Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C12477A8B1C11F1947DC2C3CE1D38B0.roa
File: 3C12477A8B1C11F1947DC2C3CE1D38B0.roa (raw, json)
Hash identifier: 4Tp2d9Nw+0bHGnfvK7rhcEvmupb9ZJauiGEY9cKkKoc=
Subject key identifier: D0:DE:94:60:2A:7A:0E:20:50:1B:C3:F7:E4:C7:F6:AE:3C:E4:25:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C12477A8B1C11F1947DC2C3CE1D38B0.roa
Signing time: Wed 29 Jul 2026 07:08:01 +0000
ROA not before: Wed 29 Jul 2026 07:07:57 +0000
ROA not after: Tue 01 Sep 2026 07:07:57 +0000
asID: 44559
IP address blocks: 154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121783 (0x1dbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 07:07:57 2026 GMT
Not After : Sep 1 07:07:57 2026 GMT
Subject: CN=6a69a6d1-dc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b9:bf:9d:91:a6:f5:db:74:7e:80:97:32:27:
6c:8e:06:04:2b:24:a6:a9:01:92:12:cd:87:ab:c5:
a4:4e:d4:b9:ec:7f:5e:0f:49:fb:83:39:e5:2e:09:
7a:11:b5:3b:02:20:a8:33:67:a8:0c:d2:0b:73:fa:
63:98:9e:dd:ef:3a:49:24:9f:3e:52:66:67:9b:7e:
84:32:ad:c9:c0:6c:d5:10:5e:6f:bb:a8:bc:56:55:
2c:f1:bf:34:23:0b:51:c1:39:b3:11:1d:90:90:a5:
4b:ec:9f:38:b2:15:8e:e9:fa:01:90:b6:41:2b:8c:
a0:07:9f:b5:de:48:6d:ef:30:95:51:6b:1d:50:e6:
7e:f3:65:97:60:9e:a0:26:c7:d6:94:aa:b2:d1:53:
eb:95:b7:43:50:40:f5:c2:1a:e5:a9:5c:17:ed:45:
bc:82:30:cf:f6:b5:9d:0b:2c:60:58:2d:b7:db:9c:
cf:23:76:b4:dd:94:e6:db:a3:45:2a:c6:5a:d9:69:
09:a6:fc:13:7b:c4:24:72:af:b2:96:3f:23:2f:35:
fe:38:27:64:ae:00:e2:50:00:4a:f3:95:0d:47:ad:
ce:79:2d:ec:a3:10:e6:59:50:0d:f3:ba:38:72:df:
71:92:82:07:c8:94:61:f3:d8:62:b0:5f:11:5a:a8:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:94:60:2A:7A:0E:20:50:1B:C3:F7:E4:C7:F6:AE:3C:E4:25:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C12477A8B1C11F1947DC2C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.235.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
11:7b:c7:bb:52:e6:e6:f8:95:ab:d0:8f:bf:13:fb:b3:e1:60:
60:68:69:59:e2:49:05:93:6c:c2:a1:c8:d0:9a:d3:c8:67:16:
a4:b7:f2:ac:12:c7:41:f8:a7:2d:df:73:59:e1:d3:a4:51:b7:
df:42:d5:9b:74:af:aa:90:8a:0c:b4:bb:d2:60:47:3d:20:66:
4b:f6:7d:8b:21:dd:aa:76:bf:ba:d4:74:c0:06:46:fd:29:fe:
8d:74:23:1e:a5:90:34:5a:7e:f2:a0:7e:72:a5:d6:4f:1e:74:
98:f7:a5:22:3a:78:41:6a:b6:27:99:2a:ad:1c:2e:b7:e2:b1:
ec:0a:cd:81:91:c2:b5:09:95:d1:a2:bc:8f:73:a6:54:db:63:
7b:97:0e:09:e0:bb:3d:3b:4f:09:88:0a:8c:02:42:7e:f8:ff:
68:f8:53:4d:5a:b4:d9:33:04:9c:28:29:bb:91:2f:c6:4d:d0:
80:4b:75:5f:ee:58:5a:b0:20:52:ce:e2:7a:35:b9:8b:b9:4a:
c4:63:01:e9:c3:a9:ae:75:8c:23:cb:82:3f:3c:22:f8:88:33:
5a:6b:52:bc:34:08:ed:9d:a0:8b:45:61:fd:57:9b:31:34:93:
77:37:e3:bd:21:71:b8:fa:55:3a:5d:87:c9:23:d7:9c:63:f1:
39:d1:d6:0f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdu3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI5MDcwNzU3WhcNMjYwOTAxMDcwNzU3WjAYMRYw
FAYDVQQDEw02YTY5YTZkMS1kYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/Lm/nZGm9dt0foCXMidsjgYEKySmqQGSEs2Hq8WkTtS57H9eD0n7gznl
Lgl6EbU7AiCoM2eoDNILc/pjmJ7d7zpJJJ8+UmZnm36EMq3JwGzVEF5vu6i8VlUs
8b80IwtRwTmzER2QkKVL7J84shWO6foBkLZBK4ygB5+13kht7zCVUWsdUOZ+82WX
YJ6gJsfWlKqy0VPrlbdDUED1whrlqVwX7UW8gjDP9rWdCyxgWC2325zPI3a03ZTm
26NFKsZa2WkJpvwTe8Qkcq+ylj8jLzX+OCdkrgDiUABK85UNR63OeS3soxDmWVAN
87o4ct9xkoIHyJRh89hisF8RWqikcQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNDe
lGAqeg4gUBvD9+TH9q485CVeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQzEyNDc3QThCMUMxMUYxOTQ3REMyQzNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACazesDBACazfAwDQYJ
KoZIhvcNAQELBQADggEBABF7x7tS5ub4lavQj78T+7PhYGBoaVniSQWTbMKhyNCa
08hnFqS38qwSx0H4py3fc1nh06RRt99C1Zt0r6qQigy0u9JgRz0gZkv2fYsh3ap2
v7rUdMAGRv0p/o10Ix6lkDRafvKgfnKl1k8edJj3pSI6eEFqtieZKq0cLrfisewK
zYGRwrUJldGivI9zplTbY3uXDgnguz07TwmICowCQn74/2j4U01atNkzBJwoKbuR
L8ZN0IBLdV/uWFqwIFLO4no1uYu5SsRjAenDqa51jCPLgj88IviIM1prUrw0CO2d
oItFYf1XmzE0k3c3470hcbj6VTpdh8kj15xj8TnR1g8=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:03 2026 by rpki-client