Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27E846785B3811F187C62CA1CE1D38B0.roa
File: 27E846785B3811F187C62CA1CE1D38B0.roa (raw, json)
Hash identifier: 3pVNLMXzOfSL2DRvKKtFWsi0dJhVjuxaTBS66qQZtaI=
Subject key identifier: 5D:99:7B:37:25:76:7A:69:A6:65:E0:13:0D:BD:6C:5D:99:E6:A2:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D04E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27E846785B3811F187C62CA1CE1D38B0.roa
Signing time: Fri 29 May 2026 08:26:57 +0000
ROA not before: Fri 29 May 2026 08:26:53 +0000
ROA not after: Thu 02 Jul 2026 08:26:53 +0000
asID: 62240
IP address blocks: 154.195.96.0/24 maxlen: 24
154.195.188.0/24 maxlen: 24
154.195.189.0/24 maxlen: 24
154.195.190.0/24 maxlen: 24
154.195.191.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118862 (0x1d04e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 08:26:53 2026 GMT
Not After : Jul 2 08:26:53 2026 GMT
Subject: CN=6a194dd1-1634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:ba:12:17:6d:5b:ae:d3:1e:9d:98:25:b2:
b7:5f:bb:6b:a6:d4:8f:94:fd:64:5f:57:09:0d:fe:
b2:52:13:9a:44:b1:8f:a8:c3:93:b1:0c:51:7c:91:
4c:a1:c3:7b:f3:8f:af:76:95:8e:c9:cf:4e:37:db:
9d:99:18:7b:00:42:07:49:6a:21:32:98:c4:e3:c8:
b4:17:d1:9d:d9:10:8b:f4:bb:9c:49:ca:89:7e:81:
e1:87:c0:03:37:6f:3d:d1:33:bd:3b:79:6a:ad:d1:
a2:91:32:fa:84:9b:ec:e5:9b:91:0a:91:6b:67:a1:
ec:ac:52:4a:c7:d3:52:e5:d5:dd:a7:20:f7:ba:de:
f0:85:58:25:07:8a:bc:5e:4b:a3:44:11:75:2e:b8:
1e:07:9c:52:df:9e:e0:40:9f:55:7b:ef:cd:63:13:
39:eb:14:e0:52:a4:12:7c:01:66:da:34:37:fc:49:
11:f6:7f:71:3e:86:f9:a3:74:2a:e2:2b:8d:9e:fb:
05:5c:c2:53:7d:6d:71:38:ed:75:e1:f2:e1:4d:a8:
bd:e4:c4:17:d7:f1:bc:94:0c:ff:b4:6d:90:28:93:
81:d0:b1:9f:20:5a:47:b4:3b:90:f7:d1:1d:2b:40:
d0:e2:79:90:c3:12:59:26:b2:35:3e:02:d9:e2:49:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:99:7B:37:25:76:7A:69:A6:65:E0:13:0D:BD:6C:5D:99:E6:A2:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27E846785B3811F187C62CA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.96.0/24
154.195.188.0/22
154.196.33.0/24
154.223.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:77:89:78:93:25:02:2c:db:2f:64:aa:69:f9:55:77:bc:ef:
f0:69:51:8e:c4:b5:63:72:46:b3:7a:c0:da:7e:9c:2b:35:6d:
f5:8d:29:bd:bf:3f:a5:c3:6b:ae:bf:b9:4b:28:2c:0a:9f:c3:
53:c0:c8:d2:30:01:7c:0d:35:38:4d:72:fb:08:f6:b6:53:a3:
e3:40:d4:74:c1:08:df:06:55:89:a7:3e:02:78:56:c0:07:b1:
fc:2d:1e:95:80:88:2e:f6:53:9f:ee:67:87:96:1f:2c:4b:aa:
97:24:5d:5b:ce:0b:04:c9:6f:49:ee:c4:c6:0e:48:08:30:47:
8a:5c:a2:89:a5:62:b9:d3:15:c6:cb:ae:d4:b8:c6:da:cc:0f:
18:6e:91:06:60:c8:e8:69:96:bf:61:5c:57:d1:1a:b1:4b:11:
58:93:a2:2e:39:df:97:37:9b:ec:5c:68:ad:e2:93:59:27:ed:
e7:a5:63:4f:44:96:00:c7:ee:e6:e4:89:9d:b0:b5:e1:21:99:
5f:15:c0:02:69:92:75:64:b7:49:b0:a2:7b:64:b1:20:8f:bc:
c7:d7:57:0c:62:70:cd:5e:92:b7:78:93:16:8e:cb:e3:ee:73:
48:c9:80:4c:23:1e:5e:e6:56:71:3e:02:82:ca:98:80:8f:d8:
31:0d:06:9c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAdBOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDgyNjUzWhcNMjYwNzAyMDgyNjUzWjAYMRYw
FAYDVQQDEw02YTE5NGRkMS0xNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3Ei6EhdtW67THp2YJbK3X7trptSPlP1kX1cJDf6yUhOaRLGPqMOTsQxR
fJFMocN784+vdpWOyc9ON9udmRh7AEIHSWohMpjE48i0F9Gd2RCL9LucScqJfoHh
h8ADN2890TO9O3lqrdGikTL6hJvs5ZuRCpFrZ6HsrFJKx9NS5dXdpyD3ut7whVgl
B4q8XkujRBF1LrgeB5xS357gQJ9Ve+/NYxM56xTgUqQSfAFm2jQ3/EkR9n9xPob5
o3Qq4iuNnvsFXMJTfW1xOO114fLhTai95MQX1/G8lAz/tG2QKJOB0LGfIFpHtDuQ
99EdK0DQ4nmQwxJZJrI1PgLZ4klE0QIDAQABo4ICtzCCArMwHQYDVR0OBBYEFF2Z
ezcldnpppmXgEw29bF2Z5qJaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yN0U4NDY3ODVCMzgxMUYxODdDNjJDQTFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmsNgAwQCmsO8AwQAmsQh
AwQCmt/QMA0GCSqGSIb3DQEBCwUAA4IBAQBMd4l4kyUCLNsvZKpp+VV3vO/waVGO
xLVjckazesDafpwrNW31jSm9vz+lw2uuv7lLKCwKn8NTwMjSMAF8DTU4TXL7CPa2
U6PjQNR0wQjfBlWJpz4CeFbAB7H8LR6VgIgu9lOf7meHlh8sS6qXJF1bzgsEyW9J
7sTGDkgIMEeKXKKJpWK50xXGy67UuMbazA8YbpEGYMjoaZa/YVxX0RqxSxFYk6Iu
Od+XN5vsXGit4pNZJ+3npWNPRJYAx+7m5ImdsLXhIZlfFcACaZJ1ZLdJsKJ7ZLEg
j7zH11cMYnDNXpK3eJMWjsvj7nNIyYBMIx5e5lZxPgKCypiAj9gxDQac
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:46 2026 by rpki-client