Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E0235A713F11F1994578CACE1D38B0.roa
File: A3E0235A713F11F1994578CACE1D38B0.roa (raw, json)
Hash identifier: RUt3a99f3cBiRSK1PCCLig5CwSRBV1r8ZYUQXrd4XVk=
Subject key identifier: 07:4A:9A:5D:39:55:DA:DE:4A:ED:D5:E8:0E:EB:EF:45:F7:5E:C8:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D55B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E0235A713F11F1994578CACE1D38B0.roa
Signing time: Fri 26 Jun 2026 09:15:57 +0000
ROA not before: Fri 26 Jun 2026 09:15:52 +0000
ROA not after: Thu 30 Jul 2026 09:15:52 +0000
asID: 401783
IP address blocks: 154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120155 (0x1d55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:15:52 2026 GMT
Not After : Jul 30 09:15:52 2026 GMT
Subject: CN=6a3e434d-b798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:f0:b2:f0:94:1c:50:75:61:93:d9:ab:5b:
47:21:a2:89:6c:3a:b9:fa:b2:35:d6:bc:4e:62:04:
97:17:5c:6e:b3:1a:5c:36:76:8a:c8:46:c5:66:d1:
7a:71:73:af:e6:3b:c1:16:38:53:03:b2:e0:c5:5f:
6b:31:36:75:c8:d2:55:2b:d3:5b:26:22:f3:98:8c:
e6:0f:c6:d7:64:b8:74:5c:6c:27:79:f0:65:1b:7d:
ce:92:39:de:8c:6b:b7:ce:24:8d:75:35:59:d0:c4:
1f:f3:e7:56:d3:aa:92:b2:52:d8:79:48:5d:24:59:
68:e9:cd:35:ee:51:2d:20:16:f5:1e:fa:55:65:43:
41:eb:22:7e:db:04:5c:a9:b0:3a:83:98:12:ec:f1:
17:27:e1:7e:3b:2a:70:9c:4b:c6:25:7d:5d:aa:c9:
ba:9c:39:80:b5:6b:f9:9f:63:8f:14:25:f1:ca:76:
51:8a:98:01:11:71:8a:81:0b:22:6b:03:8c:30:d5:
b0:b5:7d:31:5c:63:86:47:4d:e5:c9:e2:e5:e1:3b:
55:23:ad:21:07:9a:fa:d8:42:9f:4d:10:90:05:17:
4e:8c:c2:cf:38:d2:5a:a7:d2:29:b8:79:1a:f1:8d:
30:32:8e:4b:f7:1f:0b:44:8f:ac:48:5d:33:53:5d:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4A:9A:5D:39:55:DA:DE:4A:ED:D5:E8:0E:EB:EF:45:F7:5E:C8:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E0235A713F11F1994578CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.179.0-154.196.180.255
154.200.1.0/24
154.200.37.0/24
154.200.43.0/24
154.200.140.0/24
154.200.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d2:af:04:a9:ab:b8:a4:0a:f8:5f:b1:c6:12:ba:76:e9:3d:
ff:48:62:8e:b2:33:45:ae:b1:86:e9:9c:32:5b:27:0d:82:86:
8f:15:ed:fd:b4:ee:cb:dc:15:c7:07:b4:ac:24:58:e0:a2:9a:
a3:63:cb:cf:c4:05:7a:95:cd:14:49:62:d5:89:7a:dc:86:2b:
cd:20:57:6e:0e:79:c5:97:2c:a4:41:b1:29:9a:73:ce:cf:d2:
ca:1e:80:b1:00:b4:38:ce:4b:6a:77:7e:7b:1e:22:33:6b:ab:
cf:8d:0f:29:24:76:f6:6b:40:f2:fe:12:74:65:7b:91:3e:58:
76:e4:f1:89:13:a3:bf:5d:60:16:1a:8a:19:bd:83:32:4c:63:
b5:1b:2c:d3:d6:4d:5f:e9:ff:2b:12:6e:6d:42:6d:64:de:79:
10:e6:49:97:4e:88:55:04:07:f2:fa:5f:bf:8a:7b:ab:fe:0d:
d0:2a:b4:d0:94:60:8e:1d:4c:80:71:fa:70:e3:a5:68:8d:8d:
29:eb:80:3c:6b:7c:3f:d6:b2:04:a3:2c:1c:a8:7e:96:6c:40:
20:58:5a:a1:13:e4:fa:e6:9b:eb:2a:bd:d5:a3:0f:bc:16:b7:
2b:20:df:e9:59:92:50:37:2d:f3:02:f4:6e:d2:02:79:02:38:
6b:e1:5f:06
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAdVbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MDkxNTUyWhcNMjYwNzMwMDkxNTUyWjAYMRYw
FAYDVQQDEw02YTNlNDM0ZC1iNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3kzwsvCUHFB1YZPZq1tHIaKJbDq5+rI11rxOYgSXF1xusxpcNnaKyEbF
ZtF6cXOv5jvBFjhTA7LgxV9rMTZ1yNJVK9NbJiLzmIzmD8bXZLh0XGwnefBlG33O
kjnejGu3ziSNdTVZ0MQf8+dW06qSslLYeUhdJFlo6c017lEtIBb1HvpVZUNB6yJ+
2wRcqbA6g5gS7PEXJ+F+OypwnEvGJX1dqsm6nDmAtWv5n2OPFCXxynZRipgBEXGK
gQsiawOMMNWwtX0xXGOGR03lyeLl4TtVI60hB5r62EKfTRCQBRdOjMLPONJap9Ip
uHka8Y0wMo5L9x8LRI+sSF0zU107twIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFAdK
ml05VdreSu3V6A7r70X3XsiHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BM0UwMjM1QTcxM0YxMUYxOTk0NTc4Q0FDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAmsEjAwQAmsLDAwQAmsSG
MAwDBACaxLMDBACaxLQDBACayAEDBACayCUDBACayCsDBACayIwDBACayI4wDQYJ
KoZIhvcNAQELBQADggEBACrSrwSpq7ikCvhfscYSunbpPf9IYo6yM0WusYbpnDJb
Jw2Cho8V7f207svcFccHtKwkWOCimqNjy8/EBXqVzRRJYtWJetyGK80gV24OecWX
LKRBsSmac87P0soegLEAtDjOS2p3fnseIjNrq8+NDykkdvZrQPL+EnRle5E+WHbk
8YkTo79dYBYaihm9gzJMY7UbLNPWTV/p/ysSbm1CbWTeeRDmSZdOiFUEB/L6X7+K
e6v+DdAqtNCUYI4dTIBx+nDjpWiNjSnrgDxrfD/WsgSjLByofpZsQCBYWqET5Prm
m+sqvdWjD7wWtysg3+lZklA3LfMC9G7SAnkCOGvhXwY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:18 2026 by rpki-client