Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72DCF67E7D7011F198F8C411CF1D38B0.roa
File: 72DCF67E7D7011F198F8C411CF1D38B0.roa (raw, json)
Hash identifier: iE8Y8Hpmw/7ZrjZzfvgaOslCUuLZfOauIRRrVNVFuOs=
Subject key identifier: 68:AF:1E:E3:6B:27:8D:D1:54:37:D5:FD:55:F2:26:16:93:01:5D:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D858
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72DCF67E7D7011F198F8C411CF1D38B0.roa
Signing time: Sat 11 Jul 2026 21:35:34 +0000
ROA not before: Sat 11 Jul 2026 21:35:30 +0000
ROA not after: Tue 10 Jul 2029 21:35:30 +0000
asID: 17561
IP address blocks: 154.198.198.0/24 maxlen: 24
154.198.199.0/24 maxlen: 24
154.198.200.0/24 maxlen: 24
154.198.201.0/24 maxlen: 24
154.198.202.0/24 maxlen: 24
154.198.203.0/24 maxlen: 24
154.198.204.0/24 maxlen: 24
154.198.205.0/24 maxlen: 24
154.198.206.0/24 maxlen: 24
154.198.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120920 (0x1d858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 21:35:30 2026 GMT
Not After : Jul 10 21:35:30 2029 GMT
Subject: CN=6a52b726-41e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:f3:06:0d:53:9b:10:c7:5b:89:c2:ae:9d:
f6:48:68:29:cf:d2:75:f0:f8:b5:83:32:70:71:b0:
6d:89:51:47:76:42:1d:d7:f4:a6:08:c4:70:7f:61:
75:19:26:a5:28:e4:64:b0:f8:a8:80:69:02:97:89:
d7:00:05:81:d3:17:20:17:f2:06:d1:38:21:06:3d:
72:5d:fa:a3:4c:1b:4c:30:13:fd:3d:fa:b0:07:bd:
ee:31:8f:42:2b:8e:3f:4b:09:df:8d:48:46:3f:34:
ac:47:54:e5:67:62:1f:4b:00:cc:3c:3c:ae:31:d5:
7a:7b:c8:1b:0d:8e:cb:1d:19:02:e7:1e:6d:7a:17:
fd:d6:33:2b:01:fd:f4:75:da:30:b5:c8:fe:8b:84:
11:3f:d6:fa:83:8e:db:4f:fd:c6:eb:02:0b:7c:12:
d2:d8:75:ca:21:da:f2:3c:9f:11:d4:9c:09:71:21:
09:1a:f2:56:31:8c:d4:8c:b4:ad:c4:4e:65:ce:d3:
6c:fa:7a:95:0e:57:40:46:5f:4a:45:73:c0:4e:0e:
f0:11:0c:33:b6:33:ad:e5:3a:61:ed:1d:04:39:0a:
09:00:36:ba:e7:31:9a:e1:83:0a:21:2a:1e:5f:28:
a0:49:de:2c:1d:4b:e4:b0:06:ba:d6:ae:72:5d:3f:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:1E:E3:6B:27:8D:D1:54:37:D5:FD:55:F2:26:16:93:01:5D:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72DCF67E7D7011F198F8C411CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.198.0-154.198.207.255
Signature Algorithm: sha256WithRSAEncryption
33:be:30:61:28:9a:c7:2f:f3:a7:81:d8:d6:a5:38:9a:d6:51:
b2:ea:e1:8b:f7:30:bb:90:3d:a9:84:9f:62:8e:d5:b6:c6:2c:
f2:4e:24:14:79:d7:cf:d1:e1:50:6e:cb:e5:d4:ad:fb:1e:c4:
b1:b1:62:63:ea:c9:18:f9:34:00:f9:cc:f6:1e:76:8f:c2:e2:
53:3f:d6:e0:9e:70:65:03:86:29:eb:f0:04:38:75:bd:b1:3e:
60:6c:15:a0:87:67:d0:a8:e4:76:87:e4:5b:bd:49:e7:98:e4:
4f:54:b8:64:d0:c9:29:2a:6c:d5:3d:73:e6:53:8c:bb:6e:4b:
bb:a6:5a:38:52:16:e1:da:2d:3d:41:6c:b4:43:30:22:8e:7c:
54:50:fb:fb:44:f6:02:24:ce:fb:0d:ff:c3:25:23:27:e9:c0:
bf:ce:42:a5:1d:dd:8a:10:62:6a:c9:ff:8c:45:a3:7f:1a:9b:
ed:d6:4a:bc:54:d9:28:3d:cd:5c:35:70:81:01:f6:0e:6e:c4:
5a:43:cb:31:d1:2f:04:b9:57:46:27:0b:6d:19:55:89:fd:11:
a0:74:e8:41:8f:52:bd:31:94:a3:18:19:ca:43:6e:b8:52:2d:
cb:8c:6f:0f:3a:12:5f:b5:7e:46:e3:3f:d3:88:a8:6c:37:ce:
46:73:e1:42
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdhYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzExMjEzNTMwWhcNMjkwNzEwMjEzNTMwWjAYMRYw
FAYDVQQDEw02YTUyYjcyNi00MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA58LzBg1TmxDHW4nCrp32SGgpz9J18Pi1gzJwcbBtiVFHdkId1/SmCMRw
f2F1GSalKORksPiogGkCl4nXAAWB0xcgF/IG0TghBj1yXfqjTBtMMBP9PfqwB73u
MY9CK44/SwnfjUhGPzSsR1TlZ2IfSwDMPDyuMdV6e8gbDY7LHRkC5x5tehf91jMr
Af30ddowtcj+i4QRP9b6g47bT/3G6wILfBLS2HXKIdryPJ8R1JwJcSEJGvJWMYzU
jLStxE5lztNs+nqVDldARl9KRXPATg7wEQwztjOt5Tph7R0EOQoJADa65zGa4YMK
ISoeXyigSd4sHUvksAa61q5yXT+iJQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGiv
HuNrJ43RVDfV/VXyJhaTAV2gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MkRDRjY3RTdENzAxMUYxOThGOEM0MTFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaxsYDBASaxsAwDQYJ
KoZIhvcNAQELBQADggEBADO+MGEomscv86eB2NalOJrWUbLq4Yv3MLuQPamEn2KO
1bbGLPJOJBR518/R4VBuy+XUrfsexLGxYmPqyRj5NAD5zPYedo/C4lM/1uCecGUD
hinr8AQ4db2xPmBsFaCHZ9Co5HaH5Fu9SeeY5E9UuGTQySkqbNU9c+ZTjLtuS7um
WjhSFuHaLT1BbLRDMCKOfFRQ+/tE9gIkzvsN/8MlIyfpwL/OQqUd3YoQYmrJ/4xF
o38am+3WSrxU2Sg9zVw1cIEB9g5uxFpDyzHRLwS5V0YnC20ZVYn9EaB06EGPUr0x
lKMYGcpDbrhSLcuMbw86El+1fkbjP9OIqGw3zkZz4UI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:25 2026 by rpki-client