Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A840154740A11F1B7A078B8CE1D38B0.roa
File: 5A840154740A11F1B7A078B8CE1D38B0.roa (raw, json)
Hash identifier: kIG7Qr81lEZZ1BIUnfprqsspe46l6Q69sDzNnY3E8Cs=
Subject key identifier: D6:A0:D5:F4:47:78:6F:93:F9:1E:7D:00:37:59:98:44:9F:90:F6:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D620
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A840154740A11F1B7A078B8CE1D38B0.roa
Signing time: Mon 29 Jun 2026 22:32:04 +0000
ROA not before: Mon 29 Jun 2026 22:31:59 +0000
ROA not after: Thu 06 Aug 2026 22:31:59 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120352 (0x1d620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 22:31:59 2026 GMT
Not After : Aug 6 22:31:59 2026 GMT
Subject: CN=6a42f264-8dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:fc:01:6a:65:37:ed:a2:97:e5:58:02:44:
89:4a:a6:12:6b:ae:01:4c:b2:0d:fa:b0:21:2a:9e:
9f:ab:f5:3f:b0:7c:f3:99:65:fe:a6:f5:b7:21:ca:
54:36:3e:da:a7:3a:5d:14:ce:0c:85:bf:fc:37:e0:
25:94:88:58:cc:21:3d:ad:21:7b:cf:cc:74:49:f4:
0e:be:10:c0:3a:85:49:9e:b6:9b:a3:de:e7:f6:f9:
ee:df:a4:9e:c5:fd:d2:7c:bd:31:21:1c:72:3b:aa:
2b:35:ad:39:41:7c:c2:8b:77:f2:e0:33:bc:10:b6:
ba:19:22:8b:bb:13:26:ee:ef:21:67:73:99:c8:38:
55:bf:5d:a8:f9:4a:53:95:ab:59:cb:b3:4e:8c:67:
0b:e9:ca:01:0e:8e:1e:b4:1a:d4:67:9b:90:d7:22:
ff:cc:4e:a1:af:c1:45:bb:4b:f7:4a:0d:df:89:a3:
38:89:60:64:57:73:f9:cb:b0:fb:cf:12:c7:50:8d:
d5:b9:46:cd:29:2e:80:5b:30:59:59:8d:11:2b:aa:
05:2f:7d:91:ce:50:51:7b:ac:26:bd:50:3f:e7:6a:
b9:08:0f:4f:03:45:e9:da:8b:5a:7f:a4:af:36:4a:
18:ba:94:55:78:c4:71:f3:a4:76:e9:01:26:6b:58:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:D5:F4:47:78:6F:93:F9:1E:7D:00:37:59:98:44:9F:90:F6:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A840154740A11F1B7A078B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0-154.209.139.255
154.219.205.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:4b:bb:6a:4d:cd:29:e7:b7:a1:fd:98:df:5f:d4:53:3c:fa:
68:5c:28:f8:5c:d4:c7:b0:0f:b8:ab:9b:52:d5:85:dd:f6:ee:
a7:ec:a0:b4:b8:70:23:33:67:42:70:cc:cb:d5:23:f5:50:fa:
43:80:1c:4d:db:7b:49:01:fa:7d:ab:18:5a:27:8b:23:ed:98:
a4:2d:05:12:23:f4:16:a9:90:21:cf:cd:f7:58:12:c7:09:3a:
40:71:ad:da:f7:fc:b1:69:7d:0c:e2:9b:de:2f:16:33:c5:c8:
3b:84:f5:1b:32:7e:4f:79:e9:1a:26:52:74:7d:e7:12:60:e0:
11:49:ee:51:e5:31:f7:90:52:d9:6e:a2:d9:ff:34:45:f2:1e:
67:25:12:9c:c9:a4:a8:1f:a8:29:98:f8:d2:17:fd:01:67:ad:
1e:f8:c2:41:61:3a:c2:f6:b3:58:d6:aa:14:34:3c:c5:56:00:
30:21:d0:55:bd:87:64:87:ab:e8:3d:76:9c:6a:50:ff:92:05:
b9:41:df:30:7d:14:56:bf:a9:0d:eb:0d:44:e5:74:79:bf:fe:
ab:b4:04:da:f5:76:dc:75:ca:84:59:56:7e:c8:ea:a0:d8:90:
39:81:26:34:72:ac:ca:2d:df:c5:fa:6c:0b:3e:4d:24:a4:6b:
ca:6c:e5:10
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAdYgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI5MjIzMTU5WhcNMjYwODA2MjIzMTU5WjAYMRYw
FAYDVQQDEw02YTQyZjI2NC04ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuaP8AWplN+2il+VYAkSJSqYSa64BTLIN+rAhKp6fq/U/sHzzmWX+pvW3
IcpUNj7apzpdFM4Mhb/8N+AllIhYzCE9rSF7z8x0SfQOvhDAOoVJnrabo97n9vnu
36Sexf3SfL0xIRxyO6orNa05QXzCi3fy4DO8ELa6GSKLuxMm7u8hZ3OZyDhVv12o
+UpTlatZy7NOjGcL6coBDo4etBrUZ5uQ1yL/zE6hr8FFu0v3Sg3fiaM4iWBkV3P5
y7D7zxLHUI3VuUbNKS6AWzBZWY0RK6oFL32RzlBRe6wmvVA/52q5CA9PA0Xp2ota
f6SvNkoYupRVeMRx86R26QEma1jcSwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFNag
1fRHeG+T+R59ADdZmESfkPZPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QTg0MDE1NDc0MEExMUYxQjdBMDc4QjhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAmtETAwQAmtFfAwQBmtGE
MAwDBACa0YcDBAKa0YgDBACa280wDQYJKoZIhvcNAQELBQADggEBAL1Lu2pNzSnn
t6H9mN9f1FM8+mhcKPhc1MewD7irm1LVhd327qfsoLS4cCMzZ0JwzMvVI/VQ+kOA
HE3be0kB+n2rGFoniyPtmKQtBRIj9BapkCHPzfdYEscJOkBxrdr3/LFpfQzim94v
FjPFyDuE9Rsyfk956RomUnR95xJg4BFJ7lHlMfeQUtluotn/NEXyHmclEpzJpKgf
qCmY+NIX/QFnrR74wkFhOsL2s1jWqhQ0PMVWADAh0FW9h2SHq+g9dpxqUP+SBblB
3zB9FFa/qQ3rDUTldHm//qu0BNr1dtx1yoRZVn7I6qDYkDmBJjRyrMot38X6bAs+
TSSka8ps5RA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:46 2026 by rpki-client