Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F777198694D11F19B4048BACE1D38B0.roa
File: 2F777198694D11F19B4048BACE1D38B0.roa (raw, json)
Hash identifier: nXQRTTMm9iuoPtCeolwFYVACNzDQGg5sdsBIHlf0Mws=
Subject key identifier: BC:06:90:B8:BA:03:39:87:D8:AA:B9:8A:74:A1:93:E5:B1:BD:78:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D31C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F777198694D11F19B4048BACE1D38B0.roa
Signing time: Tue 16 Jun 2026 06:32:46 +0000
ROA not before: Tue 16 Jun 2026 06:32:41 +0000
ROA not after: Tue 21 Jul 2026 06:32:41 +0000
asID: 214143
IP address blocks: 154.206.4.0/22 maxlen: 24
154.206.11.0/24 maxlen: 24
154.208.72.0/22 maxlen: 24
154.208.88.0/22 maxlen: 24
154.222.72.0/23 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
154.223.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119580 (0x1d31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 06:32:41 2026 GMT
Not After : Jul 21 06:32:41 2026 GMT
Subject: CN=6a30ee0e-7b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:5c:bd:19:95:07:bb:c8:c2:7e:de:e6:7c:
3b:47:e8:92:b4:c0:5a:fd:24:a4:9a:39:f8:fe:bf:
91:5b:76:4e:b2:25:e7:a8:fe:2d:74:d4:f1:71:87:
02:5d:c3:73:00:e9:67:ac:a7:c8:d0:62:e3:22:01:
66:68:41:a7:b3:01:e7:92:64:c1:fc:54:93:64:18:
54:cf:5b:1b:6b:6b:9e:ad:93:e9:24:1f:1d:bf:d4:
d1:70:86:47:51:66:34:a2:7b:5e:c4:66:8f:83:a3:
97:7f:f3:7c:5c:26:2a:6f:1b:5b:bf:8c:54:a1:05:
d0:c6:f2:5d:89:db:74:50:96:05:a3:a7:65:e4:25:
a3:f3:ad:2b:79:01:fe:da:75:3c:05:40:2c:05:b1:
77:38:aa:7e:41:07:f1:36:03:d0:b9:4f:3e:04:59:
33:2c:0e:d7:6c:84:c1:ba:f9:ea:fc:26:cf:7b:9b:
77:68:3d:d1:37:73:4b:0e:11:87:fc:1c:5e:44:32:
89:df:7b:7b:b6:0d:40:1d:ff:b9:66:f9:97:ee:a0:
19:7c:3d:81:e5:1a:f8:f0:cd:77:3f:dc:94:0a:7f:
e9:ae:76:06:ba:09:4d:42:15:c2:61:3c:14:f2:c4:
04:53:0d:e4:45:30:76:8f:84:68:63:b6:b4:fb:fa:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:06:90:B8:BA:03:39:87:D8:AA:B9:8A:74:A1:93:E5:B1:BD:78:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F777198694D11F19B4048BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.4.0/22
154.206.11.0/24
154.208.72.0/22
154.208.88.0/22
154.222.72.0/23
154.222.80.0/22
154.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
07:9a:e4:f6:3b:6c:0c:f5:c1:92:24:d8:8f:e6:67:f1:4a:87:
15:f2:cf:a8:cb:25:b0:d9:58:75:44:7a:5b:23:35:1c:45:c2:
b9:08:7f:c3:e2:57:ec:86:92:e4:32:43:91:76:6b:4c:74:c9:
2f:5e:39:c4:f6:7b:12:51:8d:1c:85:74:4b:8e:9e:46:26:e2:
3d:44:6e:41:53:28:ec:c1:47:a9:19:ec:2c:7e:21:ef:36:66:
2f:9a:02:70:a0:e0:68:79:2a:59:76:35:f5:b7:07:bb:a5:2d:
ef:0e:c0:6f:54:80:44:25:12:da:d8:d6:71:3f:56:df:ce:22:
5a:ec:e6:af:9a:bd:e6:57:e5:72:6d:26:45:51:c9:6e:50:cf:
e8:4b:e6:03:01:b1:de:fd:f1:d3:45:6d:9a:2e:40:4e:1c:3e:
92:0d:2b:7c:48:39:7c:80:42:34:f6:93:55:3d:bc:7e:a8:49:
58:ef:54:9b:70:15:a2:4d:67:c7:08:27:9f:20:25:4b:b5:5a:
57:46:50:e5:20:b2:3c:f1:cc:a5:6a:84:e8:d1:73:26:c6:3b:
84:43:2d:18:e9:4f:5a:c5:93:22:e6:d9:d6:48:7b:cc:b4:38:
22:b2:43:82:b6:7b:59:a1:e0:27:f2:31:54:0c:70:f3:39:7d:
39:07:53:4b
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAdMcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE2MDYzMjQxWhcNMjYwNzIxMDYzMjQxWjAYMRYw
FAYDVQQDEw02YTMwZWUwZS03YjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx0xcvRmVB7vIwn7e5nw7R+iStMBa/SSkmjn4/r+RW3ZOsiXnqP4tdNTx
cYcCXcNzAOlnrKfI0GLjIgFmaEGnswHnkmTB/FSTZBhUz1sba2uerZPpJB8dv9TR
cIZHUWY0ontexGaPg6OXf/N8XCYqbxtbv4xUoQXQxvJdidt0UJYFo6dl5CWj860r
eQH+2nU8BUAsBbF3OKp+QQfxNgPQuU8+BFkzLA7XbITBuvnq/CbPe5t3aD3RN3NL
DhGH/BxeRDKJ33t7tg1AHf+5ZvmX7qAZfD2B5Rr48M13P9yUCn/prnYGuglNQhXC
YTwU8sQEUw3kRTB2j4RoY7a0+/ryOwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFLwG
kLi6AzmH2Kq5inShk+WxvXjBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRjc3NzE5ODY5NEQxMUYxOUI0MDQ4QkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCms4EAwQAms4LAwQCmtBI
AwQCmtBYAwQBmt5IAwQCmt5QAwQDmt/oMA0GCSqGSIb3DQEBCwUAA4IBAQAHmuT2
O2wM9cGSJNiP5mfxSocV8s+oyyWw2Vh1RHpbIzUcRcK5CH/D4lfshpLkMkORdmtM
dMkvXjnE9nsSUY0chXRLjp5GJuI9RG5BUyjswUepGewsfiHvNmYvmgJwoOBoeSpZ
djX1twe7pS3vDsBvVIBEJRLa2NZxP1bfziJa7Oavmr3mV+VybSZFUcluUM/oS+YD
AbHe/fHTRW2aLkBOHD6SDSt8SDl8gEI09pNVPbx+qElY71SbcBWiTWfHCCefICVL
tVpXRlDlILI88cylaoTo0XMmxjuEQy0Y6U9axZMi5tnWSHvMtDgiskOCtntZoeAn
8jFUDHDzOX05B1NL
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:01 2026 by rpki-client