Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45C8370C6FFB11F1B1687D09CF1D38B0.roa
File: 45C8370C6FFB11F1B1687D09CF1D38B0.roa (raw, json)
Hash identifier: fyJSRkBth2l+4vnAUIoL5WdiYulkPASvfxAX8F5daZ8=
Subject key identifier: 2C:89:AF:C8:38:F2:60:44:20:17:97:7E:3A:B3:2C:AB:1C:0A:79:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45C8370C6FFB11F1B1687D09CF1D38B0.roa
Signing time: Wed 24 Jun 2026 18:34:03 +0000
ROA not before: Wed 24 Jun 2026 18:33:57 +0000
ROA not after: Fri 31 Jul 2026 18:33:57 +0000
asID: 62240
IP address blocks: 154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.83.0/24 maxlen: 24
154.194.84.0/24 maxlen: 24
154.194.85.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.194.118.0/24 maxlen: 24
154.195.102.0/24 maxlen: 24
154.195.103.0/24 maxlen: 24
154.195.104.0/24 maxlen: 24
154.195.105.0/24 maxlen: 24
154.195.106.0/24 maxlen: 24
154.195.109.0/24 maxlen: 24
154.195.110.0/24 maxlen: 24
154.195.114.0/24 maxlen: 24
154.195.115.0/24 maxlen: 24
154.195.119.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.83.0/24 maxlen: 24
154.196.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120041 (0x1d4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:33:57 2026 GMT
Not After : Jul 31 18:33:57 2026 GMT
Subject: CN=6a3c231b-fd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:43:2a:63:cf:7d:a5:03:15:8d:f9:3f:86:
56:04:6a:2c:4e:af:92:41:27:ba:7b:3e:92:38:f6:
33:ad:5e:9f:a1:c6:d1:61:ae:36:90:94:6a:e2:bb:
08:64:5b:21:72:e7:df:cb:3a:70:2e:63:61:0f:56:
d9:43:27:9d:ca:39:c8:91:9a:ea:b9:0d:4a:61:0b:
35:5d:f6:3f:fd:84:cf:12:39:84:6f:89:42:9c:b6:
c4:88:aa:e3:5a:3a:18:89:3a:9c:a0:00:aa:b6:1d:
ae:be:d9:77:42:d0:10:3d:cb:5b:51:d3:4c:46:60:
cc:d8:83:22:2a:70:94:6b:1e:05:9d:68:6f:81:a5:
f4:d9:47:d2:41:2f:c8:b5:86:fb:85:5f:bc:63:94:
9b:b9:5d:27:64:4c:16:8c:33:33:a4:fa:ca:f4:5d:
60:22:ff:ed:29:59:26:d4:9b:03:4d:6c:b9:6a:76:
62:57:6a:e2:00:6f:4f:72:f0:28:29:aa:77:f8:e2:
d5:c1:92:5d:6e:fa:1b:5d:4b:af:d5:e4:bd:8f:3b:
fc:f4:e6:53:6b:29:13:3d:d1:1d:bc:f1:87:f1:de:
77:e5:ae:ec:0b:94:d4:ec:53:7a:36:07:ce:1e:bb:
26:b9:c2:b5:47:f5:98:88:c1:aa:6f:d7:fc:9f:ab:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:AF:C8:38:F2:60:44:20:17:97:7E:3A:B3:2C:AB:1C:0A:79:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45C8370C6FFB11F1B1687D09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.7.0/24
154.194.38.0/24
