Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29526B446C8411F18AE063BBCE1D38B0.roa
File: 29526B446C8411F18AE063BBCE1D38B0.roa (raw, json)
Hash identifier: a+9g3pp1BqHD+tOH3DeMcajTDh4S69A2zoM7QN45L9E=
Subject key identifier: 1D:F1:B4:67:63:01:7F:3E:2E:88:43:29:2B:F3:BB:FF:1C:07:68:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D411
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29526B446C8411F18AE063BBCE1D38B0.roa
Signing time: Sat 20 Jun 2026 08:43:51 +0000
ROA not before: Sat 20 Jun 2026 08:43:47 +0000
ROA not after: Mon 27 Jul 2026 08:43:47 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119825 (0x1d411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 08:43:47 2026 GMT
Not After : Jul 27 08:43:47 2026 GMT
Subject: CN=6a3652c7-a2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:9a:fb:62:e0:2a:72:da:9d:bd:b8:04:7a:
c5:bf:74:e3:5c:bf:29:99:cb:6a:d4:cc:73:1b:a8:
d2:0b:22:14:60:55:ff:05:ad:a2:bc:a4:20:68:ef:
73:11:1b:4c:dd:f5:19:a0:63:62:6c:bf:ab:fd:4a:
27:7f:7f:ac:e6:ce:e0:c6:ec:26:d2:bb:86:db:a9:
63:91:9b:41:87:c8:1b:6c:57:6b:36:64:c6:86:ed:
9f:c5:c9:22:08:38:81:b0:ba:49:5a:f1:74:3f:c2:
89:59:ab:84:fd:61:89:ca:ab:04:24:4a:89:4f:28:
64:60:87:cb:be:30:c2:d2:d7:6b:0f:9e:69:a9:02:
9c:19:9e:28:79:68:50:a4:60:5e:af:04:25:80:cb:
e7:d9:94:45:7d:84:4f:96:e9:56:d0:74:96:f2:a1:
d9:bb:2b:a1:7b:20:14:77:45:10:d8:83:a3:12:4f:
08:76:c3:68:32:99:be:8f:2c:d1:4c:6f:1c:62:28:
7b:4a:35:59:bb:84:b6:59:ad:6b:95:c1:42:30:52:
89:e8:60:10:5b:f2:a5:e9:00:d5:40:ab:75:25:05:
24:73:50:e4:f8:36:7e:14:f3:5f:d7:18:3a:eb:cc:
eb:4b:88:28:b4:50:1c:20:f3:0d:ca:fe:1e:35:54:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:B4:67:63:01:7F:3E:2E:88:43:29:2B:F3:BB:FF:1C:07:68:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29526B446C8411F18AE063BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
154.203.137.0-154.203.141.255
154.203.146.0-154.203.148.255
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
42:37:03:a0:53:c0:d5:13:a5:3c:21:a8:e6:cc:c2:e6:fb:cf:
a5:b3:88:ab:04:6c:85:b6:34:bc:51:2c:f5:fa:9f:b0:40:80:
77:f0:9c:b0:74:93:75:0d:17:07:c6:ad:be:50:c6:0a:b3:8d:
bd:a1:b5:7a:d4:df:e0:13:1b:8f:22:20:55:0f:4b:f5:08:d3:
ec:f0:88:dd:66:fa:23:8f:cd:d8:79:a8:14:b3:25:9a:e2:6a:
f2:d5:55:c1:57:0c:e8:14:71:03:c8:a7:79:7e:85:9d:87:d4:
e3:5a:67:b6:4e:16:56:02:0e:d9:83:c9:a7:56:4a:1d:c8:e2:
ea:50:07:86:7b:0f:65:45:de:ca:a4:4c:c2:ac:c6:90:02:76:
c2:ad:b7:63:e1:bd:be:b7:96:de:14:31:91:51:13:c3:15:44:
24:53:5c:bc:09:cd:e6:f7:ac:15:97:37:4c:ee:28:5b:c1:fa:
24:18:86:29:60:9f:0d:f4:8b:00:d2:eb:7d:3e:05:ef:11:fe:
34:30:43:35:e4:c6:dd:54:3b:95:b8:b7:2d:f9:03:98:42:b8:
31:a0:e8:30:dc:5f:cf:14:6c:11:9e:6c:8d:c5:dd:94:ff:cc:
84:87:60:52:e0:1f:87:fb:24:f2:6e:e9:7e:68:24:b1:3a:8d:
f1:2b:34:f8
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAdQRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIwMDg0MzQ3WhcNMjYwNzI3MDg0MzQ3WjAYMRYw
FAYDVQQDEw02YTM2NTJjNy1hMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxcSa+2LgKnLanb24BHrFv3TjXL8pmctq1MxzG6jSCyIUYFX/Ba2ivKQg
aO9zERtM3fUZoGNibL+r/Uonf3+s5s7gxuwm0ruG26ljkZtBh8gbbFdrNmTGhu2f
xckiCDiBsLpJWvF0P8KJWauE/WGJyqsEJEqJTyhkYIfLvjDC0tdrD55pqQKcGZ4o
eWhQpGBerwQlgMvn2ZRFfYRPlulW0HSW8qHZuyuheyAUd0UQ2IOjEk8IdsNoMpm+
jyzRTG8cYih7SjVZu4S2Wa1rlcFCMFKJ6GAQW/Kl6QDVQKt1JQUkc1Dk+DZ+FPNf
1xg668zrS4gotFAcIPMNyv4eNVQFRQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFB3x
tGdjAX8+LohDKSvzu/8cB2i2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTUyNkI0NDZDODQxMUYxOEFFMDYzQkJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAmsuHMAwDBACay4kDBAGa
y4wwDAMEAZrLkgMEAJrLlAMEAJrLqTANBgkqhkiG9w0BAQsFAAOCAQEAQjcDoFPA
1ROlPCGo5szC5vvPpbOIqwRshbY0vFEs9fqfsECAd/CcsHSTdQ0XB8atvlDGCrON
vaG1etTf4BMbjyIgVQ9L9QjT7PCI3Wb6I4/N2HmoFLMlmuJq8tVVwVcM6BRxA8in
eX6FnYfU41pntk4WVgIO2YPJp1ZKHcji6lAHhnsPZUXeyqRMwqzGkAJ2wq23Y+G9
vreW3hQxkVETwxVEJFNcvAnN5vesFZc3TO4oW8H6JBiGKWCfDfSLANLrfT4F7xH+
NDBDNeTG3VQ7lbi3LfkDmEK4MaDoMNxfzxRsEZ5sjcXdlP/MhIdgUuAfh/sk8m7p
fmgksTqN8Ss0+A==
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:02 2026 by rpki-client