Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4BD2E86899411F18755F1E4CE1D38B0.roa
File: A4BD2E86899411F18755F1E4CE1D38B0.roa (raw, json)
Hash identifier: OmKePZplunOT5enp7FP+DYWuZVngNM6wNTAGwc8w0wQ=
Subject key identifier: 60:61:8C:13:AC:5D:BB:1F:3E:13:FD:4D:CE:5C:7E:DA:10:0B:E5:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4BD2E86899411F18755F1E4CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:24:54 +0000
ROA not before: Mon 27 Jul 2026 08:24:50 +0000
ROA not after: Mon 31 Aug 2026 08:24:50 +0000
asID: 62240
IP address blocks: 154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121707 (0x1db6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 08:24:50 2026 GMT
Not After : Aug 31 08:24:50 2026 GMT
Subject: CN=6a6715d6-90f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:f3:66:92:a2:46:0e:81:89:ce:3a:45:1f:
87:96:6a:2e:da:69:9b:23:63:2e:da:27:0d:82:ff:
f3:a3:56:0f:3d:f0:66:db:c7:fd:c1:ef:0a:5d:76:
6a:1d:34:1a:fa:b4:70:c8:30:4e:b8:d5:67:32:86:
9b:d9:dc:f4:c5:a3:c4:9b:51:9a:ec:c4:3f:c9:8e:
59:25:80:be:50:fe:62:cb:ca:bd:bb:6f:5c:63:51:
9d:53:12:6e:e7:f6:e1:57:0c:85:ce:0b:fb:ee:33:
f5:94:7c:5d:74:e7:51:c7:05:67:f1:78:56:0e:c3:
b4:68:af:d4:ea:1e:94:63:c1:15:68:96:de:66:01:
b0:a5:5e:fa:d4:5d:ab:f1:1c:8d:c2:85:0c:23:a1:
fb:85:17:70:c9:21:f0:84:ba:89:d8:14:07:4b:69:
99:41:60:1e:4f:39:3d:63:ca:45:89:37:11:db:bd:
c2:f7:68:ca:d6:11:18:03:8c:aa:eb:fe:70:fc:8c:
41:9a:95:82:36:69:70:92:9d:1e:b2:73:d4:b6:8c:
dc:19:59:c2:ab:a6:c8:a0:50:3d:d0:5d:4a:d2:2f:
6c:a7:40:d2:6f:18:23:37:01:4d:ef:58:11:b7:24:
f6:60:57:9a:5c:2e:1c:55:d9:49:47:05:c4:23:69:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:61:8C:13:AC:5D:BB:1F:3E:13:FD:4D:CE:5C:7E:DA:10:0B:E5:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4BD2E86899411F18755F1E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.159.0-154.195.163.255
154.196.55.0-154.196.59.255
Signature Algorithm: sha256WithRSAEncryption
c4:87:c3:19:d0:c3:9d:a8:6b:75:08:c9:20:d4:53:a3:55:25:
5c:0b:e1:c1:37:c3:74:70:ee:b8:62:9c:76:c5:3f:1b:16:7e:
19:a8:f5:8f:cb:5c:13:6a:4b:cc:f7:b1:5c:1f:ed:f3:5f:9f:
77:4b:3a:57:be:15:db:1e:90:db:9e:d7:58:3d:bb:93:43:47:
eb:60:72:2c:0c:04:98:f7:83:e4:97:40:42:8a:b0:17:51:b0:
a4:74:72:a6:f5:96:45:5b:30:83:8b:6f:2e:d4:f6:7b:4d:4b:
09:bd:e8:07:a3:25:6e:73:87:12:6a:11:53:2a:75:ba:97:25:
d4:56:aa:e5:76:24:fa:14:72:31:9e:29:65:26:7e:fa:75:a3:
fc:8a:50:90:5c:38:1f:6b:13:00:f4:91:e4:dd:33:81:a5:bc:
7a:ed:36:ae:42:6d:9c:c4:57:62:ee:d8:12:c0:53:97:d7:93:
d4:ce:b0:1e:fb:af:bf:50:68:14:37:11:2c:c3:05:84:0f:90:
84:b0:21:18:d3:90:90:48:df:6a:06:34:6e:b6:c2:bb:af:2d:
68:52:be:bb:40:9e:e1:a2:67:af:8b:68:af:9d:a3:e9:c5:cf:
32:ca:d2:05:15:66:7d:4a:2e:8d:68:d3:90:06:32:1f:25:83:
38:e7:6a:5a
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAdtrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI3MDgyNDUwWhcNMjYwODMxMDgyNDUwWjAYMRYw
FAYDVQQDEw02YTY3MTVkNi05MGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx7jzZpKiRg6Bic46RR+Hlmou2mmbI2Mu2icNgv/zo1YPPfBm28f9we8K
XXZqHTQa+rRwyDBOuNVnMoab2dz0xaPEm1Ga7MQ/yY5ZJYC+UP5iy8q9u29cY1Gd
UxJu5/bhVwyFzgv77jP1lHxddOdRxwVn8XhWDsO0aK/U6h6UY8EVaJbeZgGwpV76
1F2r8RyNwoUMI6H7hRdwySHwhLqJ2BQHS2mZQWAeTzk9Y8pFiTcR273C92jK1hEY
A4yq6/5w/IxBmpWCNmlwkp0esnPUtozcGVnCq6bIoFA90F1K0i9sp0DSbxgjNwFN
71gRtyT2YFeaXC4cVdlJRwXEI2lcgQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFGBh
jBOsXbsfPhP9Tc5cftoQC+UTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNEJEMkU4Njg5OTQxMUYxODc1NUYxRTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACaw58DBAKaw6AwDAME
AJrENwMEAprEODANBgkqhkiG9w0BAQsFAAOCAQEAxIfDGdDDnahrdQjJINRTo1Ul
XAvhwTfDdHDuuGKcdsU/GxZ+Gaj1j8tcE2pLzPexXB/t81+fd0s6V74V2x6Q257X
WD27k0NH62ByLAwEmPeD5JdAQoqwF1GwpHRypvWWRVswg4tvLtT2e01LCb3oB6Ml
bnOHEmoRUyp1upcl1Faq5XYk+hRyMZ4pZSZ++nWj/IpQkFw4H2sTAPSR5N0zgaW8
eu02rkJtnMRXYu7YEsBTl9eT1M6wHvuvv1BoFDcRLMMFhA+QhLAhGNOQkEjfagY0
brbCu68taFK+u0Ce4aJnr4tor52j6cXPMsrSBRVmfUoujWjTkAYyHyWDOOdqWg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:05 2026 by rpki-client