154.194.83.0-154.194.85.255
154.194.100.0/24
154.194.118.0/24
154.195.102.0-154.195.106.255
154.195.109.0-154.195.110.255
154.195.114.0/23
154.195.119.0/24
154.196.54.0/24
154.196.83.0/24
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
67:74:74:0a:70:82:da:9f:70:6d:dc:37:35:4a:0d:06:b3:04:
dd:b9:d0:ff:24:a3:e3:64:93:c3:da:eb:92:45:dc:fa:76:39:
23:7b:d9:3a:ec:db:40:3e:ef:b4:36:cc:c6:fe:2f:52:e9:d8:
52:1a:20:e4:5a:26:07:5d:58:90:36:32:70:46:f5:db:84:50:
28:76:8e:bb:d9:f1:3d:b0:a4:9a:15:0a:59:88:ea:3b:b6:fc:
84:e0:37:d3:26:00:79:ea:75:b1:e3:10:4e:d4:0f:b6:7a:04:
10:a0:2c:80:c9:56:64:36:f8:b0:aa:0f:aa:bf:59:fe:01:45:
e4:42:7e:c6:16:dc:4f:a5:0f:94:49:9f:aa:75:a1:71:68:cb:
57:85:d7:d6:b1:c6:a3:fb:95:54:e1:53:ea:33:86:8b:90:03:
73:bd:d9:6e:78:a6:7c:fb:f1:04:5a:7a:87:29:74:45:40:aa:
ce:b2:27:88:08:bb:9a:37:c7:49:94:4c:62:7a:47:60:03:8e:
72:4b:43:7c:34:39:38:03:94:2c:3a:a8:be:74:80:3a:1b:11:
8a:e3:17:67:4a:8f:a9:75:2c:39:fc:b2:0d:df:73:bc:ce:62:
a7:f8:d4:b0:22:80:00:e8:50:ad:de:b4:21:7a:ff:d8:a7:c4:
4c:38:1f:45
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIDAdTpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI0MTgzMzU3WhcNMjYwNzMxMTgzMzU3WjAYMRYw
FAYDVQQDEw02YTNjMjMxYi1mZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzVVDKmPPfaUDFY35P4ZWBGosTq+SQSe6ez6SOPYzrV6focbRYa42kJRq
4rsIZFshcuffyzpwLmNhD1bZQyedyjnIkZrquQ1KYQs1XfY//YTPEjmEb4lCnLbE
iKrjWjoYiTqcoACqth2uvtl3QtAQPctbUdNMRmDM2IMiKnCUax4FnWhvgaX02UfS
QS/ItYb7hV+8Y5SbuV0nZEwWjDMzpPrK9F1gIv/tKVkm1JsDTWy5anZiV2riAG9P
cvAoKap3+OLVwZJdbvobXUuv1eS9jzv89OZTaykTPdEdvPGH8d535a7sC5TU7FN6
NgfOHrsmucK1R/WYiMGqb9f8n6thjwIDAQABo4IC/zCCAvswHQYDVR0OBBYEFCyJ
r8g48mBEIBeXfjqzLKscCnmiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NUM4MzcwQzZGRkIxMUYxQjE2ODdEMDlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAmsIHAwQAmsImMAwDBACa
wlMDBAGawlQDBACawmQDBACawnYwDAMEAZrDZgMEAJrDajAMAwQAmsNtAwQAmsNu
AwQBmsNyAwQAmsN3AwQAmsQ2AwQAmsRTAwQAmsRYMA0GCSqGSIb3DQEBCwUAA4IB
AQBndHQKcILan3Bt3Dc1Sg0GswTdudD/JKPjZJPD2uuSRdz6djkje9k67NtAPu+0
NszG/i9S6dhSGiDkWiYHXViQNjJwRvXbhFAodo672fE9sKSaFQpZiOo7tvyE4DfT
JgB56nWx4xBO1A+2egQQoCyAyVZkNviwqg+qv1n+AUXkQn7GFtxPpQ+USZ+qdaFx
aMtXhdfWscaj+5VU4VPqM4aLkANzvdlueKZ8+/EEWnqHKXRFQKrOsieICLuaN8dJ
lExiekdgA45yS0N8NDk4A5QsOqi+dIA6GxGK4xdnSo+pdSw5/LIN33O8zmKn+NSw
IoAA6FCt3rQhev/Yp8RMOB9F
-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:51 2026 by rpki-client