Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FA0CFA65BB111F192453AF1CE1D38B0.roa
File: 2FA0CFA65BB111F192453AF1CE1D38B0.roa (raw, json)
Hash identifier: oAwv87fLNNiRA+F3VTvbvo7hznCLy/n7HbmQf/AqdXM=
Subject key identifier: 43:DD:63:2A:52:AB:76:34:FE:9E:B8:C2:FC:68:0C:9D:3F:CD:BD:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FA0CFA65BB111F192453AF1CE1D38B0.roa
Signing time: Fri 29 May 2026 22:53:19 +0000
ROA not before: Sat 30 May 2026 22:53:15 +0000
ROA not after: Wed 01 Jul 2026 22:53:15 +0000
asID: 62240
IP address blocks: 154.194.76.0/24 maxlen: 24
154.194.77.0/24 maxlen: 24
154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
154.195.0.0/24 maxlen: 24
154.195.1.0/24 maxlen: 24
154.195.100.0/24 maxlen: 24
154.195.123.0/24 maxlen: 24
154.195.125.0/24 maxlen: 24
154.195.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118957 (0x1d0ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 22:53:15 2026 GMT
Not After : Jul 1 22:53:15 2026 GMT
Subject: CN=6a1a18df-a84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:ea:40:3a:07:b4:b5:f0:6e:cd:a0:93:06:
d9:49:a0:95:9c:2d:99:52:fc:78:08:13:f7:c2:09:
e4:dc:8d:e2:33:4f:58:54:48:d1:a5:f9:f7:82:7d:
dd:18:74:b9:ca:8c:8c:13:96:59:a6:e9:3e:52:a2:
8d:14:7f:38:b5:67:bd:25:01:2e:5d:eb:ce:b8:ee:
d7:04:43:6c:3d:d5:e5:5c:15:f8:07:f2:89:0e:5c:
14:0c:dc:08:8e:63:73:5f:02:28:0f:45:79:d3:4c:
cb:e3:09:a6:6a:7b:42:fe:c0:3b:62:22:ee:c4:fa:
67:83:b0:25:57:5e:29:64:2c:9b:d8:18:36:ff:9e:
5f:3d:25:a0:a8:f6:98:89:47:0e:b4:51:4c:38:69:
64:29:e5:9e:cb:c7:b3:51:10:77:db:2b:7a:db:01:
2b:d5:48:23:09:34:56:aa:fa:90:c0:26:b7:2a:b2:
5b:01:bc:8f:5f:96:70:5f:92:d8:3c:ec:5d:1d:82:
12:1e:ca:cd:63:cd:c7:58:aa:2c:a4:ad:0e:92:83:
78:0a:44:ae:ff:c9:ef:ea:0c:61:ff:d2:72:21:5f:
13:1a:cf:f1:d5:cd:9c:4e:e8:86:d7:ac:79:6a:bb:
1b:45:a4:09:0b:c3:da:96:18:97:c7:92:e6:15:0b:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:63:2A:52:AB:76:34:FE:9E:B8:C2:FC:68:0C:9D:3F:CD:BD:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FA0CFA65BB111F192453AF1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.76.0/23
154.194.90.0/23
154.195.0.0/23
154.195.100.0/24
154.195.123.0/24
154.195.125.0-154.195.126.255
Signature Algorithm: sha256WithRSAEncryption
69:f8:1c:53:9b:44:43:2d:99:3c:76:dd:8d:61:6c:b1:b9:7a:
b6:09:58:5b:13:1b:72:31:59:e8:78:15:fd:03:e1:4c:21:ab:
91:65:7d:c8:9f:a3:1c:08:f1:78:1c:8c:8d:99:19:69:bf:7e:
b7:77:6b:ce:c9:4a:29:8c:e3:e6:b5:13:a9:49:f4:b2:5f:5a:
29:64:52:7d:f1:7c:03:bb:0e:45:aa:9a:f8:81:dd:9c:f2:fd:
df:fb:bd:3d:83:0a:19:34:40:40:b0:a1:7a:b2:7b:3b:c3:e3:
67:70:2a:14:67:9d:71:17:d1:ad:5e:96:52:ab:b4:34:94:1e:
40:d6:3a:ea:83:8e:88:60:e8:c2:7c:3a:5a:45:c4:dd:39:51:
5b:09:99:06:1e:41:1a:4f:88:c7:92:77:94:84:94:0b:68:4a:
15:54:7f:1d:99:8a:71:b6:ec:ec:75:9c:c5:9e:7c:e9:d8:86:
22:8c:63:69:f5:91:e6:43:4f:a9:48:a1:4b:fa:e9:40:94:df:
4e:6f:bd:0a:f2:ca:a1:dc:0a:3f:89:27:8f:6e:21:47:e1:ef:
49:f7:f5:7f:32:47:98:60:7d:fa:7c:af:90:92:6f:33:27:f2:
66:b8:53:68:76:59:0e:53:bd:a7:5c:83:0c:76:96:b9:ee:80:
9a:0a:b1:48
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAdCtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTMwMjI1MzE1WhcNMjYwNzAxMjI1MzE1WjAYMRYw
FAYDVQQDEw02YTFhMThkZi1hODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsfXqQDoHtLXwbs2gkwbZSaCVnC2ZUvx4CBP3wgnk3I3iM09YVEjRpfn3
gn3dGHS5yoyME5ZZpuk+UqKNFH84tWe9JQEuXevOuO7XBENsPdXlXBX4B/KJDlwU
DNwIjmNzXwIoD0V500zL4wmmantC/sA7YiLuxPpng7AlV14pZCyb2Bg2/55fPSWg
qPaYiUcOtFFMOGlkKeWey8ezURB32yt62wEr1UgjCTRWqvqQwCa3KrJbAbyPX5Zw
X5LYPOxdHYISHsrNY83HWKospK0OkoN4CkSu/8nv6gxh/9JyIV8TGs/x1c2cTuiG
16x5arsbRaQJC8PalhiXx5LmFQtV2wIDAQABo4ICyzCCAscwHQYDVR0OBBYEFEPd
YypSq3Y0/p64wvxoDJ0/zb2KMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRkEwQ0ZBNjVCQjExMUYxOTI0NTNBRjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBmsJMAwQBmsJaAwQBmsMA
AwQAmsNkAwQAmsN7MAwDBACaw30DBACaw34wDQYJKoZIhvcNAQELBQADggEBAGn4
HFObREMtmTx23Y1hbLG5erYJWFsTG3IxWeh4Ff0D4Uwhq5FlfcifoxwI8XgcjI2Z
GWm/frd3a87JSimM4+a1E6lJ9LJfWilkUn3xfAO7DkWqmviB3Zzy/d/7vT2DChk0
QECwoXqyezvD42dwKhRnnXEX0a1ellKrtDSUHkDWOuqDjohg6MJ8OlpFxN05UVsJ
mQYeQRpPiMeSd5SElAtoShVUfx2ZinG27Ox1nMWefOnYhiKMY2n1keZDT6lIoUv6
6UCU305vvQryyqHcCj+JJ49uIUfh70n39X8yR5hgffp8r5CSbzMn8ma4U2h2WQ5T
vadcgwx2lrnugJoKsUg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:14 2026 by rpki-client