Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9206B55E6FFF11F18D418AA3CE1D38B0.roa
File: 9206B55E6FFF11F18D418AA3CE1D38B0.roa (raw, json)
Hash identifier: l3t71lemTRiajtlsoQwxXMqt27QT+7aUwZpt0yHUEzY=
Subject key identifier: 02:00:93:BB:8F:AE:EB:28:58:67:85:EC:F9:14:00:EF:A8:8C:57:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9206B55E6FFF11F18D418AA3CE1D38B0.roa
Signing time: Wed 24 Jun 2026 19:04:49 +0000
ROA not before: Wed 24 Jun 2026 19:04:44 +0000
ROA not after: Fri 31 Jul 2026 19:04:44 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.194.103.0/24 maxlen: 24
154.195.123.0/24 maxlen: 24
154.195.125.0/24 maxlen: 24
154.195.126.0/24 maxlen: 24
154.196.16.0/24 maxlen: 24
154.196.17.0/24 maxlen: 24
154.196.19.0/24 maxlen: 24
154.196.20.0/24 maxlen: 24
154.196.21.0/24 maxlen: 24
154.196.23.0/24 maxlen: 24
154.196.24.0/24 maxlen: 24
154.196.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120049 (0x1d4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:04:44 2026 GMT
Not After : Jul 31 19:04:44 2026 GMT
Subject: CN=6a3c2a50-8392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:aa:c4:b7:e6:c7:34:27:92:8f:6d:57:4b:
77:6c:e2:8d:a5:26:39:0e:36:b0:a5:98:fe:e4:d1:
3b:33:49:80:06:89:08:52:b7:0b:a4:2e:e2:c6:9f:
20:04:34:f7:73:10:0f:d7:7e:2e:7b:88:50:22:ed:
ba:a3:0a:70:69:72:e1:d2:80:a9:1a:97:05:05:a0:
a4:00:7e:fd:fe:d7:c1:68:50:b5:01:aa:af:c6:14:
8e:8b:43:34:1e:18:31:08:2f:8f:c9:89:49:3f:49:
af:3f:33:95:65:35:5f:56:49:af:3d:f8:1c:d0:c0:
ae:64:80:5a:5a:5c:cc:97:30:93:4c:50:6c:c0:f2:
43:9e:f4:de:c4:46:cd:01:16:59:0b:2a:ef:bd:f2:
54:eb:4a:12:16:ea:1a:c6:bb:f7:5b:9a:95:21:58:
45:fe:b2:19:1b:c7:5e:d4:83:0a:2b:5a:59:bb:53:
a7:f4:38:cd:3c:c1:38:95:f8:b7:f2:9a:b2:66:dd:
99:9f:d2:f3:35:c7:a3:5d:39:fd:0d:0c:5d:f7:63:
86:3d:b2:f2:14:d8:97:84:00:57:83:a7:62:ee:34:
b7:54:2c:53:de:5c:32:58:7a:10:b3:cc:ee:ab:2b:
f0:23:3a:a5:eb:a3:cf:61:c7:41:4e:79:bf:7a:c2:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:93:BB:8F:AE:EB:28:58:67:85:EC:F9:14:00:EF:A8:8C:57:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9206B55E6FFF11F18D418AA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0-154.194.74.255
154.194.78.0/24
154.194.94.0-154.194.97.255
154.194.103.0/24
154.195.123.0/24
154.195.125.0-154.195.126.255
154.196.16.0/23
