Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07CCCF587CCB11F1A02E06A8CE1D38B0.roa
File: 07CCCF587CCB11F1A02E06A8CE1D38B0.roa (raw, json)
Hash identifier: 6mvnWGL3m1x+ltGCXJya8a9Hdvif2mlT9pb2UjwtSQM=
Subject key identifier: 0A:F0:C6:8E:FB:29:6F:9E:A0:08:CA:30:FE:B1:60:BB:8D:1F:F1:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D822
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07CCCF587CCB11F1A02E06A8CE1D38B0.roa
Signing time: Sat 11 Jul 2026 01:51:28 +0000
ROA not before: Sat 11 Jul 2026 01:51:23 +0000
ROA not after: Tue 10 Jul 2029 01:51:23 +0000
asID: 17561
IP address blocks: 154.202.58.0/24 maxlen: 24
154.202.59.0/24 maxlen: 24
154.202.60.0/24 maxlen: 24
154.202.61.0/24 maxlen: 24
154.202.62.0/24 maxlen: 24
154.202.63.0/24 maxlen: 24
154.214.4.0/24 maxlen: 24
154.214.5.0/24 maxlen: 24
154.214.6.0/24 maxlen: 24
154.214.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120866 (0x1d822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 01:51:23 2026 GMT
Not After : Jul 10 01:51:23 2029 GMT
Subject: CN=6a51a1a0-9a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:82:08:1e:42:25:d7:2c:2d:2a:13:bc:da:
5a:1a:e8:ae:ee:a1:73:2c:3d:a4:3e:92:11:22:57:
d2:2d:b6:9a:50:3b:6b:a1:5f:ed:57:fd:99:01:e5:
36:0e:a2:ea:ab:87:86:fe:1c:a9:15:0c:c9:63:ae:
b8:fe:b2:34:a6:27:4c:07:b4:13:fb:95:ee:4e:31:
4f:9d:3f:1f:a9:51:29:6c:52:93:0c:b1:bd:4a:f2:
ea:84:09:25:71:0d:d4:fc:73:2b:0c:63:e4:ef:4e:
7f:73:e9:94:ce:fd:33:8d:bb:45:6c:0a:f4:b1:fb:
5e:df:fb:79:27:b8:82:b2:3d:c6:29:9f:69:f7:5e:
55:c5:9e:2d:f1:d1:97:2b:c7:57:12:52:b1:73:23:
33:2d:b5:77:57:47:64:33:d3:00:75:dd:34:8d:ab:
0b:78:f1:ba:54:c7:12:e4:cf:bf:be:e9:56:7b:df:
b4:4c:7e:48:88:ed:49:24:ee:6a:dc:d4:36:ce:be:
d9:54:ee:40:e3:6b:93:ca:c6:29:95:40:20:ce:a0:
49:89:9a:8d:26:66:8c:d4:b6:9d:bf:0c:82:b6:d4:
a1:30:1a:cc:0e:3c:18:78:43:43:d9:22:38:09:33:
19:a5:e3:f5:b5:fc:29:2b:d7:1f:ef:36:27:f0:d4:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:C6:8E:FB:29:6F:9E:A0:08:CA:30:FE:B1:60:BB:8D:1F:F1:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07CCCF587CCB11F1A02E06A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.58.0-154.202.63.255
154.214.4.0/22
Signature Algorithm: sha256WithRSAEncryption
93:88:89:99:72:a8:12:53:2b:71:bc:e4:d4:8d:a2:5f:05:64:
f9:ee:33:8c:d0:91:09:a6:a2:ca:79:59:d4:48:96:85:59:96:
65:e7:f8:be:da:fa:7d:25:dc:a3:fd:98:af:62:c6:2e:71:a4:
31:57:2f:4a:ab:94:d4:ce:12:f3:d3:74:55:33:1f:a6:91:4d:
2a:a6:51:90:36:aa:8b:33:95:89:98:2d:15:7b:fb:09:c4:b2:
9d:e8:60:b6:9e:09:63:bf:bc:39:2b:67:c1:8a:a4:64:db:80:
a5:d2:11:33:ce:16:69:67:cb:16:a8:22:5b:58:3a:a7:01:82:
87:55:75:6a:1a:da:69:e0:46:d8:5f:79:ba:51:76:e1:81:26:
f0:00:66:56:f2:ca:2a:c1:05:2c:b5:cc:f6:a9:be:68:e2:25:
bc:e0:00:b1:40:5a:ba:b5:e1:55:20:d6:0d:af:72:80:f2:76:
3e:a5:2d:b0:33:20:1f:bb:4b:62:47:a4:06:d7:c0:d5:ba:d8:
3f:40:f8:ce:2f:c3:76:34:6b:24:be:f0:7f:ea:ff:16:59:22:
e9:15:b5:5d:d3:c5:2f:0a:3c:52:c7:f4:43:76:5c:bf:a1:b3:
8d:23:b9:75:74:28:89:f9:20:37:46:78:e0:b3:a9:85:49:93:
8e:1a:3a:51
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdgiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzExMDE1MTIzWhcNMjkwNzEwMDE1MTIzWjAYMRYw
FAYDVQQDEw02YTUxYTFhMC05YTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3eSCCB5CJdcsLSoTvNpaGuiu7qFzLD2kPpIRIlfSLbaaUDtroV/tV/2Z
AeU2DqLqq4eG/hypFQzJY664/rI0pidMB7QT+5XuTjFPnT8fqVEpbFKTDLG9SvLq
hAklcQ3U/HMrDGPk705/c+mUzv0zjbtFbAr0sfte3/t5J7iCsj3GKZ9p915VxZ4t
8dGXK8dXElKxcyMzLbV3V0dkM9MAdd00jasLePG6VMcS5M+/vulWe9+0TH5IiO1J
JO5q3NQ2zr7ZVO5A42uTysYplUAgzqBJiZqNJmaM1LadvwyCttShMBrMDjwYeEND
2SI4CTMZpeP1tfwpK9cf7zYn8NR9WQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFArw
xo77KW+eoAjKMP6xYLuNH/E+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wN0NDQ0Y1ODdDQ0IxMUYxQTAyRTA2QThDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGayjoDBAaaygADBAKa
1gQwDQYJKoZIhvcNAQELBQADggEBAJOIiZlyqBJTK3G85NSNol8FZPnuM4zQkQmm
osp5WdRIloVZlmXn+L7a+n0l3KP9mK9ixi5xpDFXL0qrlNTOEvPTdFUzH6aRTSqm
UZA2qoszlYmYLRV7+wnEsp3oYLaeCWO/vDkrZ8GKpGTbgKXSETPOFmlnyxaoIltY
OqcBgodVdWoa2mngRthfebpRduGBJvAAZlbyyirBBSy1zPapvmjiJbzgALFAWrq1
4VUg1g2vcoDydj6lLbAzIB+7S2JHpAbXwNW62D9A+M4vw3Y0ayS+8H/q/xZZIukV
tV3TxS8KPFLH9EN2XL+hs40juXV0KIn5IDdGeOCzqYVJk44aOlE=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client