Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D867C9F67D8E11F18A103FCBCE1D38B0.roa
File: D867C9F67D8E11F18A103FCBCE1D38B0.roa (raw, json)
Hash identifier: hnlfTWx/YIFdf7sttb3/H6/0bTXp9Ivfo0lpqmZmF/k=
Subject key identifier: 33:AA:41:90:FD:99:52:89:29:53:19:9F:AD:8E:5B:C3:3D:B1:55:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D85F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D867C9F67D8E11F18A103FCBCE1D38B0.roa
Signing time: Sun 12 Jul 2026 01:13:10 +0000
ROA not before: Sun 12 Jul 2026 01:13:04 +0000
ROA not after: Tue 10 Jul 2029 01:13:04 +0000
asID: 17561
IP address blocks: 154.198.228.0/24 maxlen: 24
154.198.229.0/24 maxlen: 24
154.198.230.0/24 maxlen: 24
154.198.231.0/24 maxlen: 24
154.198.232.0/24 maxlen: 24
154.198.233.0/24 maxlen: 24
154.198.234.0/24 maxlen: 24
154.198.235.0/24 maxlen: 24
154.198.236.0/24 maxlen: 24
154.198.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120927 (0x1d85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 01:13:04 2026 GMT
Not After : Jul 10 01:13:04 2029 GMT
Subject: CN=6a52ea26-8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:da:0c:d6:16:04:90:64:03:00:a5:18:7a:
7e:8e:95:84:29:79:e0:d6:d8:9f:78:eb:6d:b0:12:
b6:d5:08:35:e9:f9:99:18:47:d0:c9:c9:40:61:c1:
30:4f:9b:1e:e4:e3:70:d3:b4:e6:00:4e:5e:d8:40:
84:80:94:77:d4:38:42:5b:66:9e:45:fd:83:98:67:
c2:8d:22:a7:31:33:bd:6f:cf:5e:b9:54:98:ed:de:
87:63:1f:b5:eb:a6:0d:d0:10:03:95:ed:0f:a4:5a:
b6:4f:4c:68:05:54:0c:75:d0:01:19:03:c0:ff:be:
a6:7f:85:42:63:e6:ce:18:78:50:31:aa:cd:99:ab:
5d:af:c4:8a:d4:d6:dc:65:d9:c3:5a:de:97:b2:e8:
b8:63:91:15:36:91:0a:93:de:dc:ad:86:1f:4f:c5:
cc:93:76:9d:5a:20:49:eb:2b:b6:5c:77:8a:b9:be:
67:76:83:16:b2:6b:8b:ba:a1:c3:b7:c2:64:e5:65:
cc:25:40:1e:93:f6:a0:12:75:9c:80:e7:e9:96:69:
89:2d:50:2e:20:ac:ea:6e:6a:ab:30:03:3d:4e:4e:
63:97:d7:45:47:5b:bb:ef:43:eb:4d:b1:c3:ad:0e:
bc:76:43:c2:64:20:51:8a:d4:6e:37:81:03:6e:33:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:41:90:FD:99:52:89:29:53:19:9F:AD:8E:5B:C3:3D:B1:55:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D867C9F67D8E11F18A103FCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.228.0-154.198.237.255
Signature Algorithm: sha256WithRSAEncryption
7b:13:38:6c:f8:d1:df:da:14:48:93:18:1f:52:24:2b:04:5d:
8c:db:a0:2b:37:07:01:16:25:0a:3f:6a:ca:61:ec:6f:f3:d6:
03:27:96:15:ae:0d:d7:ac:3b:a1:6b:9c:16:06:63:63:57:56:
0e:fe:0b:37:8b:ec:ff:f6:24:16:94:eb:1b:e4:3d:08:c1:c1:
fb:6b:c9:1c:9d:9d:7b:29:8b:e4:a9:e8:45:ff:59:dc:b6:38:
eb:b6:7e:a1:ce:66:9a:96:68:b7:7e:1f:b1:8f:c0:d9:61:0b:
11:97:53:36:37:7a:6e:97:09:b7:87:19:aa:fa:ba:59:d6:74:
61:61:cd:c7:6c:bd:39:8c:37:b5:f5:7e:93:46:f8:f0:17:b0:
36:06:31:24:f1:03:5d:67:74:89:04:11:75:a1:c3:b2:8f:de:
20:f5:ae:68:d3:db:69:c4:ef:09:56:dc:d1:a5:a9:e4:92:b5:
5d:24:d3:0e:72:06:f6:ba:ee:d5:16:04:2a:ca:18:2b:47:50:
50:b1:f8:a1:59:c3:6a:2d:f3:1f:aa:18:bf:36:55:af:cc:93:
74:2c:47:22:5f:ed:42:3d:f4:b3:69:2b:4a:8c:34:29:a7:3f:
e6:ab:fb:f2:6a:77:69:0c:04:75:fe:fc:d5:68:85:3c:bd:63:
ed:76:bf:2a
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdhfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEyMDExMzA0WhcNMjkwNzEwMDExMzA0WjAYMRYw
FAYDVQQDEw02YTUyZWEyNi04MjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzMzaDNYWBJBkAwClGHp+jpWEKXng1tifeOttsBK21Qg16fmZGEfQyclA
YcEwT5se5ONw07TmAE5e2ECEgJR31DhCW2aeRf2DmGfCjSKnMTO9b89euVSY7d6H
Yx+166YN0BADle0PpFq2T0xoBVQMddABGQPA/76mf4VCY+bOGHhQMarNmatdr8SK
1NbcZdnDWt6Xsui4Y5EVNpEKk97crYYfT8XMk3adWiBJ6yu2XHeKub5ndoMWsmuL
uqHDt8Jk5WXMJUAek/agEnWcgOfplmmJLVAuIKzqbmqrMAM9Tk5jl9dFR1u770Pr
TbHDrQ68dkPCZCBRitRuN4EDbjNmKQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDOq
QZD9mVKJKVMZn62OW8M9sVUIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EODY3QzlGNjdEOEUxMUYxOEExMDNGQ0JDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaxuQDBAGaxuwwDQYJ
KoZIhvcNAQELBQADggEBAHsTOGz40d/aFEiTGB9SJCsEXYzboCs3BwEWJQo/asph
7G/z1gMnlhWuDdesO6FrnBYGY2NXVg7+CzeL7P/2JBaU6xvkPQjBwftryRydnXsp
i+Sp6EX/Wdy2OOu2fqHOZpqWaLd+H7GPwNlhCxGXUzY3em6XCbeHGar6ulnWdGFh
zcdsvTmMN7X1fpNG+PAXsDYGMSTxA11ndIkEEXWhw7KP3iD1rmjT22nE7wlW3NGl
qeSStV0k0w5yBva67tUWBCrKGCtHUFCx+KFZw2ot8x+qGL82Va/Mk3QsRyJf7UI9
9LNpK0qMNCmnP+ar+/Jqd2kMBHX+/NVohTy9Y+12vyo=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client