Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BF9E7E713811F187F222A4CE1D38B0.roa
File: C2BF9E7E713811F187F222A4CE1D38B0.roa (raw, json)
Hash identifier: LFgUfIQDVXMt9A4AkgpyAYzzxA4+qpX+rDKuTg86Ves=
Subject key identifier: B2:46:C4:DF:7A:D1:C9:4F:CC:E4:88:D7:F3:8D:F3:64:D4:E5:4B:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D551
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BF9E7E713811F187F222A4CE1D38B0.roa
Signing time: Fri 26 Jun 2026 08:26:43 +0000
ROA not before: Fri 26 Jun 2026 08:26:38 +0000
ROA not after: Thu 30 Jul 2026 08:26:38 +0000
asID: 9304
IP address blocks: 154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120145 (0x1d551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 08:26:38 2026 GMT
Not After : Jul 30 08:26:38 2026 GMT
Subject: CN=6a3e37c3-4324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:07:a9:2e:31:98:7e:0b:a5:d0:f2:d3:b6:
d4:a4:e7:99:0a:35:c9:5d:c3:85:01:fc:35:32:b5:
c4:71:22:94:11:5b:2c:06:a2:60:e9:62:d2:e9:a5:
de:aa:91:78:bb:c5:5b:07:95:0a:4a:fe:e4:5e:72:
09:4c:75:89:14:7e:d7:28:a0:7d:90:e6:cf:5b:89:
d6:28:b7:96:ce:dd:62:03:06:8c:9f:7f:c5:9a:c2:
eb:d2:ec:2e:30:4f:b1:11:04:83:9e:ac:44:8e:85:
24:12:cb:f6:40:4b:dc:49:e3:b3:1c:c0:93:4e:6b:
66:17:7f:48:55:de:79:10:52:e7:79:67:f4:72:b4:
40:68:17:c2:31:d7:2d:bf:05:9c:c0:03:bf:4d:0d:
c3:71:a3:8f:08:ad:8e:0c:ac:2e:87:ac:c7:46:24:
8e:52:9f:a2:a1:07:30:c9:1f:7a:e9:b2:4e:67:8f:
b9:c1:e0:5e:f2:4a:1a:c7:16:45:d2:fa:d2:5a:96:
df:31:22:10:28:d5:f4:8b:ef:23:ca:07:93:f0:c6:
bb:c0:98:4c:1b:43:1e:54:29:bb:16:8d:b6:fe:0b:
98:38:91:5b:26:db:c0:7c:1e:b7:98:cd:40:dc:52:
38:ac:a1:59:68:e2:1b:7c:d9:58:57:8c:60:5b:43:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:C4:DF:7A:D1:C9:4F:CC:E4:88:D7:F3:8D:F3:64:D4:E5:4B:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BF9E7E713811F187F222A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.157.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:91:62:68:e6:a3:3c:4c:9b:91:e5:eb:31:ac:da:20:77:7e:
9f:5d:02:46:ab:46:af:31:dd:39:6e:7a:ef:19:f6:18:98:2d:
96:cf:5c:58:ae:89:e8:5a:4b:8f:7e:f4:cd:21:d3:85:80:9c:
99:60:85:83:e1:14:7a:c3:cd:d6:e5:35:33:6d:01:08:99:dc:
da:08:2e:43:a2:af:41:03:99:98:bc:6a:95:b0:c0:c5:54:81:
de:98:50:d4:6e:91:18:1f:60:38:c2:b4:7b:7e:b9:b7:c8:6e:
3a:cc:df:90:bc:c6:59:08:40:f7:40:b6:ca:da:d7:36:8a:f5:
e7:53:5e:d2:64:93:7c:a1:fb:8c:12:3e:48:f8:68:e6:68:48:
cd:ae:9d:9e:71:9b:ae:4b:f2:33:56:f6:89:fe:6f:cf:58:a7:
92:0e:01:e7:8d:12:16:d8:54:03:f7:ac:3d:31:7c:fd:e9:5b:
fe:18:85:51:e0:be:22:c1:6d:d0:ba:5e:51:e3:6e:d8:e6:fe:
2a:87:a6:b4:67:b4:a5:a3:69:fe:ca:09:8e:da:50:40:00:aa:
d2:26:55:c5:6a:f0:a8:24:0e:4e:58:cd:7b:e7:fc:99:77:aa:
a4:b5:46:67:a1:06:c0:83:0a:3a:3e:9a:2a:ac:02:50:1e:db:
d4:76:fe:62
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAdVRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MDgyNjM4WhcNMjYwNzMwMDgyNjM4WjAYMRYw
FAYDVQQDEw02YTNlMzdjMy00MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9AHqS4xmH4LpdDy07bUpOeZCjXJXcOFAfw1MrXEcSKUEVssBqJg6WLS
6aXeqpF4u8VbB5UKSv7kXnIJTHWJFH7XKKB9kObPW4nWKLeWzt1iAwaMn3/FmsLr
0uwuME+xEQSDnqxEjoUkEsv2QEvcSeOzHMCTTmtmF39IVd55EFLneWf0crRAaBfC
MdctvwWcwAO/TQ3DcaOPCK2ODKwuh6zHRiSOUp+ioQcwyR966bJOZ4+5weBe8koa
xxZF0vrSWpbfMSIQKNX0i+8jygeT8Ma7wJhMG0MeVCm7Fo22/guYOJFbJtvAfB63
mM1A3FI4rKFZaOIbfNlYV4xgW0M+gwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFLJG
xN960clPzOSI1/ON82TU5UtZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMkJGOUU3RTcxMzgxMUYxODdGMjIyQTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAmsiDAwQAmsiMAwQAmsiO
MAwDBACayJ0DBACayKIDBACayL8wDQYJKoZIhvcNAQELBQADggEBANWRYmjmozxM
m5Hl6zGs2iB3fp9dAkarRq8x3Tlueu8Z9hiYLZbPXFiuiehaS49+9M0h04WAnJlg
hYPhFHrDzdblNTNtAQiZ3NoILkOir0EDmZi8apWwwMVUgd6YUNRukRgfYDjCtHt+
ubfIbjrM35C8xlkIQPdAtsra1zaK9edTXtJkk3yh+4wSPkj4aOZoSM2unZ5xm65L
8jNW9on+b89Yp5IOAeeNEhbYVAP3rD0xfP3pW/4YhVHgviLBbdC6XlHjbtjm/iqH
prRntKWjaf7KCY7aUEAAqtImVcVq8KgkDk5YzXvn/Jl3qqS1RmehBsCDCjo+miqs
AlAe29R2/mI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:18 2026 by rpki-client