQQDEw02YTVjYTYwNy04NWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA14AHQhRVp2HvRTRaH2XWfM3fnav2wynAnfPSay9AFqKQ/+gOtfnI2iAZ
FbupJOl/KcBR2mL/nRhcaOKlLo5MVrz/bcpxxHi/vgu2cjXeX0ct28q41oRZ+noC
3wQMplnuikctHDJwZUHu7lPsvglhai8me3XYrvDEaMmGryfVDZ3sY5KpggqsHYbF
zsZxgEa2KvB3skGy9Zvq1RzmCbdsby6j7gWrSoLGvUKSQRSX0WvMgmwqWZ/6j7Ue
3S07K8v/k9eQbgjOYuQQ0GwypsWRMZvnkRSfjQw5aNyQr8oyvlUc3en4XSK7jSWc
Xvv6L8hTZ28U4ofLJtIj/8Fexw/SoQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFNaO
gV0Qo2ikztizFCJQVht/huNzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRjE2NTg0MDgzNUMxMUYxOEVBNDQ1RUZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmlqHAwQAml4BAwQAml4m
MA0GCSqGSIb3DQEBCwUAA4IBAQAIZ62xyQsqND7Fgj+UvNomdkXzGmZ0AhYltnkB
sM/bB4j5KE3i4pA02SMPt76pPSOFeuHLl8xQ5vbPc2v30mPyWuZPQaMEeAg2IBWE
JL3Aw8l5k3DAqkay9f0xGDplmEB6f5dHb3ymB02IFz1GWkCbhsJis/Rk5x7pil2J
+pEJNB6ZSUj70x0a2EskrVeI1e10y1KrmCPUJW7OV+6FBDylkWZ+FGWsMFrT/4ND
RP8AV/bO63+9n2aO+0JEfjDjwX6w3il/OKijUcP0nm2PZxnf2FQCdvfcJXk2ekC7
V7W3qDMOPV9rpEv7UT7iSwwtW/jvwGBND4JL4pi+ZbkZLg40
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:46 2026 by rpki-client