Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/063C14C433FA11F19C2483FECE1D38B0.roa
File: 063C14C433FA11F19C2483FECE1D38B0.roa (raw, json)
Hash identifier: sXpoV6eyL6d8LBgmpxMFUYKevrAkEu2t3c5YpwsAMFc=
Subject key identifier: 1F:66:03:D5:09:D9:47:C8:0C:62:99:8E:0A:D8:CB:4D:BF:39:8A:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/063C14C433FA11F19C2483FECE1D38B0.roa
Signing time: Thu 09 Apr 2026 09:53:57 +0000
ROA not before: Thu 09 Apr 2026 09:53:52 +0000
ROA not after: Sun 19 Apr 2026 09:53:52 +0000
asID: 9304
IP address blocks: 154.203.241.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.208.76.0/22 maxlen: 24
154.208.84.0/22 maxlen: 24
154.212.144.0/23 maxlen: 24
154.212.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115645 (0x1c3bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:53:52 2026 GMT
Not After : Apr 19 09:53:52 2026 GMT
Subject: CN=69d77735-b3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:12:e2:a9:bd:00:95:ef:e0:35:16:dd:86:48:
8d:07:af:10:5f:ae:c7:08:43:65:d6:a4:3b:60:57:
30:d1:b6:36:b7:38:eb:97:cd:99:2b:18:55:c9:f3:
9c:ed:9c:aa:36:7e:1a:c9:fa:79:d2:18:ed:52:80:
02:a5:26:71:ee:7e:b8:1d:f6:01:07:c9:f9:ad:ec:
b3:24:3d:6c:27:b2:9c:f1:1c:cb:6c:a9:a9:e9:7c:
1a:0c:ec:78:ca:0b:48:3b:d2:3e:2d:59:f2:d5:56:
e0:e9:6c:9a:6a:01:33:c0:10:36:0b:f7:4e:c0:ed:
d7:a4:14:69:96:ae:31:79:2a:46:df:34:38:48:40:
3d:1b:6e:e0:00:90:62:dd:1f:81:ab:1b:cc:5e:c6:
2c:28:da:fe:e8:60:fc:97:14:7c:f0:f9:c6:a7:0b:
e0:4e:b1:fd:97:ea:3b:35:27:73:69:49:7a:dd:01:
d6:1c:5e:5c:83:c9:b8:51:70:66:b1:42:16:33:24:
25:71:9a:87:dc:3a:63:b6:c5:32:06:d6:18:3a:9a:
1b:88:37:e9:3c:c3:80:74:cb:cc:7a:b1:a1:89:25:
9a:b5:a9:f7:fe:1f:3b:f4:20:d3:97:df:83:99:82:
c6:be:de:17:28:71:c7:83:af:c4:98:f2:9b:c7:06:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:66:03:D5:09:D9:47:C8:0C:62:99:8E:0A:D8:CB:4D:BF:39:8A:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/063C14C433FA11F19C2483FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.241.0-154.203.242.255
154.208.76.0/22
154.208.84.0/22
154.212.144.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:cd:22:43:df:1b:83:da:5e:58:fd:a2:18:6c:22:db:c9:60:
bb:70:3a:e7:87:bd:00:f5:53:22:97:e6:49:c8:30:64:eb:1c:
b3:13:f1:94:05:d3:e8:ab:39:db:81:48:8c:1e:5c:69:00:9c:
0a:8e:85:8b:5c:13:58:d9:75:2c:7f:18:ea:ce:65:d0:dc:97:
e0:3f:d7:85:15:c7:ab:c6:ee:0c:a8:93:c7:d2:9d:54:77:09:
e7:1f:c2:50:c7:26:8c:f0:4d:4c:aa:05:8e:c7:fc:71:29:e0:
7e:2a:eb:97:a7:55:e5:07:61:8a:f8:9c:68:e9:96:b7:12:3f:
52:bb:70:af:9c:d8:e0:93:57:2a:27:b1:19:a2:7a:76:2d:16:
18:c0:f5:0d:7c:71:d1:3d:0d:19:5e:d5:c4:79:64:f1:6b:35:
82:96:72:8e:72:7c:76:24:c0:ac:f8:fc:21:28:0a:c8:1e:9c:
d6:32:73:3c:aa:45:6a:d4:6d:b6:02:f7:de:3a:c8:b3:41:46:
74:cb:35:3a:7c:1d:aa:76:ac:08:97:b6:16:64:30:72:64:8b:
82:e3:8b:bf:86:f1:21:b5:48:51:2a:3d:78:85:c4:91:61:a5:
65:95:df:64:23:f2:56:0e:f0:95:b2:ca:70:f8:85:c6:27:ec:
c7:7f:3c:68
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAcO9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MDk1MzUyWhcNMjYwNDE5MDk1MzUyWjAYMRYw
FAYDVQQDEw02OWQ3NzczNS1iM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4hLiqb0Ale/gNRbdhkiNB68QX67HCENl1qQ7YFcw0bY2tzjrl82ZKxhV
yfOc7ZyqNn4ayfp50hjtUoACpSZx7n64HfYBB8n5reyzJD1sJ7Kc8RzLbKmp6Xwa
DOx4ygtIO9I+LVny1Vbg6WyaagEzwBA2C/dOwO3XpBRplq4xeSpG3zQ4SEA9G27g
AJBi3R+BqxvMXsYsKNr+6GD8lxR88PnGpwvgTrH9l+o7NSdzaUl63QHWHF5cg8m4
UXBmsUIWMyQlcZqH3DpjtsUyBtYYOpobiDfpPMOAdMvMerGhiSWatan3/h879CDT
l9+DmYLGvt4XKHHHg6/EmPKbxwbfjQIDAQABo4ICvzCCArswHQYDVR0OBBYEFB9m
A9UJ2UfIDGKZjgrYy02/OYr1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNjNDMTRDNDMzRkExMUYxOUMyNDgzRkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACay/EDBACay/IDBAKa
0EwDBAKa0FQDBAKa1JAwDQYJKoZIhvcNAQELBQADggEBAK7NIkPfG4PaXlj9ohhs
ItvJYLtwOueHvQD1UyKX5knIMGTrHLMT8ZQF0+irOduBSIweXGkAnAqOhYtcE1jZ
dSx/GOrOZdDcl+A/14UVx6vG7gyok8fSnVR3CecfwlDHJozwTUyqBY7H/HEp4H4q
65enVeUHYYr4nGjplrcSP1K7cK+c2OCTVyonsRmienYtFhjA9Q18cdE9DRle1cR5
ZPFrNYKWco5yfHYkwKz4/CEoCsgenNYyczyqRWrUbbYC9946yLNBRnTLNTp8Hap2
rAiXthZkMHJki4Lji7+G8SG1SFEqPXiFxJFhpWWV32Qj8lYO8JWyynD4hcYn7Md/
PGg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:23 2026 by rpki-client