Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67ECF742455711F19E3A5700CF1D38B0.roa
File: 67ECF742455711F19E3A5700CF1D38B0.roa (raw, json)
Hash identifier: 2Dck4qX2cttrFht9kGRDJDI33QMBor3vIvuiUZ01bes=
Subject key identifier: 67:3B:6F:BB:4E:BA:45:3B:A9:7C:C9:95:77:99:8A:66:3A:65:8F:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C887
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67ECF742455711F19E3A5700CF1D38B0.roa
Signing time: Fri 01 May 2026 12:15:14 +0000
ROA not before: Fri 01 May 2026 12:15:08 +0000
ROA not after: Mon 30 Apr 2029 12:15:08 +0000
asID: 17561
IP address blocks: 154.197.119.0/24 maxlen: 24
154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/24 maxlen: 24
154.201.9.0/24 maxlen: 24
154.201.10.0/24 maxlen: 24
154.201.11.0/24 maxlen: 24
154.201.40.0/24 maxlen: 24
154.207.64.0/24 maxlen: 24
154.207.65.0/24 maxlen: 24
154.207.66.0/24 maxlen: 24
154.209.65.0/24 maxlen: 24
154.209.70.0/24 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.136.0/24 maxlen: 24
154.223.230.0/24 maxlen: 24
154.223.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116871 (0x1c887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:15:08 2026 GMT
Not After : Apr 30 12:15:08 2029 GMT
Subject: CN=69f49951-fc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:7a:92:f3:7e:f5:b9:2a:08:21:85:ab:42:
a9:05:d1:89:6f:60:ee:88:bb:51:b3:ae:6c:40:94:
c1:13:bb:03:47:19:89:0f:8b:c9:7f:90:e9:40:cd:
25:62:b3:10:4d:45:df:53:7b:d5:b5:09:a6:f9:7c:
6c:93:74:b8:ea:19:53:d1:64:8a:73:ad:27:82:f4:
0a:98:63:28:34:74:1c:ae:27:e3:7d:ec:78:42:0f:
32:01:7c:72:9f:4c:ac:bd:e2:75:58:5f:ad:93:df:
08:60:57:95:3f:25:37:35:d3:5d:69:60:c2:0f:da:
01:30:46:36:65:2d:ba:39:ce:09:7f:db:44:1f:68:
dd:63:d5:54:70:8f:35:f7:cc:07:1c:0b:7e:6f:88:
67:a5:fc:d8:53:dc:3f:c4:1f:19:6f:be:5b:73:80:
ba:d9:22:c4:ab:e8:29:1e:50:f6:3c:8e:10:5e:35:
f9:07:e4:ae:33:e1:76:8b:c7:77:dc:73:6a:22:eb:
06:bf:8d:77:2b:c0:fb:d8:a6:cf:71:70:4f:bf:15:
3a:b6:bf:9a:35:dc:b4:6e:73:7e:a4:fc:2c:2a:0b:
5c:71:33:b7:6c:55:c0:ec:f7:01:52:6e:5c:5b:19:
18:3b:ac:0b:1d:5b:7c:4f:d9:72:50:5a:ff:e8:cc:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3B:6F:BB:4E:BA:45:3B:A9:7C:C9:95:77:99:8A:66:3A:65:8F:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67ECF742455711F19E3A5700CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
154.198.9.0-154.198.10.255
