Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604221C4536311F18B88BDEDCE1D38B0.roa
File: 604221C4536311F18B88BDEDCE1D38B0.roa (raw, json)
Hash identifier: zdPpDL3EAa9zJ0u4AohXbAGLBEq3K6cWRKIL8tpF+sU=
Subject key identifier: 58:E2:C8:7E:F9:3F:4F:95:81:25:C4:7A:E3:63:66:58:EC:9F:47:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604221C4536311F18B88BDEDCE1D38B0.roa
Signing time: Tue 19 May 2026 09:16:11 +0000
ROA not before: Tue 19 May 2026 09:16:06 +0000
ROA not after: Wed 19 May 2027 09:16:06 +0000
asID: 328608
IP address blocks: 154.200.207.0/24 maxlen: 24
154.200.208.0/24 maxlen: 24
154.200.209.0/24 maxlen: 24
154.200.210.0/24 maxlen: 24
154.200.211.0/24 maxlen: 24
154.200.212.0/24 maxlen: 24
154.200.213.0/24 maxlen: 24
154.200.214.0/24 maxlen: 24
154.200.215.0/24 maxlen: 24
154.200.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117892 (0x1cc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 09:16:06 2026 GMT
Not After : May 19 09:16:06 2027 GMT
Subject: CN=6a0c2a5b-ca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:f1:f1:8a:c3:e9:15:4a:bb:43:1e:6d:6c:
eb:cc:4c:97:ac:6e:7a:47:36:63:5d:3c:fa:9a:83:
ff:2e:41:25:bb:c1:5b:c1:b1:2b:26:5c:4d:95:dd:
21:a8:18:b9:86:28:a6:8d:ad:05:f3:22:bc:86:65:
7f:52:94:88:e2:2b:55:b4:f7:7e:d7:f2:92:51:5f:
59:a9:d9:26:56:44:c5:00:a5:70:d6:ef:a6:18:b4:
49:42:c8:6b:f0:25:ea:19:1a:14:58:4f:9f:3a:c9:
1a:e1:55:01:a1:fc:7a:8b:f1:07:f1:b8:e5:44:e7:
e2:09:c5:06:d7:42:40:2f:56:05:e7:9b:91:91:79:
48:ea:03:37:37:af:e5:75:ac:54:97:b4:5a:bb:3f:
33:96:f6:ff:18:43:4d:8e:31:99:42:85:31:3e:89:
ee:02:3a:f3:da:6f:8f:db:23:d1:17:07:89:53:1d:
8c:62:29:88:1c:29:d8:2c:40:99:16:25:29:73:3f:
6b:03:0b:79:8a:27:e1:6d:ee:aa:eb:6d:57:56:b4:
32:6f:00:31:0e:a4:b8:70:c5:52:69:93:b7:35:83:
6a:1e:91:6e:3d:07:d9:33:ac:d8:72:62:73:5e:83:
e1:b5:22:47:5f:e2:a7:08:70:c8:b2:ca:b9:14:01:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:C8:7E:F9:3F:4F:95:81:25:C4:7A:E3:63:66:58:EC:9F:47:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604221C4536311F18B88BDEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.207.0-154.200.216.255
Signature Algorithm: sha256WithRSAEncryption
1d:d3:3d:70:0b:34:44:33:21:e7:42:bf:34:16:bd:ba:15:c8:
ce:ac:2d:4e:5e:72:77:98:ec:e2:00:37:cc:1f:8e:e9:9c:83:
6d:13:f7:22:5f:1a:ea:24:69:5c:47:78:6c:a6:72:da:64:7b:
1e:c3:1a:87:1b:7f:5f:02:e8:45:79:78:0f:f9:2c:d6:97:28:
bf:75:58:91:23:ac:df:0f:0a:17:3e:5d:a6:9b:cf:91:28:30:
9a:da:fc:3f:c9:cd:93:32:45:5a:df:39:30:c4:92:34:94:ba:
28:40:af:3a:74:ae:51:7a:c2:52:53:b4:5e:f3:ec:53:9a:43:
49:d4:51:6a:de:ac:c4:7b:45:05:8d:6f:79:fb:43:a0:fc:88:
88:81:3d:4b:1f:be:8b:c4:fd:c0:50:24:7e:17:cd:e7:c8:27:
ae:a5:11:33:f7:42:79:2e:78:97:15:c6:3b:53:c6:95:a1:87:
8c:8e:88:ae:57:47:2d:f9:6e:90:18:7b:75:60:82:23:a3:3a:
1a:62:82:f7:41:ce:a1:f6:d0:ec:78:23:a4:90:fe:f2:e8:a3:
a5:02:34:a6:48:c1:68:06:2e:ba:9d:d7:f3:2c:27:98:6c:0f:
d7:a6:90:36:c4:c5:bb:b7:e8:7e:12:c1:dc:7c:ef:35:8f:75:
df:43:52:7f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcyEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE5MDkxNjA2WhcNMjcwNTE5MDkxNjA2WjAYMRYw
FAYDVQQDEw02YTBjMmE1Yi1jYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvKHx8YrD6RVKu0MebWzrzEyXrG56RzZjXTz6moP/LkElu8FbwbErJlxN
ld0hqBi5hiimja0F8yK8hmV/UpSI4itVtPd+1/KSUV9ZqdkmVkTFAKVw1u+mGLRJ
Qshr8CXqGRoUWE+fOska4VUBofx6i/EH8bjlROfiCcUG10JAL1YF55uRkXlI6gM3
N6/ldaxUl7Rauz8zlvb/GENNjjGZQoUxPonuAjrz2m+P2yPRFweJUx2MYimIHCnY
LECZFiUpcz9rAwt5iifhbe6q621XVrQybwAxDqS4cMVSaZO3NYNqHpFuPQfZM6zY
cmJzXoPhtSJHX+KnCHDIssq5FAGwiQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFji
yH75P0+VgSXEeuNjZljsn0doMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MDQyMjFDNDUzNjMxMUYxOEI4OEJERURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACayM8DBACayNgwDQYJ
KoZIhvcNAQELBQADggEBAB3TPXALNEQzIedCvzQWvboVyM6sLU5ecneY7OIAN8wf
jumcg20T9yJfGuokaVxHeGymctpkex7DGocbf18C6EV5eA/5LNaXKL91WJEjrN8P
Chc+Xaabz5EoMJra/D/JzZMyRVrfOTDEkjSUuihArzp0rlF6wlJTtF7z7FOaQ0nU
UWrerMR7RQWNb3n7Q6D8iIiBPUsfvovE/cBQJH4XzefIJ66lETP3QnkueJcVxjtT
xpWhh4yOiK5XRy35bpAYe3VggiOjOhpigvdBzqH20Ox4I6SQ/vLoo6UCNKZIwWgG
Lrqd1/MsJ5hsD9emkDbExbu36H4Swdx87zWPdd9DUn8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:50 2026 by rpki-client