Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27CA4ADC8D8E11F1803444AFCE1D38B0.roa
File: 27CA4ADC8D8E11F1803444AFCE1D38B0.roa (raw, json)
Hash identifier: x/rqvKQ7SolUe6Tg7XmftZ+RBmdb9EnmhKeUp9V8mhw=
Subject key identifier: FD:46:62:77:F7:DE:7F:9B:4B:D0:31:3A:3C:79:1A:FC:1E:A2:6A:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27CA4ADC8D8E11F1803444AFCE1D38B0.roa
Signing time: Sat 01 Aug 2026 09:48:32 +0000
ROA not before: Sat 01 Aug 2026 09:48:28 +0000
ROA not after: Sun 06 Sep 2026 09:48:28 +0000
asID: 48031
IP address blocks: 154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121904 (0x1dc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 09:48:28 2026 GMT
Not After : Sep 6 09:48:28 2026 GMT
Subject: CN=6a6dc0f0-81d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:c5:8b:03:78:6b:0b:2c:01:e9:99:6d:8b:
ab:ac:b3:1b:fd:a1:cf:1c:d2:ea:2a:f7:f0:94:a0:
bf:49:9d:77:bb:b0:e6:88:f7:ae:45:e5:93:f1:72:
af:75:58:f0:4d:e2:68:9e:93:02:ca:41:b1:18:1f:
5f:e4:15:68:e1:67:a4:52:04:09:a9:22:b1:c9:01:
a9:5e:39:f7:67:70:1a:c4:2f:c1:90:1e:d0:93:e1:
cb:27:11:31:69:2b:65:18:87:9a:a6:33:c0:a1:29:
ac:c9:3a:30:3c:a3:24:0b:66:70:09:73:dd:37:f6:
7b:ca:a9:03:26:09:cf:70:d8:99:e2:39:6b:4a:47:
c5:d8:09:34:3e:e8:61:2f:1f:26:2a:d2:1d:bd:d2:
12:0c:b4:99:ba:f7:a4:13:e8:81:cd:96:d4:3f:bc:
43:71:be:62:f7:87:8e:cd:82:0c:89:ac:dd:e6:67:
c6:93:8a:43:63:5e:5c:a1:96:b2:fe:13:f7:b8:67:
23:3c:75:cc:65:9b:0f:f8:8b:dc:58:d9:7d:e4:ff:
a2:35:c6:72:dd:f7:c9:98:a1:32:3e:0a:95:e8:17:
6e:54:ff:fa:41:8d:64:5e:ef:dd:29:44:7b:a0:d3:
2b:4c:18:89:5d:99:ce:00:b4:c2:38:ab:f1:00:d8:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:62:77:F7:DE:7F:9B:4B:D0:31:3A:3C:79:1A:FC:1E:A2:6A:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27CA4ADC8D8E11F1803444AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.216.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
51:70:78:7d:e8:b5:f1:7b:7d:e8:ec:35:30:2c:2e:4b:f5:03:
18:59:27:d7:9b:31:59:94:c9:1d:6f:20:ac:70:1e:02:ab:af:
54:3a:c2:e9:38:3a:ff:40:92:50:cc:fc:81:2a:54:c5:a0:98:
a7:39:40:cc:98:9b:27:ee:57:53:aa:ce:67:01:b6:6f:b4:04:
bb:c7:f1:05:f8:5e:15:44:bf:51:69:de:65:4a:93:d1:21:78:
ec:49:7a:49:2c:4f:10:78:dc:62:98:62:48:c1:bb:82:2c:ed:
04:9c:51:ed:ff:06:be:11:76:6d:27:7b:69:0e:29:38:64:7f:
cb:77:05:f8:c1:b9:ab:e5:00:3e:32:90:ab:6d:04:39:59:21:
ef:12:b5:2a:bc:f9:1f:d6:09:ef:d4:77:62:91:e2:69:d3:a1:
21:ae:d5:3c:fb:06:45:e6:20:24:9b:67:a7:0e:3a:18:53:05:
57:9a:ca:08:26:73:89:cd:3e:3b:73:8f:4e:6a:8f:b9:0f:b5:
83:39:de:40:2f:e6:7a:3a:79:ca:20:4c:33:f0:3c:a8:11:c4:
44:94:8e:ef:66:c9:dc:53:ce:76:e3:0a:7e:20:55:fc:f0:c7:
b2:2f:bf:e7:4d:53:c8:5c:f1:61:48:98:ea:74:92:20:40:63:
d7:33:06:04
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAdwwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODAxMDk0ODI4WhcNMjYwOTA2MDk0ODI4WjAYMRYw
FAYDVQQDEw02YTZkYzBmMC04MWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1trFiwN4awssAemZbYurrLMb/aHPHNLqKvfwlKC/SZ13u7DmiPeuReWT
8XKvdVjwTeJonpMCykGxGB9f5BVo4WekUgQJqSKxyQGpXjn3Z3AaxC/BkB7Qk+HL
JxExaStlGIeapjPAoSmsyTowPKMkC2ZwCXPdN/Z7yqkDJgnPcNiZ4jlrSkfF2Ak0
PuhhLx8mKtIdvdISDLSZuvekE+iBzZbUP7xDcb5i94eOzYIMiazd5mfGk4pDY15c
oZay/hP3uGcjPHXMZZsP+IvcWNl95P+iNcZy3ffJmKEyPgqV6BduVP/6QY1kXu/d
KUR7oNMrTBiJXZnOALTCOKvxANjy5wIDAQABo4ICvzCCArswHQYDVR0OBBYEFP1G
Ynf33n+bS9AxOjx5GvweomrCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yN0NBNEFEQzhEOEUxMUYxODAzNDQ0QUZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAOa3tgDBACa3t4DBACa
3vIDBACa3vwDBACa31EwDQYJKoZIhvcNAQELBQADggEBAFFweH3otfF7fejsNTAs
Lkv1AxhZJ9ebMVmUyR1vIKxwHgKrr1Q6wuk4Ov9AklDM/IEqVMWgmKc5QMyYmyfu
V1OqzmcBtm+0BLvH8QX4XhVEv1Fp3mVKk9EheOxJekksTxB43GKYYkjBu4Is7QSc
Ue3/Br4Rdm0ne2kOKThkf8t3BfjBuavlAD4ykKttBDlZIe8StSq8+R/WCe/Ud2KR
4mnToSGu1Tz7BkXmICSbZ6cOOhhTBVeayggmc4nNPjtzj05qj7kPtYM53kAv5no6
ecogTDPwPKgRxESUju9mydxTznbjCn4gVfzwx7Ivv+dNU8hc8WFImOp0kiBAY9cz
BgQ=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:32 2026 by rpki-client