154.201.7.0-154.201.11.255
154.201.40.0/24
154.207.64.0-154.207.66.255
154.209.65.0/24
154.209.70.0/24
154.213.211.0-154.213.212.255
154.222.77.0/24
154.222.136.0/24
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
77:06:e8:1d:ee:26:0c:1c:d5:46:31:93:54:91:02:6c:d5:e5:
6e:7b:39:79:18:73:61:7c:34:f3:23:44:7e:6f:f6:9a:21:71:
ac:9d:6a:05:b0:a6:ce:c2:bc:aa:99:25:39:bc:c3:66:23:99:
f8:4a:5c:e5:6c:b7:d2:f9:3f:f0:42:48:94:b6:2c:d2:6f:d9:
3e:9a:c8:09:6f:da:b1:5f:a1:cb:85:a3:69:f5:b7:c9:38:a2:
8d:6c:a1:7f:e8:8e:bf:20:03:19:94:c8:62:e2:47:90:94:8f:
ab:54:ac:01:6d:81:2b:47:66:bd:b3:b6:1e:f5:5c:fe:6e:1d:
97:de:75:c7:c1:70:dc:58:6d:19:db:0c:1d:94:02:33:b5:58:
df:f5:e1:ab:60:2a:13:ae:4b:9b:d9:9b:ca:d7:a4:34:db:46:
34:55:95:53:de:8b:7e:6e:76:9f:54:52:84:74:3a:a5:fd:dc:
26:83:30:97:cc:86:1b:10:de:a0:4d:93:c8:fa:a6:8b:57:cc:
e4:77:cb:f3:70:0e:2c:04:24:89:4c:65:85:d1:3c:42:4f:95:
a9:2c:30:0f:23:87:89:c1:08:19:83:2b:ba:8d:80:64:8e:17:
20:ec:e4:6c:10:b6:ec:e7:63:ea:f3:1c:9b:fe:00:85:a0:d2:
52:ea:11:47
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIDAciHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAxMTIxNTA4WhcNMjkwNDMwMTIxNTA4WjAYMRYw
FAYDVQQDEw02OWY0OTk1MS1mYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwyx6kvN+9bkqCCGFq0KpBdGJb2DuiLtRs65sQJTBE7sDRxmJD4vJf5Dp
QM0lYrMQTUXfU3vVtQmm+Xxsk3S46hlT0WSKc60ngvQKmGMoNHQcrifjfex4Qg8y
AXxyn0ysveJ1WF+tk98IYFeVPyU3NdNdaWDCD9oBMEY2ZS26Oc4Jf9tEH2jdY9VU
cI8198wHHAt+b4hnpfzYU9w/xB8Zb75bc4C62SLEq+gpHlD2PI4QXjX5B+SuM+F2
i8d33HNqIusGv413K8D72KbPcXBPvxU6tr+aNdy0bnN+pPwsKgtccTO3bFXA7PcB
Um5cWxkYO6wLHVt8T9lyUFr/6MxqCwIDAQABo4IDATCCAv0wHQYDVR0OBBYEFGc7
b7tOukU7qXzJlXeZimY6ZY8kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82N0VDRjc0MjQ1NTcxMUYxOUUzQTU3MDBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAmsV3MAwDBACaxgkDBACa
xgowDAMEAJrJBwMEAprJCAMEAJrJKDAMAwQGms9AAwQAms9CAwQAmtFBAwQAmtFG
MAwDBACa1dMDBACa1dQDBACa3k0DBACa3ogDBAGa3+YwDQYJKoZIhvcNAQELBQAD
ggEBAHcG6B3uJgwc1UYxk1SRAmzV5W57OXkYc2F8NPMjRH5v9pohcaydagWwps7C
vKqZJTm8w2YjmfhKXOVst9L5P/BCSJS2LNJv2T6ayAlv2rFfocuFo2n1t8k4oo1s
oX/ojr8gAxmUyGLiR5CUj6tUrAFtgStHZr2zth71XP5uHZfedcfBcNxYbRnbDB2U
AjO1WN/14atgKhOuS5vZm8rXpDTbRjRVlVPei35udp9UUoR0OqX93CaDMJfMhhsQ
3qBNk8j6potXzOR3y/NwDiwEJIlMZYXRPEJPlaksMA8jh4nBCBmDK7qNgGSOFyDs
5GwQtuznY+rzHJv+AIWg0lLqEUc=
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:04 2026 by rpki-client