Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7C9D60343411F18F0DB7DBCE1D38B0.roa
File: 2F7C9D60343411F18F0DB7DBCE1D38B0.roa (raw, json)
Hash identifier: 5zZkTLNvYeAb8EfmOer9SKbJnAZK9AGZZdMM0szyO/A=
Subject key identifier: E8:A4:B0:42:E3:8D:47:EF:C2:31:7D:6A:45:F4:E8:3D:D6:46:CF:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C41A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7C9D60343411F18F0DB7DBCE1D38B0.roa
Signing time: Thu 09 Apr 2026 16:50:17 +0000
ROA not before: Thu 09 Apr 2026 16:50:11 +0000
ROA not after: Mon 09 Apr 2029 16:50:11 +0000
asID: 17561
IP address blocks: 154.81.110.0/24 maxlen: 24
154.81.111.0/24 maxlen: 24
154.81.112.0/24 maxlen: 24
154.81.113.0/24 maxlen: 24
154.81.114.0/24 maxlen: 24
154.81.115.0/24 maxlen: 24
154.81.116.0/24 maxlen: 24
154.81.117.0/24 maxlen: 24
154.81.118.0/24 maxlen: 24
154.81.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115738 (0x1c41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 16:50:11 2026 GMT
Not After : Apr 9 16:50:11 2029 GMT
Subject: CN=69d7d8c9-9256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:74:e8:92:b2:c3:7b:8f:14:7d:0f:98:98:
3e:8e:aa:78:48:9a:c5:97:e9:e9:cb:70:33:5d:42:
3c:f0:a7:09:71:fb:f0:83:bf:c4:af:e2:74:a4:20:
0a:0d:5a:77:09:7e:c4:06:b6:92:09:8f:13:00:5b:
4b:da:47:6b:78:5d:93:41:be:23:4a:2e:31:a0:2a:
03:da:81:e5:4d:29:1b:bb:be:5e:16:27:f3:95:ab:
f6:8d:5e:be:4e:ad:95:7b:35:c9:63:b3:20:78:ea:
30:25:76:1f:b8:f4:b8:da:f9:5f:31:54:57:e1:73:
a0:5d:38:5b:ed:fd:af:60:19:63:be:c4:b2:d0:61:
85:ee:dc:34:24:45:43:97:67:0a:28:f9:f4:99:06:
3f:6b:89:11:69:56:bd:d6:59:b1:67:8e:2e:ec:f3:
6a:f3:35:f2:0a:b5:0a:95:3e:d8:30:91:6a:40:29:
26:5d:41:2a:9b:b6:75:1f:d7:6d:6c:26:d9:18:7b:
70:ab:89:bf:09:10:96:fe:41:7e:0f:14:a7:20:0b:
6c:ea:7f:5a:01:ec:8d:51:85:c1:16:0b:e1:b7:cb:
73:1b:e2:52:a1:52:3d:1b:14:fa:69:fc:55:bc:9b:
11:67:20:c9:f3:d1:78:19:59:a5:3f:1a:19:f5:f5:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:B0:42:E3:8D:47:EF:C2:31:7D:6A:45:F4:E8:3D:D6:46:CF:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7C9D60343411F18F0DB7DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.110.0-154.81.119.255
Signature Algorithm: sha256WithRSAEncryption
37:e7:ea:75:11:84:62:fd:f8:ff:5c:72:f5:37:9f:91:38:90:
c1:aa:71:04:1a:7a:80:c0:ec:e1:69:a5:c1:41:c9:f9:67:f1:
d7:84:d5:65:f0:81:1f:22:02:14:86:cb:4c:43:aa:82:3b:b2:
98:8d:bb:ce:2d:28:43:b3:89:1b:24:ee:49:00:ee:78:dd:06:
c0:39:c1:cc:e2:42:1d:38:a8:cf:f4:4c:35:16:c4:97:c0:0e:
7f:a0:df:6d:2d:5a:dd:dd:4e:42:61:28:55:f5:93:a7:18:4b:
41:f0:07:f9:ac:14:18:05:ed:11:5d:66:7f:79:c7:0f:00:df:
44:b0:c6:c7:1a:4d:f5:8b:62:22:f6:cb:b8:c3:b7:01:9b:32:
76:42:1c:a4:8f:f3:7a:68:57:06:f7:87:f0:ca:36:46:6f:1b:
db:e0:6a:d5:20:20:de:0b:bf:c4:25:33:1d:f9:48:42:db:79:
4a:16:dc:72:6c:e5:6f:1f:0b:c0:fa:2f:a3:9f:72:18:e2:4f:
d1:87:ab:c6:16:b2:e5:c3:a6:70:d7:7a:9a:01:a0:b0:3d:c1:
41:a5:da:18:74:e9:5b:f9:df:1b:62:21:4f:f3:4e:bd:3f:80:
70:66:82:24:f1:53:f3:89:60:f3:f2:90:07:07:95:67:10:4a:
ce:a2:01:72
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcQaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MTY1MDExWhcNMjkwNDA5MTY1MDExWjAYMRYw
FAYDVQQDEw02OWQ3ZDhjOS05MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtJJ06JKyw3uPFH0PmJg+jqp4SJrFl+npy3AzXUI88KcJcfvwg7/Er+J0
pCAKDVp3CX7EBraSCY8TAFtL2kdreF2TQb4jSi4xoCoD2oHlTSkbu75eFifzlav2
jV6+Tq2VezXJY7MgeOowJXYfuPS42vlfMVRX4XOgXThb7f2vYBljvsSy0GGF7tw0
JEVDl2cKKPn0mQY/a4kRaVa91lmxZ44u7PNq8zXyCrUKlT7YMJFqQCkmXUEqm7Z1
H9dtbCbZGHtwq4m/CRCW/kF+DxSnIAts6n9aAeyNUYXBFgvht8tzG+JSoVI9GxT6
afxVvJsRZyDJ89F4GVmlPxoZ9fUSqwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOik
sELjjUfvwjF9akX06D3WRs/bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRjdDOUQ2MDM0MzQxMUYxOEYwREI3REJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUW4DBAOaUXAwDQYJ
KoZIhvcNAQELBQADggEBADfn6nURhGL9+P9ccvU3n5E4kMGqcQQaeoDA7OFppcFB
yfln8deE1WXwgR8iAhSGy0xDqoI7spiNu84tKEOziRsk7kkA7njdBsA5wcziQh04
qM/0TDUWxJfADn+g320tWt3dTkJhKFX1k6cYS0HwB/msFBgF7RFdZn95xw8A30Sw
xscaTfWLYiL2y7jDtwGbMnZCHKSP83poVwb3h/DKNkZvG9vgatUgIN4Lv8QlMx35
SELbeUoW3HJs5W8fC8D6L6OfchjiT9GHq8YWsuXDpnDXepoBoLA9wUGl2hh06Vv5
3xtiIU/zTr0/gHBmgiTxU/OJYPPykAcHlWcQSs6iAXI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:50 2026 by rpki-client