Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F99550899211F1803CF1D4CE1D38B0.roa
File: 11F99550899211F1803CF1D4CE1D38B0.roa (raw, json)
Hash identifier: h8hze6Tzsu3kk6bq1re2EoZU3bIAdJrlXFakxEh1kco=
Subject key identifier: 21:28:EF:6B:94:DF:EC:13:E1:32:5A:CB:4D:FC:19:9E:94:5C:D4:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F99550899211F1803CF1D4CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:06:29 +0000
ROA not before: Mon 27 Jul 2026 08:06:24 +0000
ROA not after: Mon 31 Aug 2026 08:06:24 +0000
asID: 62240
IP address blocks: 154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.83.0/24 maxlen: 24
154.194.84.0/24 maxlen: 24
154.194.85.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.194.118.0/24 maxlen: 24
154.195.102.0/24 maxlen: 24
154.196.82.0/24 maxlen: 24
154.196.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121699 (0x1db63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 08:06:24 2026 GMT
Not After : Aug 31 08:06:24 2026 GMT
Subject: CN=6a671185-dcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:8a:36:ea:11:51:32:d3:99:55:ff:19:9f:
67:30:d2:aa:0d:1d:dc:41:bc:05:20:5e:27:92:c2:
66:c8:26:9b:82:10:34:7f:de:cb:92:9c:f9:34:20:
9e:c6:5a:86:bd:71:c3:16:26:a3:68:86:30:72:6c:
18:a7:41:df:6a:bf:79:d7:9d:b1:a8:aa:75:74:c6:
c1:a1:51:82:a6:8b:b7:d2:b4:2f:b5:ea:b7:a4:76:
ef:cd:ac:8c:3e:3d:28:9d:c7:fb:bf:4a:e6:8f:cd:
c7:8c:2e:8a:ac:e6:6d:d1:87:36:e8:88:9e:75:12:
5a:58:d6:d1:52:b4:be:8a:ca:00:b0:e6:ec:86:6d:
9b:d6:c6:a4:88:e3:9d:fb:69:2f:20:a8:b7:2a:ef:
fc:3d:46:22:4f:73:b2:68:c5:eb:29:31:02:18:68:
93:79:21:05:67:c8:1a:26:88:f2:6a:ea:54:e3:eb:
fd:f9:13:d2:67:40:bd:20:fc:a0:a7:1c:9e:0e:78:
6b:68:ea:55:00:12:d6:b4:f3:5f:54:8a:98:8f:48:
7d:50:2e:8a:7e:a7:3c:8b:33:30:50:28:8d:66:20:
3c:19:42:47:80:ea:f4:3f:0a:3d:5a:df:36:8b:8d:
00:3e:9f:3a:27:6a:d1:c1:6e:f2:47:57:83:75:a9:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:EF:6B:94:DF:EC:13:E1:32:5A:CB:4D:FC:19:9E:94:5C:D4:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F99550899211F1803CF1D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.7.0/24
154.194.38.0/24
154.194.83.0-154.194.85.255
154.194.100.0/24
154.194.118.0/24
154.195.102.0/24
154.196.82.0/24
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7c:45:da:7c:41:aa:f2:71:54:91:0a:45:18:2a:f5:12:9f:
dc:7b:e6:9f:76:06:82:f7:f6:4f:a7:4d:45:61:d7:be:ee:59:
93:70:2c:1c:8e:ac:d5:c2:09:8a:3c:f1:12:d0:d9:fd:e3:e7:
88:91:7f:94:fa:ac:b4:6d:7d:22:ba:05:03:ec:56:03:c1:95:
73:63:b1:69:36:fd:1e:4b:01:dc:6b:33:45:8a:8b:5a:a1:5b:
a6:f5:dd:ff:ee:82:a0:38:db:01:f6:b2:99:d9:ea:51:33:21:
4d:19:db:0f:92:54:d3:35:b9:f3:bf:ec:53:56:0b:03:d8:2f:
ef:a1:66:21:4c:6d:b2:c9:d3:22:c6:b4:f5:8a:1a:83:57:aa:
c8:99:90:67:f5:2a:12:3f:17:1d:0c:4c:79:39:c0:6e:cc:39:
ca:58:3b:09:f7:db:67:d7:6b:10:52:4a:e9:05:34:9c:73:29:
17:09:f6:c0:ad:4c:ac:4f:b9:01:73:51:b3:a5:32:e0:08:5c:
bc:35:ff:70:56:e4:09:87:83:10:94:4b:f9:36:1c:db:d9:c1:
21:b0:fe:4d:12:f6:35:32:d9:6e:90:c8:08:ee:d6:fb:f9:3f:
77:60:ff:3a:25:3b:9e:48:c1:ff:4a:7b:0c:31:45:74:d2:fa:
f4:5f:a9:79
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIDAdtjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI3MDgwNjI0WhcNMjYwODMxMDgwNjI0WjAYMRYw
FAYDVQQDEw02YTY3MTE4NS1kY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4CGKNuoRUTLTmVX/GZ9nMNKqDR3cQbwFIF4nksJmyCabghA0f97Lkpz5
NCCexlqGvXHDFiajaIYwcmwYp0Hfar95152xqKp1dMbBoVGCpou30rQvteq3pHbv
zayMPj0oncf7v0rmj83HjC6KrOZt0Yc26IiedRJaWNbRUrS+isoAsObshm2b1sak
iOOd+2kvIKi3Ku/8PUYiT3OyaMXrKTECGGiTeSEFZ8gaJojyaupU4+v9+RPSZ0C9
IPygpxyeDnhraOpVABLWtPNfVIqYj0h9UC6Kfqc8izMwUCiNZiA8GUJHgOr0Pwo9
Wt82i40APp86J2rRwW7yR1eDdaksCwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFCEo
72uU3+wT4TJay038GZ6UXNTWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUY5OTU1MDg5OTIxMUYxODAzQ0YxRDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmsIHAwQAmsImMAwDBACa
wlMDBAGawlQDBACawmQDBACawnYDBACaw2YDBACaxFIDBACaxFYwDQYJKoZIhvcN
AQELBQADggEBAJd8Rdp8QarycVSRCkUYKvUSn9x75p92BoL39k+nTUVh177uWZNw
LByOrNXCCYo88RLQ2f3j54iRf5T6rLRtfSK6BQPsVgPBlXNjsWk2/R5LAdxrM0WK
i1qhW6b13f/ugqA42wH2spnZ6lEzIU0Z2w+SVNM1ufO/7FNWCwPYL++hZiFMbbLJ
0yLGtPWKGoNXqsiZkGf1KhI/Fx0MTHk5wG7MOcpYOwn322fXaxBSSukFNJxzKRcJ
9sCtTKxPuQFzUbOlMuAIXLw1/3BW5AmHgxCUS/k2HNvZwSGw/k0S9jUy2W6QyAju
1vv5P3dg/zolO55Iwf9KewwxRXTS+vRfqXk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:56 2026 by rpki-client