Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70F5FE688D8411F182CFCCF4CE1D38B0.roa
File: 70F5FE688D8411F182CFCCF4CE1D38B0.roa (raw, json)
Hash identifier: sHGWUimblRAc0VeEMgxfHsGW1cNZCw937QFPTtgOwgk=
Subject key identifier: 73:70:D6:5F:97:C4:3A:1C:AF:B0:9D:C0:15:D6:1A:E4:D3:AE:4E:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70F5FE688D8411F182CFCCF4CE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:39:00 +0000
ROA not before: Sat 01 Aug 2026 08:38:56 +0000
ROA not after: Sun 06 Sep 2026 08:38:56 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
154.222.1.0/24 maxlen: 24
154.222.12.0/24 maxlen: 24
154.222.13.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.198.0/24 maxlen: 24
154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121884 (0x1dc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 08:38:56 2026 GMT
Not After : Sep 6 08:38:56 2026 GMT
Subject: CN=6a6db0a4-b428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:76:ae:12:3c:e3:04:7e:f3:02:a1:3c:6c:
a2:dd:ce:81:08:16:41:59:0a:13:7a:33:f1:d7:c5:
b3:d6:25:1f:70:59:b5:6f:bf:f9:78:63:b4:8b:7a:
57:03:6c:92:70:6d:28:03:db:fd:c4:75:02:20:b6:
7f:5b:c0:f4:42:a3:e8:a1:06:4f:b3:07:f2:5f:2c:
a2:f0:8f:00:e7:55:86:8d:db:a7:e9:c1:85:47:bf:
48:21:e9:68:aa:08:c6:c7:1c:02:b7:10:0f:36:9a:
61:e2:c0:f4:06:26:db:12:45:96:1a:d0:f9:0a:23:
35:03:bd:88:f5:3b:e6:7c:c1:c8:17:43:ec:0f:ab:
8e:a6:31:85:1c:ed:c8:96:b4:a1:d5:98:9a:3f:4c:
a5:cb:4f:4f:24:84:83:4e:13:0d:6c:a4:96:96:0c:
ae:1b:97:da:82:6d:c4:f9:30:25:13:18:ba:88:37:
e4:45:5d:a9:48:50:21:4f:96:5d:a3:07:ad:4b:0f:
ef:fb:7e:fa:ab:50:a8:eb:9e:7a:fc:a7:f0:e4:1f:
c5:0f:40:47:e0:2c:75:de:1f:cb:48:22:68:5a:12:
e6:79:9f:d2:77:72:f2:dc:b2:76:60:28:37:90:9e:
0f:76:03:b3:50:9e:b0:7b:d7:e3:75:47:ba:ef:e0:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:D6:5F:97:C4:3A:1C:AF:B0:9D:C0:15:D6:1A:E4:D3:AE:4E:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70F5FE688D8411F182CFCCF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0-154.219.196.255
154.219.198.0/23
154.221.56.0/22
154.221.61.0/24
154.222.1.0/24
154.222.12.0/22
154.222.43.0-154.222.45.255
154.222.198.0/24
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
34:af:6a:dd:56:f3:a7:e2:93:fd:89:05:ec:03:30:20:65:be:
2d:86:6a:04:d1:9c:58:e2:22:5a:5b:03:80:85:a7:e5:ef:4c:
39:90:68:e2:ca:33:7d:e2:0c:0b:85:24:96:40:ce:30:a7:90:
52:ac:d5:0b:27:82:44:51:0b:ba:1b:73:d2:a2:5e:09:26:bd:
37:2b:fd:2a:b9:16:9c:b1:68:ca:7f:37:48:a0:ac:9e:5d:04:
b6:b8:d5:7d:26:cd:5f:a6:32:e8:3f:59:a5:65:aa:04:0c:26:
9b:fc:7a:68:10:0c:76:3f:b4:9a:e0:9b:53:a5:f3:b9:21:8e:
19:a4:5c:dc:d7:c0:d6:44:3d:6f:16:f1:f9:d1:14:a3:17:05:
80:21:ef:b5:8e:06:ed:6c:a3:58:07:7d:58:e5:86:6e:10:46:
5c:f9:27:26:92:1d:06:c0:35:08:ed:00:64:42:c5:3d:de:dc:
22:c8:9e:5a:c2:a2:dc:b7:70:8b:ef:f3:c7:dc:55:07:9c:51:
33:c9:0c:51:0c:ec:d2:26:04:dd:72:7a:c0:25:1f:45:1f:0d:
3f:77:68:d9:6c:22:b8:bf:cb:85:d6:a4:ee:29:7b:58:73:54:
e8:d9:5f:19:d4:1f:a5:b9:04:33:26:b5:e1:5a:bf:4e:c8:c2:
40:e7:20:dc
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIDAdwcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODAxMDgzODU2WhcNMjYwOTA2MDgzODU2WjAYMRYw
FAYDVQQDEw02YTZkYjBhNC1iNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy/B2rhI84wR+8wKhPGyi3c6BCBZBWQoTejPx18Wz1iUfcFm1b7/5eGO0
i3pXA2yScG0oA9v9xHUCILZ/W8D0QqPooQZPswfyXyyi8I8A51WGjdun6cGFR79I
IeloqgjGxxwCtxAPNpph4sD0BibbEkWWGtD5CiM1A72I9TvmfMHIF0PsD6uOpjGF
HO3IlrSh1ZiaP0yly09PJISDThMNbKSWlgyuG5fagm3E+TAlExi6iDfkRV2pSFAh
T5ZdowetSw/v+376q1Co6556/Kfw5B/FD0BH4Cx13h/LSCJoWhLmeZ/Sd3Ly3LJ2
YCg3kJ4PdgOzUJ6we9fjdUe67+CY7QIDAQABo4IC6zCCAucwHQYDVR0OBBYEFHNw
1l+XxDocr7CdwBXWGuTTrk5XMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MEY1RkU2ODhEODQxMUYxODJDRkNDRjRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAmtvAMAwDBACa28MDBACa
28QDBAGa28YDBAKa3TgDBACa3T0DBACa3gEDBAKa3gwwDAMEAJreKwMEAZreLAME
AJrexgMEAJrezjANBgkqhkiG9w0BAQsFAAOCAQEANK9q3Vbzp+KT/YkF7AMwIGW+
LYZqBNGcWOIiWlsDgIWn5e9MOZBo4sozfeIMC4UklkDOMKeQUqzVCyeCRFELuhtz
0qJeCSa9Nyv9KrkWnLFoyn83SKCsnl0EtrjVfSbNX6Yy6D9ZpWWqBAwmm/x6aBAM
dj+0muCbU6XzuSGOGaRc3NfA1kQ9bxbx+dEUoxcFgCHvtY4G7WyjWAd9WOWGbhBG
XPknJpIdBsA1CO0AZELFPd7cIsieWsKi3Ldwi+/zx9xVB5xRM8kMUQzs0iYE3XJ6
wCUfRR8NP3do2WwiuL/Lhdak7il7WHNU6NlfGdQfpbkEMya14Vq/TsjCQOcg3A==
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:00 2026 by rpki-client