Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCEC2524714311F19464C9E2CE1D38B0.roa
File: CCEC2524714311F19464C9E2CE1D38B0.roa (raw, json)
Hash identifier: fvssvFGZWuxUMkmAwtQ/r7IKWVUPfB6+ox+JFxy8w44=
Subject key identifier: 27:B0:1C:8A:E3:C9:9E:B6:D3:05:34:40:76:E7:75:07:CA:90:E0:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D561
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCEC2524714311F19464C9E2CE1D38B0.roa
Signing time: Fri 26 Jun 2026 09:45:45 +0000
ROA not before: Fri 26 Jun 2026 09:45:40 +0000
ROA not after: Thu 30 Jul 2026 09:45:40 +0000
asID: 9304
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120161 (0x1d561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:45:40 2026 GMT
Not After : Jul 30 09:45:40 2026 GMT
Subject: CN=6a3e4a48-fd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:93:d0:17:ae:50:8d:51:34:d1:67:ce:b4:
5e:91:52:67:ab:61:cc:77:21:96:da:5d:24:a7:87:
5a:77:9c:52:de:29:1e:5f:6f:4a:5b:ba:5a:6d:c7:
c0:b7:a7:c2:28:97:eb:86:74:80:43:da:37:44:af:
4e:ca:21:6b:94:2f:6f:52:17:5a:1d:7b:81:08:ae:
c1:4b:7e:29:7d:10:d7:cb:af:1a:ff:36:3e:4f:85:
4b:59:7d:5d:41:b3:ce:68:f0:c5:42:eb:41:05:19:
be:2e:3e:0e:71:5c:61:22:e3:d3:7a:a7:ea:7f:be:
76:e4:36:63:aa:fb:26:0d:72:2b:dc:96:56:67:fd:
14:14:c7:84:fb:d7:b1:22:be:b4:89:0d:0b:6a:e1:
10:a3:33:02:32:12:3b:df:5d:4f:74:0d:91:c7:14:
16:5b:5d:6a:b4:14:c5:bc:6d:b9:ab:4d:17:2e:dd:
a8:56:d2:70:2d:40:cd:be:90:16:e1:42:55:a7:3f:
44:01:27:2c:ee:3c:b9:90:78:83:8e:9e:3f:7b:6e:
6e:5e:86:af:83:48:e8:46:30:f8:b9:ba:9e:02:71:
29:fa:68:17:ea:5e:a6:d4:f1:12:81:37:40:21:8f:
0d:84:05:7d:55:f6:dd:97:11:6c:67:bf:14:16:64:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B0:1C:8A:E3:C9:9E:B6:D3:05:34:40:76:E7:75:07:CA:90:E0:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCEC2524714311F19464C9E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/24
154.83.67.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:8b:7c:7d:cc:80:9c:96:5b:ac:d2:99:13:75:4f:f7:7c:f6:
86:c3:a6:aa:8f:3c:b0:ad:ec:85:c2:85:37:b6:3a:bb:a8:6d:
97:05:ae:a8:bd:01:f6:ba:a3:87:ab:84:01:2d:84:b4:b8:5a:
6f:a8:f6:53:2d:57:a7:61:72:19:d0:a8:88:74:4f:fc:2d:28:
69:ef:ff:c6:59:43:f5:c0:71:a9:0c:e1:a0:d4:f1:67:66:fb:
88:8e:fe:4e:c6:a2:6a:93:2e:85:1d:8f:cb:7a:e3:f0:05:56:
c3:dc:f7:39:53:c8:62:9a:c8:51:bd:55:1c:6e:b3:20:d7:92:
23:ef:27:08:c5:65:76:f7:cf:83:d0:ba:6a:66:c3:49:6c:1b:
17:0c:33:05:1f:d5:ba:68:93:c8:64:de:18:0e:64:f6:70:d2:
24:37:e5:98:0e:d9:8d:17:7c:09:75:95:27:c1:48:84:0d:db:
22:3a:99:e6:52:5b:de:3f:96:1d:d4:e1:3d:99:62:1a:20:7c:
c2:59:ce:bd:c7:04:cd:f5:2a:5c:50:7e:f3:9a:68:12:dd:f7:
0a:81:61:50:22:37:8a:ef:22:da:d9:c0:a3:3e:54:64:66:47:
4f:7d:e7:5a:0d:83:a3:67:f3:8a:e2:e5:8c:6e:bc:0a:72:ca:
98:f7:f0:ad
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAdVhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MDk0NTQwWhcNMjYwNzMwMDk0NTQwWjAYMRYw
FAYDVQQDEw02YTNlNGE0OC1mZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwLeT0BeuUI1RNNFnzrRekVJnq2HMdyGW2l0kp4dad5xS3ikeX29KW7pa
bcfAt6fCKJfrhnSAQ9o3RK9OyiFrlC9vUhdaHXuBCK7BS34pfRDXy68a/zY+T4VL
WX1dQbPOaPDFQutBBRm+Lj4OcVxhIuPTeqfqf7525DZjqvsmDXIr3JZWZ/0UFMeE
+9exIr60iQ0LauEQozMCMhI7311PdA2RxxQWW11qtBTFvG25q00XLt2oVtJwLUDN
vpAW4UJVpz9EAScs7jy5kHiDjp4/e25uXoavg0joRjD4ubqeAnEp+mgX6l6m1PES
gTdAIY8NhAV9VfbdlxFsZ78UFmQx0QIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFCew
HIrjyZ620wU0QHbndQfKkOCVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQ0VDMjUyNDcxNDMxMUYxOTQ2NEM5RTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmlKGAwQAmlKUAwQAmlKZ
AwQAmlKeAwQAmlLEAwQAmlNDAwQAmlqGAwQBmlqIAwQAmlqMMA0GCSqGSIb3DQEB
CwUAA4IBAQDXi3x9zICcllus0pkTdU/3fPaGw6aqjzywreyFwoU3tjq7qG2XBa6o
vQH2uqOHq4QBLYS0uFpvqPZTLVenYXIZ0KiIdE/8LShp7//GWUP1wHGpDOGg1PFn
ZvuIjv5OxqJqky6FHY/LeuPwBVbD3Pc5U8himshRvVUcbrMg15Ij7ycIxWV298+D
0LpqZsNJbBsXDDMFH9W6aJPIZN4YDmT2cNIkN+WYDtmNF3wJdZUnwUiEDdsiOpnm
UlveP5Yd1OE9mWIaIHzCWc69xwTN9SpcUH7zmmgS3fcKgWFQIjeK7yLa2cCjPlRk
ZkdPfedaDYOjZ/OK4uWMbrwKcsqY9/Ct
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:27 2026 by rpki-client