Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09DE9CC08F1011F1BF331EDBCE1D38B0.roa
File: 09DE9CC08F1011F1BF331EDBCE1D38B0.roa (raw, json)
Hash identifier: jTvqqK59ydOpynBYqDAsyjWrepZlcUsbvw3QR0WeyOc=
Subject key identifier: 1D:80:3D:49:1B:53:B5:BD:02:F7:79:8F:78:8A:3B:8B:30:BE:CD:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09DE9CC08F1011F1BF331EDBCE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:50:48 +0000
ROA not before: Mon 03 Aug 2026 07:50:43 +0000
ROA not after: Thu 10 Sep 2026 07:50:43 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121960 (0x1dc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:50:43 2026 GMT
Not After : Sep 10 07:50:43 2026 GMT
Subject: CN=6a704857-bb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:35:7f:7f:f8:39:90:ac:e3:61:19:9b:a5:
20:03:1b:b3:83:a5:4a:22:9c:ee:3d:6f:22:ee:ab:
d6:88:5d:ad:dc:a2:ab:d5:76:cd:19:8d:d0:67:b5:
16:c3:84:27:b4:49:2e:9c:48:f7:e6:34:a6:7d:85:
77:12:25:d2:cf:ae:f7:fc:a3:1e:73:ba:28:90:07:
5a:67:76:86:11:c7:c0:26:b8:cb:49:7e:42:9e:b7:
8b:89:26:93:a3:43:89:fa:5c:84:d9:18:49:28:50:
a8:22:6c:ac:10:97:17:7a:4a:f4:a9:2a:69:36:a1:
f6:57:01:d0:ce:27:18:c0:79:c7:58:31:de:d4:71:
2d:73:4b:d4:99:6a:48:b7:2a:b1:16:0b:71:f4:c5:
b8:4d:f2:34:c3:41:82:71:de:fa:ef:ee:48:71:7f:
5b:c6:0d:10:14:db:73:99:97:1e:01:c3:a6:be:d7:
66:d4:ba:a7:cb:c1:7a:77:0b:15:5d:c0:13:00:e7:
7e:a5:1c:71:b3:18:60:03:17:ba:80:40:c4:39:12:
51:af:c0:dc:74:c0:27:e7:90:58:5b:da:fd:6c:9b:
7a:d1:41:00:eb:a3:37:e3:9c:d2:c0:95:8e:a3:e8:
71:9b:8b:ec:29:ef:fe:eb:cf:b2:c9:91:27:3c:bd:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:3D:49:1B:53:B5:BD:02:F7:79:8F:78:8A:3B:8B:30:BE:CD:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09DE9CC08F1011F1BF331EDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.24.255
154.223.26.0-154.223.30.255
154.223.32.0/22
154.223.37.0/24
154.223.40.0/22
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
92:3a:a0:3c:cf:1d:c1:e2:d6:5f:4d:f3:13:e2:58:e8:7e:06:
26:4f:90:cd:b9:4a:81:ac:ce:1f:a7:40:40:0a:85:f5:72:00:
43:63:6e:2c:3a:b0:9a:ca:ef:bc:da:47:89:51:85:20:63:c8:
a2:9d:79:b9:30:de:33:a1:e7:6d:db:fe:7b:4a:4e:79:75:2d:
cb:95:2a:41:0f:93:e8:e4:e4:76:3f:25:38:44:2e:0e:9a:e8:
4f:b3:17:6d:c9:eb:84:32:90:8f:41:5f:8f:d4:b6:8d:c9:d6:
f5:5f:fb:3d:0d:ac:f9:7a:3e:41:71:b3:70:d3:d9:81:5d:a8:
75:9e:0e:dc:cb:8e:03:9b:ed:55:f1:df:7f:ec:6a:87:ea:ca:
31:0a:47:42:75:00:88:8f:61:fc:d0:3d:41:48:7a:93:30:83:
be:df:7d:f3:84:b8:95:48:3c:2a:b0:a2:55:23:c9:6c:cd:a6:
b7:d1:d5:2c:40:71:a8:78:de:f0:d6:b0:84:1c:18:04:c4:4e:
ea:1b:1c:71:4b:5c:39:a5:3d:76:b4:e1:f2:2b:68:9a:52:38:
17:a2:cc:29:a8:24:10:63:0e:9a:c6:68:7c:76:ab:ef:ab:34:
79:e2:20:09:2d:e1:2b:08:6a:f6:76:11:8c:bd:06:6a:56:86:
29:ca:c4:16
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAdxoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODAzMDc1MDQzWhcNMjYwOTEwMDc1MDQzWjAYMRYw
FAYDVQQDEw02YTcwNDg1Ny1iYjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvAg1f3/4OZCs42EZm6UgAxuzg6VKIpzuPW8i7qvWiF2t3KKr1XbNGY3Q
Z7UWw4QntEkunEj35jSmfYV3EiXSz673/KMec7ookAdaZ3aGEcfAJrjLSX5CnreL
iSaTo0OJ+lyE2RhJKFCoImysEJcXekr0qSppNqH2VwHQzicYwHnHWDHe1HEtc0vU
mWpItyqxFgtx9MW4TfI0w0GCcd767+5IcX9bxg0QFNtzmZceAcOmvtdm1Lqny8F6
dwsVXcATAOd+pRxxsxhgAxe6gEDEORJRr8DcdMAn55BYW9r9bJt60UEA66M345zS
wJWOo+hxm4vsKe/+68+yyZEnPL3T4QIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFB2A
PUkbU7W9Avd5j3iKO4swvs1DMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOURFOUNDMDhGMTAxMUYxQkYzMzFFREJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBASa3xADBACa3xgwDAME
AZrfGgMEAJrfHgMEAprfIAMEAJrfJQMEAprfKAMEAZrfTjANBgkqhkiG9w0BAQsF
AAOCAQEAkjqgPM8dweLWX03zE+JY6H4GJk+QzblKgazOH6dAQAqF9XIAQ2NuLDqw
msrvvNpHiVGFIGPIop15uTDeM6Hnbdv+e0pOeXUty5UqQQ+T6OTkdj8lOEQuDpro
T7MXbcnrhDKQj0Ffj9S2jcnW9V/7PQ2s+Xo+QXGzcNPZgV2odZ4O3MuOA5vtVfHf
f+xqh+rKMQpHQnUAiI9h/NA9QUh6kzCDvt9984S4lUg8KrCiVSPJbM2mt9HVLEBx
qHje8NawhBwYBMRO6hsccUtcOaU9drTh8itomlI4F6LMKagkEGMOmsZofHar76s0
eeIgCS3hKwhq9nYRjL0GalaGKcrEFg==
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:01 2026 by rpki-client