Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E95D60C76F411F1A3DD3CF5CE1D38B0.roa
File: 2E95D60C76F411F1A3DD3CF5CE1D38B0.roa (raw, json)
Hash identifier: u5iy3JERsXUxOpjSc7y2/jgLCyB67+J2AtX8Wz+FcSg=
Subject key identifier: 45:A4:BE:84:7F:CC:0C:13:C8:70:CB:0D:00:43:2B:39:62:62:60:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E95D60C76F411F1A3DD3CF5CE1D38B0.roa
Signing time: Fri 03 Jul 2026 15:30:55 +0000
ROA not before: Fri 03 Jul 2026 15:30:51 +0000
ROA not after: Mon 10 Aug 2026 15:30:51 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120514 (0x1d6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 15:30:51 2026 GMT
Not After : Aug 10 15:30:51 2026 GMT
Subject: CN=6a47d5af-e67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:e2:fe:6b:d4:17:3a:fd:d1:7a:66:29:04:
9f:e1:64:fb:cf:c3:65:95:7a:54:06:7f:35:99:73:
2d:c5:b5:0c:98:6f:6a:5d:2d:d9:f5:11:a0:d7:32:
5c:8e:09:d2:38:82:07:59:02:01:64:90:2e:bb:94:
8b:78:2f:4d:19:9e:df:0e:ca:e8:e4:a2:7e:f6:6c:
d6:e0:ba:67:10:01:f9:80:80:dc:7e:f8:46:81:16:
28:3f:2e:a2:0e:22:a4:a7:53:97:ea:8f:b9:48:10:
ae:5c:fe:b8:12:ca:16:f3:d3:65:31:07:b9:4e:d8:
a1:66:1c:87:ca:50:56:61:cc:61:d8:54:ba:39:fa:
30:a5:37:a3:09:a4:73:72:6b:ff:eb:68:b4:b9:3f:
45:4d:20:74:8b:ed:1d:bc:d6:75:b7:55:c8:ae:29:
b3:62:68:96:d5:39:5e:04:4b:86:81:89:a1:d4:51:
69:51:90:0f:fa:e7:7f:ae:1a:77:cf:84:64:30:37:
f2:fa:29:03:e8:34:c9:38:b0:21:18:e8:a5:1b:00:
28:46:9a:4c:c7:8f:a4:b6:9e:75:a5:af:04:0b:8f:
b0:f4:19:b8:e7:04:f7:df:93:e9:77:4f:4b:a1:c7:
44:4e:a4:0b:9c:04:a0:09:06:40:cc:63:f3:61:a6:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:BE:84:7F:CC:0C:13:C8:70:CB:0D:00:43:2B:39:62:62:60:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E95D60C76F411F1A3DD3CF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.24.255
154.223.26.0/24
154.223.28.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ea:58:2c:f6:2f:8e:d9:5f:cd:e8:f7:2f:92:78:99:e0:2f:
5f:e2:e1:97:0f:78:36:f1:26:a7:7a:b8:63:74:e8:46:90:50:
bc:a0:8a:bd:69:8b:bc:23:2d:9a:2c:30:6e:74:28:55:43:13:
1e:22:45:41:6d:3f:c7:8f:cf:ad:78:d6:b8:e8:8b:46:a9:56:
44:27:23:fe:5d:1e:40:cb:58:17:66:ad:b4:4b:72:bd:a6:ff:
2b:fd:f1:b1:86:51:d3:e1:c7:d9:6f:90:18:ea:5b:0c:72:6e:
df:fd:e1:c9:6f:14:bb:2b:76:6f:fb:24:4a:b0:71:05:81:d0:
fc:ce:e1:19:84:4c:3e:e8:85:b8:db:84:98:47:61:f1:55:0a:
a5:db:f4:4d:23:f8:05:49:d9:b1:50:92:3e:64:38:e9:43:7a:
fc:67:d4:6f:ba:8f:a0:d9:71:9d:8b:a6:67:13:6c:e5:4e:e1:
45:bd:c8:94:58:5a:ed:db:d5:c1:6a:45:12:ca:ea:1c:b0:9b:
42:09:34:50:25:de:15:b9:25:b1:c6:a2:78:d9:b4:02:8b:fd:
1f:06:3d:b2:7b:eb:f8:41:6a:cb:08:33:d2:2c:33:7b:70:e0:
3d:55:0a:de:86:20:e2:36:4d:cf:ed:5d:86:cc:3e:18:c5:ba:
d6:bb:29:c6
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAdbCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMTUzMDUxWhcNMjYwODEwMTUzMDUxWjAYMRYw
FAYDVQQDEw02YTQ3ZDVhZi1lNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtDzi/mvUFzr90XpmKQSf4WT7z8NllXpUBn81mXMtxbUMmG9qXS3Z9RGg
1zJcjgnSOIIHWQIBZJAuu5SLeC9NGZ7fDsro5KJ+9mzW4LpnEAH5gIDcfvhGgRYo
Py6iDiKkp1OX6o+5SBCuXP64EsoW89NlMQe5TtihZhyHylBWYcxh2FS6OfowpTej
CaRzcmv/62i0uT9FTSB0i+0dvNZ1t1XIrimzYmiW1TleBEuGgYmh1FFpUZAP+ud/
rhp3z4RkMDfy+ikD6DTJOLAhGOilGwAoRppMx4+ktp51pa8EC4+w9Bm45wT335Pp
d09LocdETqQLnASgCQZAzGPzYaaM/QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFEWk
voR/zAwTyHDLDQBDKzliYmB5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTk1RDYwQzc2RjQxMUYxQTNERDNDRjVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBASa3xADBACa3xgDBACa
3xoDBAGa3xwwDQYJKoZIhvcNAQELBQADggEBAIrqWCz2L47ZX83o9y+SeJngL1/i
4ZcPeDbxJqd6uGN06EaQULygir1pi7wjLZosMG50KFVDEx4iRUFtP8ePz6141rjo
i0apVkQnI/5dHkDLWBdmrbRLcr2m/yv98bGGUdPhx9lvkBjqWwxybt/94clvFLsr
dm/7JEqwcQWB0PzO4RmETD7ohbjbhJhHYfFVCqXb9E0j+AVJ2bFQkj5kOOlDevxn
1G+6j6DZcZ2LpmcTbOVO4UW9yJRYWu3b1cFqRRLK6hywm0IJNFAl3hW5JbHGonjZ
tAKL/R8GPbJ76/hBassIM9IsM3tw4D1VCt6GIOI2Tc/tXYbMPhjFuta7KcY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:03 2026 by rpki-client