Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4369BCE0841B11F191B349FBCE1D38B0.roa
File: 4369BCE0841B11F191B349FBCE1D38B0.roa (raw, json)
Hash identifier: FPnBzngvKq4m183OfSDVoa8OrOqy3buUpTRcUbT4CR8=
Subject key identifier: FC:29:68:8D:E7:AC:D1:EE:22:24:C9:49:82:E4:94:94:0B:4C:F8:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4369BCE0841B11F191B349FBCE1D38B0.roa
Signing time: Mon 20 Jul 2026 09:13:26 +0000
ROA not before: Mon 20 Jul 2026 09:13:21 +0000
ROA not after: Thu 27 Aug 2026 09:13:21 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.68.0/24 maxlen: 24
154.206.69.0/24 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.70.0/24 maxlen: 24
154.206.71.0/24 maxlen: 24
154.206.72.0/24 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.90.0/23 maxlen: 24
154.206.96.0/23 maxlen: 24
154.206.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121298 (0x1d9d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:13:21 2026 GMT
Not After : Aug 27 09:13:21 2026 GMT
Subject: CN=6a5de6b6-2292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:d5:1c:2b:82:56:fe:ce:85:3e:47:89:b9:
09:2d:e2:49:e0:70:5a:8e:82:23:61:1f:0d:80:da:
1f:fc:6f:94:f1:44:a8:21:a7:05:e6:82:69:62:cb:
25:4f:a0:0d:11:9a:01:4c:4e:78:ba:47:f7:2c:29:
f1:be:28:70:01:86:2f:8b:56:7a:08:38:56:26:6d:
e2:18:b1:e9:9d:72:81:a6:e5:34:49:c6:8b:c2:ae:
7c:e7:5b:c0:44:8d:3f:e9:3b:40:96:81:79:14:3e:
11:24:52:71:e5:6f:bc:8d:4a:a5:c1:e1:8a:2e:6f:
7b:da:7a:7e:3b:e5:6e:77:c4:95:69:c0:80:15:ef:
bc:17:ad:cf:bf:99:a7:01:f9:47:05:18:2a:0e:7c:
dc:8f:8f:90:75:d4:38:9e:d1:08:55:76:df:f2:6c:
25:a0:f0:79:f9:4b:a2:22:ca:40:8b:c0:43:97:44:
eb:61:23:02:d8:97:1f:9e:80:b6:63:2c:9d:b0:18:
bb:69:b3:ff:b9:6d:d8:f8:4a:f3:0d:fc:0f:99:f1:
9e:4b:78:18:24:45:6f:b9:b6:fc:11:4a:01:c1:57:
20:15:7a:f6:f3:97:1f:db:44:21:10:d0:85:07:f4:
0b:7a:9b:a0:95:4b:cd:ad:fc:73:1e:e4:67:c9:6b:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:68:8D:E7:AC:D1:EE:22:24:C9:49:82:E4:94:94:0B:4C:F8:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4369BCE0841B11F191B349FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0-154.206.66.255
154.206.68.0-154.206.72.255
154.206.78.0-154.206.91.255
154.206.96.0/22
Signature Algorithm: sha256WithRSAEncryption
21:08:c2:39:98:f1:8f:b8:1d:0f:4d:46:8f:99:da:91:f5:1d:
21:da:5f:67:fc:7d:0a:84:90:85:dc:4f:ac:b0:7d:02:99:d1:
42:eb:95:a9:5c:4f:81:47:73:50:ba:a4:90:33:9a:99:89:2c:
2d:d1:f3:24:8d:37:ee:ee:ad:8f:1f:3e:1e:e1:53:fc:79:bb:
cb:bb:5b:dd:35:0e:43:87:00:6c:95:94:97:7f:c7:19:07:37:
08:73:9a:4e:2a:16:f9:e1:a8:04:65:a2:ff:82:98:4b:85:6e:
09:27:b0:36:db:be:b4:a0:df:62:a6:af:72:88:60:fc:cf:9e:
1a:02:35:d6:b4:e3:3a:3f:c7:c2:b9:91:24:9c:1e:a8:4e:e1:
d9:c6:43:19:3f:11:9e:4b:c0:16:04:8e:ed:72:d3:ca:c3:33:
0b:a4:50:35:97:be:48:ec:6e:1a:91:ab:ff:af:43:0a:ee:f1:
b2:db:6b:72:3c:28:76:67:f2:95:b5:9d:9c:58:c9:02:d4:c0:
84:46:7d:39:7c:d7:cf:ac:c1:5d:bc:74:a9:86:60:70:f6:6e:
52:67:26:9c:17:f4:de:64:29:95:87:00:b7:2f:4a:62:5c:e3:
db:5f:81:70:26:ec:0c:bd:c3:fd:8a:be:89:fa:40:10:65:16:
e8:5b:c3:bc
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAdnSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIwMDkxMzIxWhcNMjYwODI3MDkxMzIxWjAYMRYw
FAYDVQQDEw02YTVkZTZiNi0yMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxMbVHCuCVv7OhT5HibkJLeJJ4HBajoIjYR8NgNof/G+U8USoIacF5oJp
YsslT6ANEZoBTE54ukf3LCnxvihwAYYvi1Z6CDhWJm3iGLHpnXKBpuU0ScaLwq58
51vARI0/6TtAloF5FD4RJFJx5W+8jUqlweGKLm972np+O+Vud8SVacCAFe+8F63P
v5mnAflHBRgqDnzcj4+QddQ4ntEIVXbf8mwloPB5+UuiIspAi8BDl0TrYSMC2Jcf
noC2YyydsBi7abP/uW3Y+ErzDfwPmfGeS3gYJEVvubb8EUoBwVcgFXr285cf20Qh
ENCFB/QLepuglUvNrfxzHuRnyWu6NQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFPwp
aI3nrNHuIiTJSYLklJQLTPjoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MzY5QkNFMDg0MUIxMUYxOTFCMzQ5RkJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAaazkADBACazkIwDAME
AprORAMEAJrOSDAMAwQBms5OAwQCms5YAwQCms5gMA0GCSqGSIb3DQEBCwUAA4IB
AQAhCMI5mPGPuB0PTUaPmdqR9R0h2l9n/H0KhJCF3E+ssH0CmdFC65WpXE+BR3NQ
uqSQM5qZiSwt0fMkjTfu7q2PHz4e4VP8ebvLu1vdNQ5DhwBslZSXf8cZBzcIc5pO
Khb54agEZaL/gphLhW4JJ7A22760oN9ipq9yiGD8z54aAjXWtOM6P8fCuZEknB6o
TuHZxkMZPxGeS8AWBI7tctPKwzMLpFA1l75I7G4akav/r0MK7vGy22tyPCh2Z/KV
tZ2cWMkC1MCERn05fNfPrMFdvHSphmBw9m5SZyacF/TeZCmVhwC3L0piXOPbX4Fw
JuwMvcP9ir6J+kAQZRboW8O8
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:09 2026 by rpki-client