Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525C700A5BB011F1867C9CE9CE1D38B0.roa
File: 525C700A5BB011F1867C9CE9CE1D38B0.roa (raw, json)
Hash identifier: O2C8ur4bHDCHQ/zXOWD68wA0EaNuSzWamgVjNPwQwV4=
Subject key identifier: 98:94:B3:83:87:07:85:79:48:30:08:10:4E:AD:09:74:6D:59:F8:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525C700A5BB011F1867C9CE9CE1D38B0.roa
Signing time: Fri 29 May 2026 22:47:08 +0000
ROA not before: Sat 30 May 2026 22:47:04 +0000
ROA not after: Wed 01 Jul 2026 22:47:04 +0000
asID: 62240
IP address blocks: 154.194.70.0/24 maxlen: 24
154.194.71.0/24 maxlen: 24
154.194.75.0/24 maxlen: 24
154.194.86.0/24 maxlen: 24
154.194.87.0/24 maxlen: 24
154.194.88.0/24 maxlen: 24
154.195.121.0/24 maxlen: 24
154.195.122.0/24 maxlen: 24
154.196.84.0/24 maxlen: 24
154.196.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118955 (0x1d0ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 22:47:04 2026 GMT
Not After : Jul 1 22:47:04 2026 GMT
Subject: CN=6a1a176c-b347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:d2:55:48:4c:00:81:80:32:83:74:fa:ce:
fb:46:96:4b:e2:73:96:8c:d0:12:39:06:34:fd:96:
d2:74:ec:c0:94:31:d5:1a:e7:c0:ac:db:f3:d3:88:
2f:50:69:d1:15:4b:ba:eb:ef:a0:d3:ae:3b:f3:7c:
91:0d:33:2f:d3:67:92:81:7f:bc:c2:47:ba:fb:f5:
a2:8e:10:98:dc:ee:66:04:f1:52:ac:95:ab:0b:22:
31:97:fd:34:4a:88:cb:2f:02:2e:70:64:a6:aa:60:
ca:11:e3:ce:55:06:fb:ce:b9:fd:44:3d:a6:b8:34:
d0:52:12:b3:4e:1c:3c:a3:9f:e3:ba:38:f0:a5:11:
72:f6:07:ae:eb:22:6f:b9:df:96:71:f3:cf:51:16:
c5:76:94:f7:a3:c6:15:d9:e0:cb:52:8b:34:ed:46:
63:f0:48:49:e7:ef:ce:fe:d4:f9:2f:de:88:86:d8:
ca:f2:2d:25:a3:a2:30:30:09:3a:a6:08:04:6c:b6:
a8:76:40:fd:39:52:45:d4:66:a3:8d:c1:37:06:11:
5f:7f:7c:90:43:a0:ba:dd:47:9f:77:9d:46:8a:24:
06:6c:6e:67:3c:0b:09:35:f1:b9:17:40:9f:0d:57:
2f:6e:9a:ad:20:6e:6b:05:45:43:63:f7:b0:bc:6c:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:94:B3:83:87:07:85:79:48:30:08:10:4E:AD:09:74:6D:59:F8:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525C700A5BB011F1867C9CE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.70.0/23
154.194.75.0/24
154.194.86.0-154.194.88.255
154.195.121.0-154.195.122.255
154.196.84.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:1e:30:9c:64:90:39:2e:99:a3:f4:34:fb:fd:23:c8:4c:64:
ff:bc:f2:5e:74:d3:c4:2b:40:f8:97:5c:a5:74:05:88:06:76:
30:52:7e:1c:f7:b8:66:b3:69:3b:a9:49:d0:de:0f:ed:44:d3:
ee:f3:3e:0a:15:57:5a:67:00:f1:79:ac:75:87:50:eb:5c:6c:
ac:40:16:35:4b:4b:1a:76:4d:b5:7c:5f:63:f9:4b:63:16:9d:
0b:dd:31:64:a4:07:51:98:b6:6e:cd:f0:b9:1d:00:43:8b:cb:
52:6c:63:e2:3c:d4:8b:52:a7:38:60:eb:d5:62:55:56:dc:89:
9f:cd:3b:61:9c:f1:76:da:35:c1:ff:dd:80:c1:f6:86:c2:85:
13:10:32:ac:30:42:30:51:c4:c8:29:72:91:0a:5e:b9:6e:a4:
35:60:81:91:09:24:74:ec:ce:18:93:76:d6:ea:90:16:df:7a:
61:29:38:9d:87:ec:ec:2d:74:e1:b9:a0:c5:5d:66:c2:b9:61:
92:e0:63:0f:b3:fb:52:57:8e:0d:5f:2d:f2:58:23:ed:b1:05:
90:28:2b:3f:c1:64:49:44:ab:8e:9a:18:48:4b:5a:b8:56:ea:
b1:b5:8b:87:eb:9f:fd:23:1f:82:3c:0d:b2:00:d1:3d:ba:45:
89:a4:5f:40
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAdCrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTMwMjI0NzA0WhcNMjYwNzAxMjI0NzA0WjAYMRYw
FAYDVQQDEw02YTFhMTc2Yy1iMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxgHSVUhMAIGAMoN0+s77RpZL4nOWjNASOQY0/ZbSdOzAlDHVGufArNvz
04gvUGnRFUu66++g064783yRDTMv02eSgX+8wke6+/WijhCY3O5mBPFSrJWrCyIx
l/00SojLLwIucGSmqmDKEePOVQb7zrn9RD2muDTQUhKzThw8o5/jujjwpRFy9geu
6yJvud+WcfPPURbFdpT3o8YV2eDLUos07UZj8EhJ5+/O/tT5L96IhtjK8i0lo6Iw
MAk6pggEbLaodkD9OVJF1GajjcE3BhFff3yQQ6C63Uefd51GiiQGbG5nPAsJNfG5
F0CfDVcvbpqtIG5rBUVDY/ewvGz2HQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFJiU
s4OHB4V5SDAIEE6tCXRtWfiWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MjVDNzAwQTVCQjAxMUYxODY3QzlDRTlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBmsJGAwQAmsJLMAwDBAGa
wlYDBACawlgwDAMEAJrDeQMEAJrDegMEAZrEVDANBgkqhkiG9w0BAQsFAAOCAQEA
ax4wnGSQOS6Zo/Q0+/0jyExk/7zyXnTTxCtA+JdcpXQFiAZ2MFJ+HPe4ZrNpO6lJ
0N4P7UTT7vM+ChVXWmcA8XmsdYdQ61xsrEAWNUtLGnZNtXxfY/lLYxadC90xZKQH
UZi2bs3wuR0AQ4vLUmxj4jzUi1KnOGDr1WJVVtyJn807YZzxdto1wf/dgMH2hsKF
ExAyrDBCMFHEyClykQpeuW6kNWCBkQkkdOzOGJN21uqQFt96YSk4nYfs7C104bmg
xV1mwrlhkuBjD7P7UleODV8t8lgj7bEFkCgrP8FkSUSrjpoYSEtauFbqsbWLh+uf
/SMfgjwNsgDRPbpFiaRfQA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:38 2026 by rpki-client