Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58876572760711F1A1AA52DBCE1D38B0.roa
File: 58876572760711F1A1AA52DBCE1D38B0.roa (raw, json)
Hash identifier: 5Buv7z19Cxx2fFr23Dyd/7/1WauSjRBviTqsOo8nCu4=
Subject key identifier: CE:9D:B4:0B:63:8B:3F:24:88:C8:D6:8A:CD:AA:40:B0:24:15:F8:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D680
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58876572760711F1A1AA52DBCE1D38B0.roa
Signing time: Thu 02 Jul 2026 11:15:35 +0000
ROA not before: Thu 02 Jul 2026 11:15:30 +0000
ROA not after: Sat 25 Jul 2026 11:15:30 +0000
asID: 401783
IP address blocks: 154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120448 (0x1d680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 11:15:30 2026 GMT
Not After : Jul 25 11:15:30 2026 GMT
Subject: CN=6a464857-e6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:a3:2c:bd:57:bf:ab:c0:42:4c:7f:52:fc:
15:49:2d:cb:e8:8e:5c:02:7b:4a:5d:ec:de:fb:4d:
f8:38:18:23:b7:f6:c8:76:56:96:34:bc:65:6f:e4:
5c:f4:e9:2e:f6:b1:af:0e:3b:6c:e7:46:3d:67:cb:
43:45:e8:41:9c:45:3c:0a:f2:57:33:39:6e:6f:7a:
00:70:10:5a:25:86:19:5f:c0:56:1b:43:1d:53:86:
ed:63:fc:47:4e:18:fc:d0:ff:c7:c2:0a:55:b1:fa:
28:b7:e9:e9:81:a0:ce:21:5f:ca:c3:2b:c3:0e:48:
da:a7:ac:17:be:1e:9e:11:c7:e7:a8:ac:61:4f:d7:
b4:e6:16:02:72:a9:33:c0:89:de:75:02:7b:75:32:
37:c9:39:7d:62:90:ef:83:7a:9d:b0:61:b6:cf:44:
6a:5a:4d:70:7a:f4:24:2a:34:19:d5:e9:63:52:29:
9d:5b:4f:a7:4e:fa:3b:3c:54:86:0f:7d:36:4d:00:
b7:94:ed:52:19:62:87:a0:33:f2:8c:e3:1b:1a:60:
fc:52:03:85:f5:69:61:09:66:64:8b:06:07:8c:d4:
b9:00:1a:4f:07:a8:61:d6:7a:6b:1c:19:0e:a6:ef:
92:73:8c:dc:02:46:98:71:9f:4d:17:79:d5:8c:f6:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9D:B4:0B:63:8B:3F:24:88:C8:D6:8A:CD:AA:40:B0:24:15:F8:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58876572760711F1A1AA52DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.180.0/24
154.199.4.0/24
154.200.1.0/24
154.200.157.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
90:27:9f:4b:64:39:f1:32:92:17:67:14:79:29:43:c3:54:31:
e2:e7:65:08:4c:27:81:8a:04:8b:a6:d8:04:6b:75:14:8b:f4:
ea:87:12:e4:23:12:65:ab:c0:ba:5a:b2:47:e4:32:6e:9e:b8:
a9:4c:32:fe:d5:33:e4:0e:32:a0:66:48:26:4f:c9:f6:57:ab:
e8:f7:9d:86:3c:09:dd:9f:cb:46:1f:93:04:e1:d1:35:f1:80:
03:b4:6c:64:83:a4:ea:2b:b3:20:15:00:f7:96:c1:8d:9b:18:
76:c8:34:3b:fd:f3:fd:19:23:95:ff:70:b9:66:9e:4c:af:67:
04:f5:e1:9e:30:6f:24:f9:d1:99:c4:3c:76:74:7d:ea:41:43:
0a:45:3f:fc:7a:6f:a2:b7:2c:25:fb:fe:b1:1b:d3:fe:df:78:
b6:15:05:aa:75:a4:ac:7b:e3:98:24:5d:d7:67:8b:62:17:ce:
45:4a:84:61:55:1c:94:76:ca:85:5f:16:b9:d0:6d:56:4f:c1:
2e:ab:f3:24:7d:f7:12:85:2d:6a:0b:32:9e:6f:d7:85:db:23:
d8:5c:56:ae:7c:6f:b8:4f:09:ad:5d:1e:d9:e8:39:21:8c:68:
50:4e:46:2c:c6:66:e6:45:b3:ce:a4:d4:a9:f1:0e:23:e9:46:
12:bb:ab:77
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAdaAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAyMTExNTMwWhcNMjYwNzI1MTExNTMwWjAYMRYw
FAYDVQQDEw02YTQ2NDg1Ny1lNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArSyjLL1Xv6vAQkx/UvwVSS3L6I5cAntKXeze+034OBgjt/bIdlaWNLxl
b+Rc9Oku9rGvDjts50Y9Z8tDRehBnEU8CvJXMzlub3oAcBBaJYYZX8BWG0MdU4bt
Y/xHThj80P/HwgpVsfoot+npgaDOIV/KwyvDDkjap6wXvh6eEcfnqKxhT9e05hYC
cqkzwInedQJ7dTI3yTl9YpDvg3qdsGG2z0RqWk1wevQkKjQZ1eljUimdW0+nTvo7
PFSGD302TQC3lO1SGWKHoDPyjOMbGmD8UgOF9WlhCWZkiwYHjNS5ABpPB6hh1npr
HBkOpu+Sc4zcAkaYcZ9NF3nVjPaqzwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFM6d
tAtjiz8kiMjWis2qQLAkFfhMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODg3NjU3Mjc2MDcxMUYxQTFBQTUyREJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAmsS0AwQAmscEAwQAmsgB
MAwDBACayJ0DBACayKIDBACayL8wDQYJKoZIhvcNAQELBQADggEBAJAnn0tkOfEy
khdnFHkpQ8NUMeLnZQhMJ4GKBIum2ARrdRSL9OqHEuQjEmWrwLpaskfkMm6euKlM
Mv7VM+QOMqBmSCZPyfZXq+j3nYY8Cd2fy0YfkwTh0TXxgAO0bGSDpOorsyAVAPeW
wY2bGHbINDv98/0ZI5X/cLlmnkyvZwT14Z4wbyT50ZnEPHZ0fepBQwpFP/x6b6K3
LCX7/rEb0/7feLYVBap1pKx745gkXddni2IXzkVKhGFVHJR2yoVfFrnQbVZPwS6r
8yR99xKFLWoLMp5v14XbI9hcVq58b7hPCa1dHtnoOSGMaFBORizGZuZFs86k1Knx
DiPpRhK7q3c=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:18 2026 by rpki-client