154.196.19.0-154.196.21.255
154.196.23.0-154.196.24.255
154.196.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f9:ef:6a:a7:38:93:98:0b:5d:57:ef:5f:ce:94:54:1f:8e:
1f:93:d0:35:1e:b7:fb:60:9a:2e:c3:e3:02:4b:c5:49:60:21:
d9:78:2e:76:8f:66:0a:a0:97:a8:f7:98:29:44:69:d7:94:fc:
c7:ed:47:71:70:36:fb:f7:ab:3b:10:c6:ac:5a:14:c7:7d:82:
e4:d7:63:93:08:c5:7b:1a:63:15:c5:1d:28:54:b9:6f:98:0b:
de:61:32:23:52:84:b7:ad:de:3a:93:05:30:bf:bb:cf:3e:2a:
58:99:39:2e:1e:b8:fa:c0:75:8f:21:2a:96:42:ce:f4:f5:27:
9f:f0:62:a5:30:07:9c:71:87:16:c6:cf:a8:c9:f9:52:b6:7a:
03:41:2a:7a:68:26:00:43:1e:c2:65:13:15:3f:75:9b:50:b5:
2d:17:fe:54:2d:99:8c:63:7a:6b:5d:8a:7f:9d:a6:11:55:ed:
5e:46:30:58:5d:06:13:d0:43:f0:1d:17:45:5e:7b:bf:e5:4c:
69:47:a2:a4:d4:2f:57:12:14:b9:fe:81:11:46:52:5c:6a:25:
7d:2c:3b:01:4e:c4:21:60:d9:c8:bb:52:f2:81:e7:ed:d9:2e:
fd:95:4d:45:68:85:f3:ce:e6:3a:84:a3:9e:48:f6:bf:1f:a9:
2a:ba:ac:72
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIDAdTxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI0MTkwNDQ0WhcNMjYwNzMxMTkwNDQ0WjAYMRYw
FAYDVQQDEw02YTNjMmE1MC04MzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoSuqxLfmxzQnko9tV0t3bOKNpSY5DjawpZj+5NE7M0mABokIUrcLpC7i
xp8gBDT3cxAP134ue4hQIu26owpwaXLh0oCpGpcFBaCkAH79/tfBaFC1AaqvxhSO
i0M0HhgxCC+PyYlJP0mvPzOVZTVfVkmvPfgc0MCuZIBaWlzMlzCTTFBswPJDnvTe
xEbNARZZCyrvvfJU60oSFuoaxrv3W5qVIVhF/rIZG8de1IMKK1pZu1On9DjNPME4
lfi38pqyZt2Zn9LzNcejXTn9DQxd92OGPbLyFNiXhABXg6di7jS3VCxT3lwyWHoQ
s8zuqyvwIzql66PPYcdBTnm/esJRewIDAQABo4IDAzCCAv8wHQYDVR0OBBYEFAIA
k7uPrusoWGeF7PkUAO+ojFeTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MjA2QjU1RTZGRkYxMUYxOEQ0MThBQTNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkMAwDBAOawkgDBACawkoDBACa
wk4wDAMEAZrCXgMEAZrCYAMEAJrCZwMEAJrDezAMAwQAmsN9AwQAmsN+AwQBmsQQ
MAwDBACaxBMDBAGaxBQwDAMEAJrEFwMEAJrEGAMEAJrELzANBgkqhkiG9w0BAQsF
AAOCAQEAKvnvaqc4k5gLXVfvX86UVB+OH5PQNR63+2CaLsPjAkvFSWAh2Xgudo9m
CqCXqPeYKURp15T8x+1HcXA2+/erOxDGrFoUx32C5NdjkwjFexpjFcUdKFS5b5gL
3mEyI1KEt63eOpMFML+7zz4qWJk5Lh64+sB1jyEqlkLO9PUnn/BipTAHnHGHFsbP
qMn5UrZ6A0EqemgmAEMewmUTFT91m1C1LRf+VC2ZjGN6a12Kf52mEVXtXkYwWF0G
E9BD8B0XRV57v+VMaUeipNQvVxIUuf6BEUZSXGolfSw7AU7EIWDZyLtS8oHn7dku
/ZVNRWiF887mOoSjnkj2vx+pKrqscg==
-----END CERTIFICATE-----
Generated at Sat Jun 27 17:41:13 2026 by rpki-client