Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDA746C07F7011F1B81B89CECE1D38B0.roa
File: CDA746C07F7011F1B81B89CECE1D38B0.roa (raw, json)
Hash identifier: sjU1MLff0v7O5kVzyO/SooYFlKB6lC6/jY2L17Sh/JY=
Subject key identifier: EE:00:9C:B1:A6:99:34:B2:12:03:CE:FE:53:1D:46:D5:00:48:08:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDA746C07F7011F1B81B89CECE1D38B0.roa
Signing time: Tue 14 Jul 2026 10:43:09 +0000
ROA not before: Tue 14 Jul 2026 10:43:04 +0000
ROA not after: Fri 21 Aug 2026 10:43:04 +0000
asID: 214143
IP address blocks: 154.196.214.0/24 maxlen: 24
154.197.25.0/24 maxlen: 24
154.197.90.0/24 maxlen: 24
154.197.127.0/24 maxlen: 24
154.200.72.0/21 maxlen: 24
154.200.109.0/24 maxlen: 24
154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.205.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121060 (0x1d8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:43:04 2026 GMT
Not After : Aug 21 10:43:04 2026 GMT
Subject: CN=6a5612bd-d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:9b:75:63:58:93:9d:4e:95:be:92:c9:a7:
7f:e0:1c:26:23:60:56:07:98:34:2d:ba:12:95:65:
b1:d9:0a:85:8e:16:61:56:18:7a:9a:de:e2:5a:49:
68:5f:e4:47:e9:1b:75:78:80:9a:33:d0:31:54:21:
94:9b:d5:f4:a1:ed:7a:67:7d:ef:15:da:5d:11:c6:
38:ff:d4:aa:52:42:12:e5:23:26:73:79:eb:d9:fb:
cf:58:d9:07:45:ad:2c:b1:34:6d:da:28:ad:98:c9:
b8:80:f5:59:32:75:79:67:44:ca:95:6d:8f:cb:19:
18:8a:d7:b6:38:7d:28:b4:13:78:b5:af:2e:7e:54:
30:d4:3e:7e:d5:20:ab:1a:10:a9:bb:65:b2:f2:f8:
c2:f4:35:1b:04:69:c9:ba:8b:f6:28:de:4a:94:fd:
53:3c:0f:b0:20:86:80:c3:fd:fa:3b:68:2f:6d:21:
87:dd:41:60:6d:a1:4d:dd:05:54:25:8b:5a:1c:55:
95:a5:97:96:7d:24:60:cf:55:ea:51:8a:5c:9f:50:
cd:00:58:0f:7f:9f:6a:78:2e:a8:32:cf:4c:67:33:
3e:fd:1a:3e:dd:26:b2:ac:ad:6e:54:f3:da:70:3e:
40:35:6c:b2:ad:d5:e5:82:79:dc:a9:d9:70:b8:f4:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:9C:B1:A6:99:34:B2:12:03:CE:FE:53:1D:46:D5:00:48:08:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDA746C07F7011F1B81B89CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.214.0/24
154.197.25.0/24
154.197.90.0/24
154.197.127.0/24
154.200.72.0/21
154.200.109.0/24
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.205.248.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:cc:90:4e:c4:f5:fc:27:6f:17:e9:a2:ca:20:bd:4f:dd:85:
a4:19:df:06:34:81:9e:0c:46:18:df:fa:36:5d:fe:4d:78:79:
3b:37:ec:49:1c:e1:fe:81:1b:8d:9b:ef:30:9b:c2:8c:a9:e6:
be:37:f2:2f:41:d4:5c:01:be:16:88:bc:4c:02:4d:79:a2:30:
f4:02:df:48:7a:c0:14:de:4c:81:c9:cb:6f:63:7b:c7:d2:7a:
51:5c:df:2b:c3:04:0d:b2:46:da:1e:88:6f:de:44:56:2b:cf:
18:f4:e8:4e:1c:bb:fe:a9:9a:e9:ff:8b:df:54:89:9b:e9:a4:
47:0a:36:19:38:ac:bf:11:ed:99:38:ac:01:98:10:96:e6:51:
62:0c:3e:fd:f2:0c:d5:34:d3:29:2f:d6:fc:6a:58:c3:c6:94:
f6:9c:5a:41:4d:f3:68:6c:4f:06:ec:a3:5a:39:ad:ac:2c:9a:
53:53:dd:ad:54:c8:b4:db:c0:64:82:cc:bb:34:ea:41:af:1b:
d9:3f:c9:32:ff:50:d3:24:0f:7a:fa:f5:9c:0d:2e:c9:0d:4d:
8c:e6:f7:54:a4:37:0e:86:0d:5e:39:bc:98:74:b1:f1:dc:c1:
ed:80:6a:ff:54:5d:30:f2:6d:b1:cb:b7:6b:48:7b:67:e0:96:
5a:17:49:15
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAdjkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MTA0MzA0WhcNMjYwODIxMTA0MzA0WjAYMRYw
FAYDVQQDEw02YTU2MTJiZC1kNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2J2bdWNYk51Olb6Syad/4BwmI2BWB5g0LboSlWWx2QqFjhZhVhh6mt7i
WkloX+RH6Rt1eICaM9AxVCGUm9X0oe16Z33vFdpdEcY4/9SqUkIS5SMmc3nr2fvP
WNkHRa0ssTRt2iitmMm4gPVZMnV5Z0TKlW2PyxkYite2OH0otBN4ta8uflQw1D5+
1SCrGhCpu2Wy8vjC9DUbBGnJuov2KN5KlP1TPA+wIIaAw/36O2gvbSGH3UFgbaFN
3QVUJYtaHFWVpZeWfSRgz1XqUYpcn1DNAFgPf59qeC6oMs9MZzM+/Ro+3SayrK1u
VPPacD5ANWyyrdXlgnncqdlwuPSmyQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFO4A
nLGmmTSyEgPO/lMdRtUASAj4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DREE3NDZDMDdGNzAxMUYxQjgxQjg5Q0VDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmsTWAwQAmsUZAwQAmsVa
AwQAmsV/AwQDmshIAwQAmshtAwQCmsvEAwQCmsvQAwQAmsvwAwQCms34MA0GCSqG
SIb3DQEBCwUAA4IBAQDMzJBOxPX8J28X6aLKIL1P3YWkGd8GNIGeDEYY3/o2Xf5N
eHk7N+xJHOH+gRuNm+8wm8KMqea+N/IvQdRcAb4WiLxMAk15ojD0At9IesAU3kyB
yctvY3vH0npRXN8rwwQNskbaHohv3kRWK88Y9OhOHLv+qZrp/4vfVImb6aRHCjYZ
OKy/Ee2ZOKwBmBCW5lFiDD798gzVNNMpL9b8aljDxpT2nFpBTfNobE8G7KNaOa2s
LJpTU92tVMi028Bkgsy7NOpBrxvZP8ky/1DTJA96+vWcDS7JDU2M5vdUpDcOhg1e
ObyYdLHx3MHtgGr/VF0w8m2xy7drSHtn4JZaF0kV
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:52 2026 by rpki-client