Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58520A0C899011F19E6878CACE1D38B0.roa
File: 58520A0C899011F19E6878CACE1D38B0.roa (raw, json)
Hash identifier: oLoDRqlhIqe+kGkxzlHyT6++xbxtJ5fDUlVyOL0A8HA=
Subject key identifier: 30:F5:EC:E2:DE:1A:14:72:B7:20:CC:A9:64:C3:ED:8A:30:C2:B9:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58520A0C899011F19E6878CACE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:54:08 +0000
ROA not before: Mon 27 Jul 2026 07:54:04 +0000
ROA not after: Mon 31 Aug 2026 07:54:04 +0000
asID: 62240
IP address blocks: 154.195.28.0/24 maxlen: 24
154.195.29.0/24 maxlen: 24
154.195.30.0/24 maxlen: 24
154.195.31.0/24 maxlen: 24
154.195.182.0/24 maxlen: 24
154.195.183.0/24 maxlen: 24
154.195.184.0/24 maxlen: 24
154.195.185.0/24 maxlen: 24
154.195.186.0/24 maxlen: 24
154.195.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121695 (0x1db5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:54:04 2026 GMT
Not After : Aug 31 07:54:04 2026 GMT
Subject: CN=6a670ea0-bc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:93:db:d9:0b:38:ca:ad:b0:d2:8b:57:97:
b8:a4:28:10:9a:9d:cc:a5:a6:81:28:c6:00:e2:c3:
a7:b0:d2:e3:2b:4a:0e:d6:5b:46:f1:77:55:b9:3e:
fd:47:1c:db:0c:79:f7:6c:79:d4:00:c7:89:a7:ba:
30:f2:00:c9:42:a2:4b:0a:a5:e5:a6:6c:06:7f:b8:
5c:57:8e:98:49:b8:75:12:85:40:28:c7:3d:cf:74:
02:e7:2b:ce:90:de:e5:98:a6:12:64:18:94:7c:44:
11:74:88:6f:14:ff:47:83:bc:e2:db:fc:03:90:10:
c5:95:95:b0:82:ef:9b:a0:b8:f1:09:c7:be:4c:a3:
6a:2b:40:33:6b:5d:8b:a2:d8:26:ae:f4:89:0c:71:
3e:92:5b:b7:6c:b3:05:30:6c:ec:ab:78:2c:f8:3e:
3a:5d:93:8e:05:6c:d7:6c:d8:97:a0:5a:9a:91:9d:
81:21:c4:95:91:d5:af:6c:42:b2:f2:7f:20:0a:96:
24:47:a6:ed:78:11:61:8f:d7:b0:68:62:d8:46:f9:
50:2a:88:64:81:1d:84:2e:15:5d:37:17:e8:86:21:
17:de:42:18:e8:8a:61:24:09:82:17:13:52:aa:d7:
96:eb:35:31:8e:c8:56:d9:30:04:57:16:ab:ea:13:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F5:EC:E2:DE:1A:14:72:B7:20:CC:A9:64:C3:ED:8A:30:C2:B9:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58520A0C899011F19E6878CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.28.0/22
154.195.182.0-154.195.187.255
Signature Algorithm: sha256WithRSAEncryption
4d:98:64:5d:01:d3:07:6e:db:f0:89:4a:10:49:c7:57:c2:ce:
67:79:7b:f3:dd:c3:1a:d0:85:2b:da:45:db:22:08:35:05:f4:
6e:ef:a8:97:10:37:d2:65:14:7f:8a:d5:f7:4f:94:d9:7e:57:
69:0a:86:a0:2d:a1:6c:7c:e1:10:36:8b:94:27:68:8a:e2:88:
3c:91:e4:7f:ad:1b:3a:4d:5d:d5:35:ed:1e:18:77:e6:c5:a4:
ee:29:89:c3:83:37:d7:42:ef:d4:bc:86:7e:d9:37:7c:dc:5e:
a7:d6:c1:cd:5b:26:de:06:4f:75:89:6d:70:d8:13:9f:e1:1d:
de:05:bf:61:e7:0f:cf:02:73:fc:f7:fb:2a:4e:06:c6:7f:48:
29:cb:6b:c0:a2:07:8f:7c:b7:82:76:3a:59:bf:f2:a2:60:a5:
03:6c:5c:1e:4c:66:28:ad:e8:60:35:e5:a6:56:73:86:3f:25:
e2:dd:48:cd:c0:76:8e:58:3c:46:be:4b:f1:01:97:1d:1a:84:
da:d5:bd:89:ab:15:33:9f:2f:26:08:dc:04:d9:2b:e0:55:82:
57:c4:2c:e7:14:b8:f3:06:7b:87:b2:42:f2:3d:05:4e:11:58:
05:9d:b6:a9:62:55:1c:e8:f4:11:6d:25:83:00:c4:0a:d7:35:
46:d7:ef:cf
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdtfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI3MDc1NDA0WhcNMjYwODMxMDc1NDA0WjAYMRYw
FAYDVQQDEw02YTY3MGVhMC1iYzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAviqT29kLOMqtsNKLV5e4pCgQmp3MpaaBKMYA4sOnsNLjK0oO1ltG8XdV
uT79RxzbDHn3bHnUAMeJp7ow8gDJQqJLCqXlpmwGf7hcV46YSbh1EoVAKMc9z3QC
5yvOkN7lmKYSZBiUfEQRdIhvFP9Hg7zi2/wDkBDFlZWwgu+boLjxCce+TKNqK0Az
a12LotgmrvSJDHE+klu3bLMFMGzsq3gs+D46XZOOBWzXbNiXoFqakZ2BIcSVkdWv
bEKy8n8gCpYkR6bteBFhj9ewaGLYRvlQKohkgR2ELhVdNxfohiEX3kIY6IphJAmC
FxNSqteW6zUxjshW2TAEVxar6hMLlwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFDD1
7OLeGhRytyDMqWTD7YowwrmwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODUyMEEwQzg5OTAxMUYxOUU2ODc4Q0FDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCmsMcMAwDBAGaw7YDBAKa
w7gwDQYJKoZIhvcNAQELBQADggEBAE2YZF0B0wdu2/CJShBJx1fCzmd5e/PdwxrQ
hSvaRdsiCDUF9G7vqJcQN9JlFH+K1fdPlNl+V2kKhqAtoWx84RA2i5QnaIriiDyR
5H+tGzpNXdU17R4Yd+bFpO4picODN9dC79S8hn7ZN3zcXqfWwc1bJt4GT3WJbXDY
E5/hHd4Fv2HnD88Cc/z3+ypOBsZ/SCnLa8CiB498t4J2Olm/8qJgpQNsXB5MZiit
6GA15aZWc4Y/JeLdSM3Ado5YPEa+S/EBlx0ahNrVvYmrFTOfLyYI3ATZK+BVglfE
LOcUuPMGe4eyQvI9BU4RWAWdtqliVRzo9BFtJYMAxArXNUbX788=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:01 2026 by rpki-client