Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/120F3EDC90A411F19D87F6EACE1D38B0.roa
File: 120F3EDC90A411F19D87F6EACE1D38B0.roa (raw, json)
Hash identifier: d0b74xmQzdoNTIBP7B73HsoWk8kgXDGLyIcS2kpWo1E=
Subject key identifier: AF:6C:4A:BF:5B:E3:02:18:A4:47:B3:5D:E5:4B:93:3C:7C:47:CD:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/120F3EDC90A411F19D87F6EACE1D38B0.roa
Signing time: Wed 05 Aug 2026 08:02:58 +0000
ROA not before: Wed 05 Aug 2026 08:02:54 +0000
ROA not after: Sun 15 Aug 2027 08:02:54 +0000
asID: 36898
IP address blocks: 154.83.240.0/24 maxlen: 24
154.83.241.0/24 maxlen: 24
154.83.242.0/24 maxlen: 24
154.83.243.0/24 maxlen: 24
154.85.123.0/24 maxlen: 24
154.88.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122043 (0x1dcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 08:02:54 2026 GMT
Not After : Aug 15 08:02:54 2027 GMT
Subject: CN=6a72ee32-fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:09:d2:28:fe:4f:cb:af:a8:00:f2:3c:99:
fe:d6:4d:32:94:fe:d5:f4:c1:58:9e:f9:5a:36:a7:
0f:2a:75:83:2e:13:95:5b:d9:fe:9c:04:43:d8:91:
6e:13:56:45:db:b8:6e:66:76:e7:c3:fb:a6:1d:80:
7d:f0:ac:af:92:14:b9:65:f4:21:fa:38:2b:d1:0c:
0f:02:b8:14:c7:03:3c:d6:18:d2:01:d0:74:ca:2f:
69:11:b6:98:7f:3d:53:d5:f3:73:9b:0e:73:a9:86:
04:dc:6a:d9:68:9b:bf:fe:8c:eb:a9:7e:85:6e:37:
18:d0:b1:b1:d6:07:89:1a:2e:94:85:b9:b2:e9:41:
e4:c9:d0:97:0f:38:8e:88:6d:c9:73:10:ed:0e:18:
88:14:7f:b3:bd:f8:4a:b6:0f:94:dd:20:32:d0:e4:
75:41:26:95:ff:63:19:43:bf:cb:86:85:44:2c:d1:
55:c6:05:ea:6c:b5:78:cf:2a:a0:89:86:0d:84:bb:
05:f9:5c:06:24:4f:d4:6d:94:8c:69:2d:a9:f7:8c:
5a:f2:f9:01:ab:14:73:69:a3:35:b5:84:b9:1a:7a:
50:e3:4a:17:fb:17:ed:2a:8a:24:83:3f:f3:34:ec:
65:88:e2:87:25:2d:10:25:b4:1b:68:98:1e:96:2b:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:4A:BF:5B:E3:02:18:A4:47:B3:5D:E5:4B:93:3C:7C:47:CD:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/120F3EDC90A411F19D87F6EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.240.0/22
154.85.123.0/24
154.88.40.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a3:28:35:53:cd:db:63:51:7c:3c:fe:df:b5:d6:b4:82:89:
fe:f3:aa:c1:0f:6d:f4:d3:b5:25:2d:1b:59:24:aa:b6:29:38:
4e:35:ac:5a:8f:83:10:e0:13:af:15:f5:db:63:09:2b:ea:45:
90:9f:85:30:ae:06:25:e0:b0:cb:fa:9c:02:65:06:29:19:3d:
82:39:bf:ca:c3:cb:9b:62:c8:8b:92:b0:33:4f:f7:3b:95:f3:
be:00:e8:3b:e0:5a:6e:c2:7c:c2:62:8c:37:04:27:6d:df:30:
24:8e:49:cc:f9:82:61:f4:bd:35:a5:a0:d4:6d:f8:a3:2d:b7:
2e:ed:d5:a8:83:c7:b3:68:57:a6:68:28:41:7d:9f:0c:33:c6:
d5:44:9d:4c:c3:fb:f1:3c:f8:09:5f:46:bd:9a:c7:1e:72:b1:
b3:12:69:00:73:5b:1e:f4:1b:f0:ee:a4:f6:44:fc:fb:30:b2:
ef:c8:af:32:de:14:a3:2b:80:10:34:b5:1e:13:1e:eb:91:95:
88:5d:60:79:5d:a0:46:de:49:75:71:60:53:8c:c8:43:e2:aa:
c0:22:c9:c7:6b:17:95:de:3a:b9:57:58:e7:11:4f:ea:09:b9:
3f:2e:66:0d:3a:92:c6:2c:c4:7b:13:fc:51:ed:c0:a5:3e:06:
47:cc:66:9e
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAdy7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA1MDgwMjU0WhcNMjcwODE1MDgwMjU0WjAYMRYw
FAYDVQQDEw02YTcyZWUzMi1mYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1MEJ0ij+T8uvqADyPJn+1k0ylP7V9MFYnvlaNqcPKnWDLhOVW9n+nARD
2JFuE1ZF27huZnbnw/umHYB98KyvkhS5ZfQh+jgr0QwPArgUxwM81hjSAdB0yi9p
EbaYfz1T1fNzmw5zqYYE3GrZaJu//ozrqX6FbjcY0LGx1geJGi6Uhbmy6UHkydCX
DziOiG3JcxDtDhiIFH+zvfhKtg+U3SAy0OR1QSaV/2MZQ7/LhoVELNFVxgXqbLV4
zyqgiYYNhLsF+VwGJE/UbZSMaS2p94xa8vkBqxRzaaM1tYS5GnpQ40oX+xftKook
gz/zNOxliOKHJS0QJbQbaJgelisTXQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFK9s
Sr9b4wIYpEezXeVLkzx8R806MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMjBGM0VEQzkwQTQxMUYxOUQ4N0Y2RUFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmlPwAwQAmlV7AwQAmlgo
MA0GCSqGSIb3DQEBCwUAA4IBAQAQoyg1U83bY1F8PP7ftda0gon+86rBD23007Ul
LRtZJKq2KThONaxaj4MQ4BOvFfXbYwkr6kWQn4UwrgYl4LDL+pwCZQYpGT2COb/K
w8ubYsiLkrAzT/c7lfO+AOg74FpuwnzCYow3BCdt3zAkjknM+YJh9L01paDUbfij
Lbcu7dWog8ezaFemaChBfZ8MM8bVRJ1Mw/vxPPgJX0a9mscecrGzEmkAc1se9Bvw
7qT2RPz7MLLvyK8y3hSjK4AQNLUeEx7rkZWIXWB5XaBG3kl1cWBTjMhD4qrAIsnH
axeV3jq5V1jnEU/qCbk/LmYNOpLGLMR7E/xR7cClPgZHzGae
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:24 2026 by rpki-client