Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0677FBEA5B3911F1B1B84DA9CE1D38B0.roa
File: 0677FBEA5B3911F1B1B84DA9CE1D38B0.roa (raw, json)
Hash identifier: F7i3YcXuQhckACM/+36+C7OAgh67BtedoqzEmsCkDjg=
Subject key identifier: C8:48:DE:92:D5:14:6F:97:7C:3E:D6:50:4C:E5:76:CF:0A:4D:2C:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D050
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0677FBEA5B3911F1B1B84DA9CE1D38B0.roa
Signing time: Fri 29 May 2026 08:33:11 +0000
ROA not before: Fri 29 May 2026 08:33:06 +0000
ROA not after: Thu 02 Jul 2026 08:33:06 +0000
asID: 62240
IP address blocks: 154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118864 (0x1d050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 08:33:06 2026 GMT
Not After : Jul 2 08:33:06 2026 GMT
Subject: CN=6a194f47-4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:72:a6:47:a4:f3:70:6b:91:7c:15:e0:36:
99:2c:97:00:85:27:de:a6:e9:1f:75:eb:ce:04:b7:
42:45:d2:26:a3:80:94:05:5e:d9:2b:60:87:31:be:
8b:38:50:f0:8d:b8:b8:92:de:1a:93:3d:4e:3a:2e:
e3:59:be:a2:8c:23:33:88:62:94:db:1b:5b:cd:f2:
8a:66:59:c0:39:f7:66:ed:bb:08:02:63:2e:0e:a5:
2f:3a:d6:cf:c6:3b:53:3d:42:16:04:ab:19:ef:88:
b1:bc:86:98:19:4e:35:ec:28:f4:e9:6a:ff:b2:80:
f3:e8:47:d4:83:b2:b2:43:d1:a2:0f:a0:f9:ce:71:
4b:82:07:70:19:0d:65:92:2e:97:3c:48:f7:34:ee:
ad:a1:e3:e7:3c:16:01:d2:c4:c6:c6:5c:91:73:98:
20:07:a2:d8:4a:80:2b:e1:be:23:fc:c0:4b:27:ba:
db:8e:95:75:19:23:0c:58:2c:65:3d:79:26:e6:2d:
42:35:38:69:f6:95:f3:7a:91:c9:f7:e7:1a:d0:99:
6b:c2:d7:67:9d:7e:27:6e:ee:57:38:2f:e7:21:82:
26:de:52:fc:b6:ac:08:9c:ee:9b:fc:f0:3d:3f:d0:
98:d4:82:f2:49:0e:b4:52:36:25:d5:a8:f8:64:f7:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:DE:92:D5:14:6F:97:7C:3E:D6:50:4C:E5:76:CF:0A:4D:2C:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0677FBEA5B3911F1B1B84DA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.212.0-154.223.221.255
Signature Algorithm: sha256WithRSAEncryption
9f:cc:51:40:b9:bf:38:cd:e7:08:47:21:c6:a6:49:87:f1:66:
0a:c9:f8:28:71:4f:f6:e1:9b:76:02:d8:a8:50:83:76:39:b8:
8f:c6:91:48:b7:6f:07:0a:02:5d:b1:a5:54:7b:78:3d:17:7b:
a9:7b:4a:36:bb:12:6c:41:8f:aa:d1:45:be:6b:84:13:4f:6f:
14:ff:23:2c:7e:ac:cf:e2:0b:1f:ab:ee:ee:9f:0e:c2:46:78:
05:03:a5:ef:45:76:7c:69:91:e9:e8:84:1c:46:0e:0e:0a:70:
c5:77:fb:5c:9c:13:5b:ff:2d:7d:ae:88:4b:30:08:3f:18:ee:
b1:82:72:85:d0:5c:73:40:9c:6f:ee:54:87:03:e8:43:2f:97:
25:aa:fd:70:8e:e5:5f:e6:02:24:2b:40:00:ec:1d:51:67:b8:
1d:bc:96:7a:89:7d:52:f6:e7:21:f3:c5:a4:54:28:22:05:71:
30:2a:43:61:7c:34:83:3d:ae:8a:cc:ce:38:e1:6f:28:dc:e8:
c0:64:7c:85:aa:33:f0:94:66:c6:ef:fd:82:94:4b:ca:9a:2d:
5b:75:fe:60:d3:5b:c7:bd:30:cf:ac:a6:86:2a:29:fa:82:c6:
66:1e:1d:cc:c2:81:2f:4f:0c:a3:32:fa:70:02:4b:28:ef:25:
08:17:97:8c
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdBQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDgzMzA2WhcNMjYwNzAyMDgzMzA2WjAYMRYw
FAYDVQQDEw02YTE5NGY0Ny00MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo9Jypkek83BrkXwV4DaZLJcAhSfepukfdevOBLdCRdImo4CUBV7ZK2CH
Mb6LOFDwjbi4kt4akz1OOi7jWb6ijCMziGKU2xtbzfKKZlnAOfdm7bsIAmMuDqUv
OtbPxjtTPUIWBKsZ74ixvIaYGU417Cj06Wr/soDz6EfUg7KyQ9GiD6D5znFLggdw
GQ1lki6XPEj3NO6toePnPBYB0sTGxlyRc5ggB6LYSoAr4b4j/MBLJ7rbjpV1GSMM
WCxlPXkm5i1CNThp9pXzepHJ9+ca0JlrwtdnnX4nbu5XOC/nIYIm3lL8tqwInO6b
/PA9P9CY1ILySQ60UjYl1aj4ZPe+UQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFMhI
3pLVFG+XfD7WUEzlds8KTSyEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNjc3RkJFQTVCMzkxMUYxQjFCODREQTlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKa39QDBAGa39wwDQYJ
KoZIhvcNAQELBQADggEBAJ/MUUC5vzjN5whHIcamSYfxZgrJ+ChxT/bhm3YC2KhQ
g3Y5uI/GkUi3bwcKAl2xpVR7eD0Xe6l7Sja7EmxBj6rRRb5rhBNPbxT/Iyx+rM/i
Cx+r7u6fDsJGeAUDpe9FdnxpkenohBxGDg4KcMV3+1ycE1v/LX2uiEswCD8Y7rGC
coXQXHNAnG/uVIcD6EMvlyWq/XCO5V/mAiQrQADsHVFnuB28lnqJfVL25yHzxaRU
KCIFcTAqQ2F8NIM9rorMzjjhbyjc6MBkfIWqM/CUZsbv/YKUS8qaLVt1/mDTW8e9
MM+spoYqKfqCxmYeHczCgS9PDKMy+nACSyjvJQgXl4w=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:10 2026 by rpki-client