Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D40058668F1211F1893893EBCE1D38B0.roa
File: D40058668F1211F1893893EBCE1D38B0.roa (raw, json)
Hash identifier: 0osR2/7IWBSWx/2elU3JHBxVBtUnpvKCQTTFhN31jKw=
Subject key identifier: B5:40:94:DA:09:62:B9:4B:BD:5E:4A:10:4B:C0:2C:F4:79:DF:39:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D40058668F1211F1893893EBCE1D38B0.roa
Signing time: Mon 03 Aug 2026 08:10:46 +0000
ROA not before: Mon 03 Aug 2026 08:10:42 +0000
ROA not after: Thu 10 Sep 2026 08:10:42 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
154.90.34.0/23 maxlen: 24
154.90.36.0/23 maxlen: 24
154.90.38.0/23 maxlen: 24
154.90.40.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
154.95.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121966 (0x1dc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 08:10:42 2026 GMT
Not After : Sep 10 08:10:42 2026 GMT
Subject: CN=6a704d06-0763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:cf:c0:98:9e:87:da:4d:35:f3:80:06:7a:
88:a5:c7:5d:08:63:c6:72:3a:e7:a8:25:10:d2:39:
7f:25:b2:82:2b:25:3f:cc:6c:16:79:6d:ee:d0:ba:
ba:47:c8:2f:69:be:13:a0:ee:65:86:e1:04:e1:44:
21:1f:6e:61:5c:11:2f:b0:d3:c7:be:44:13:5d:4a:
61:3a:6e:7a:08:73:48:9e:c6:14:49:51:e1:49:31:
35:9d:ac:10:f4:eb:d8:41:5b:93:83:70:0e:e8:58:
65:9c:11:52:81:4a:a8:bb:72:c1:da:c2:ff:9b:bd:
55:42:d3:a5:a9:a2:b7:c0:f3:e0:97:7d:f2:07:e2:
e4:9c:de:30:d9:6c:d9:2b:75:82:54:22:af:9f:a6:
f0:5a:2e:0c:0d:77:d5:21:44:df:3f:fd:14:f9:22:
b0:24:10:f7:04:f7:39:57:04:e7:03:2d:a4:11:22:
d6:88:bd:9c:51:9c:26:7a:bd:7c:6e:2c:12:94:0d:
41:44:9a:3c:74:4c:22:b0:06:05:2c:b8:b9:e0:6f:
cf:46:b4:ef:cc:2a:ba:d8:ed:80:31:c0:9c:5d:55:
69:fe:9b:f4:bd:25:f7:dd:9b:a8:51:77:c5:e5:ca:
50:b7:cd:5c:ee:38:64:3a:ad:f3:47:0a:8c:dd:0a:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:40:94:DA:09:62:B9:4B:BD:5E:4A:10:4B:C0:2C:F4:79:DF:39:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D40058668F1211F1893893EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0-154.90.41.255
154.95.72.0/22
154.95.89.0-154.95.94.255
154.95.96.0-154.95.123.255
Signature Algorithm: sha256WithRSAEncryption
11:66:9b:84:20:99:e6:66:d3:21:30:ac:bc:b5:8c:2d:e4:bb:
64:22:88:cb:30:5c:51:16:65:11:69:61:e8:82:cc:26:1b:d6:
f9:aa:b9:ee:2e:b0:4f:a8:36:a0:37:26:69:33:69:15:56:f3:
e8:dc:c8:c1:dd:9a:0d:7c:5a:86:80:6d:f7:a8:90:d1:c2:b6:
42:69:df:54:d1:92:c1:63:df:85:51:ac:0e:10:9c:13:e7:97:
d7:1b:e8:26:24:c3:fd:da:98:d3:dd:c4:ea:d0:24:a8:7b:fd:
34:0a:b4:69:81:cb:b2:1e:19:14:79:fb:c3:d1:77:81:9b:fd:
30:a0:be:c0:cf:d1:45:ca:0e:4a:19:1b:68:66:ba:b1:6b:4b:
18:30:bf:ec:b1:a1:0f:2e:9b:c7:38:9d:eb:30:cb:a6:67:17:
3f:d7:b8:b8:bf:cb:a0:f1:ef:5f:19:c2:19:ca:16:f1:66:d3:
5f:8a:93:5b:91:c9:de:05:0a:bc:a2:72:dd:5c:75:52:c8:64:
ab:d8:04:3f:bf:3a:52:98:32:90:e6:2b:e0:3c:4f:62:17:f1:
6f:6b:1c:ff:e4:c1:2e:a6:f1:ac:c5:51:82:90:9d:8b:1f:4e:
69:f6:fb:0d:0c:35:a9:95:e4:ad:dc:76:82:a0:25:9a:fb:41:
56:17:91:28
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAdxuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODAzMDgxMDQyWhcNMjYwOTEwMDgxMDQyWjAYMRYw
FAYDVQQDEw02YTcwNGQwNi0wNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4+LPwJieh9pNNfOABnqIpcddCGPGcjrnqCUQ0jl/JbKCKyU/zGwWeW3u
0Lq6R8gvab4ToO5lhuEE4UQhH25hXBEvsNPHvkQTXUphOm56CHNInsYUSVHhSTE1
nawQ9OvYQVuTg3AO6FhlnBFSgUqou3LB2sL/m71VQtOlqaK3wPPgl33yB+LknN4w
2WzZK3WCVCKvn6bwWi4MDXfVIUTfP/0U+SKwJBD3BPc5VwTnAy2kESLWiL2cUZwm
er18biwSlA1BRJo8dEwisAYFLLi54G/PRrTvzCq62O2AMcCcXVVp/pv0vSX33Zuo
UXfF5cpQt81c7jhkOq3zRwqM3QpGBwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFLVA
lNoJYrlLvV5KEEvALPR53zmxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDAwNTg2NjhGMTIxMUYxODkzODkzRUJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAWaWiADBAGaWigDBAKa
X0gwDAMEAJpfWQMEAJpfXjAMAwQFml9gAwQCml94MA0GCSqGSIb3DQEBCwUAA4IB
AQARZpuEIJnmZtMhMKy8tYwt5LtkIojLMFxRFmURaWHogswmG9b5qrnuLrBPqDag
NyZpM2kVVvPo3MjB3ZoNfFqGgG33qJDRwrZCad9U0ZLBY9+FUawOEJwT55fXG+gm
JMP92pjT3cTq0CSoe/00CrRpgcuyHhkUefvD0XeBm/0woL7Az9FFyg5KGRtoZrqx
a0sYML/ssaEPLpvHOJ3rMMumZxc/17i4v8ug8e9fGcIZyhbxZtNfipNbkcneBQq8
onLdXHVSyGSr2AQ/vzpSmDKQ5ivgPE9iF/Fvaxz/5MEupvGsxVGCkJ2LH05p9vsN
DDWpleSt3HaCoCWa+0FWF5Eo
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:15 2026 by rpki-client