Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7015BA0E6A11F1A611E9ACDAE4EC9C.roa
File: 5E7015BA0E6A11F1A611E9ACDAE4EC9C.roa (raw, json)
Hash identifier: fkVVBNCqsS3/L1mtEWFKrSVE5b/hvSyoVCm6+JeyG2U=
Subject key identifier: 7C:4B:34:36:37:66:35:24:13:95:A4:A1:68:7A:5C:9E:5B:B7:03:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7015BA0E6A11F1A611E9ACDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 14:42:24 +0000
ROA not before: Fri 20 Feb 2026 14:42:19 +0000
ROA not after: Thu 04 Jun 2026 14:42:19 +0000
asID: 150008
IP address blocks: 154.210.228.0/24 maxlen: 24
154.210.229.0/24 maxlen: 24
154.210.230.0/24 maxlen: 24
154.210.231.0/24 maxlen: 24
154.210.232.0/24 maxlen: 24
154.210.233.0/24 maxlen: 24
154.210.234.0/24 maxlen: 24
154.210.235.0/24 maxlen: 24
154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113294 (0x1ba8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 14:42:19 2026 GMT
Not After : Jun 4 14:42:19 2026 GMT
Subject: CN=699872d0-d620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:cc:22:42:9f:e1:7d:72:ce:88:72:54:0a:
dd:74:9f:16:76:a7:7e:97:b2:04:db:da:e5:7d:cf:
90:2b:f0:e2:3a:ae:25:6f:7a:4a:06:24:c4:db:23:
be:70:2f:58:24:5b:6c:07:15:4e:33:db:bf:50:1d:
20:06:74:c3:c9:52:cc:80:87:a7:34:9b:14:81:63:
b4:06:44:db:a3:23:45:2d:f6:e6:87:36:f6:d3:d9:
34:36:e0:eb:44:30:db:31:48:cb:e9:f6:67:67:dc:
db:a6:15:ae:56:44:f4:82:d8:c0:39:c9:67:8e:6f:
ea:d7:35:9e:36:2c:ed:99:e0:57:b9:04:d2:ce:30:
d6:f2:19:3d:ba:b3:26:5d:5a:91:2d:d0:6c:9e:f9:
63:68:3e:67:ba:e0:48:f2:12:50:43:20:db:74:cc:
9f:3f:56:ba:be:c8:dc:f8:d0:93:1d:61:fb:e7:90:
c7:cd:55:b2:84:2b:12:b4:7e:46:24:6b:28:05:5f:
00:89:04:fa:a5:e6:c5:37:c0:69:5b:4c:ac:7b:d2:
3f:bc:04:a7:cd:9e:6f:80:0c:05:c1:05:c9:09:cb:
96:db:87:ea:f5:92:bc:ed:59:8a:c1:d5:ff:bd:0f:
26:5d:95:f0:af:14:54:e1:87:34:bb:9f:64:91:c8:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:34:36:37:66:35:24:13:95:A4:A1:68:7A:5C:9E:5B:B7:03:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7015BA0E6A11F1A611E9ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.228.0-154.210.236.255
Signature Algorithm: sha256WithRSAEncryption
5f:62:26:1b:82:2a:22:3b:90:fd:e5:b6:be:48:b2:ab:c2:e7:
28:43:2c:72:7e:24:5c:cc:f4:07:f4:fd:8b:12:6c:7e:f9:f5:
3d:66:d1:ca:c4:65:49:51:e2:df:27:1c:0d:0a:a0:2f:b5:ee:
16:cf:82:73:2f:2a:c1:ae:4d:29:09:68:27:e2:78:a6:b3:3a:
55:e1:80:88:a8:6e:72:5f:df:fa:96:73:24:be:de:68:1f:08:
ee:56:b0:d1:c0:64:0f:81:be:cf:df:da:fc:b4:be:4d:d5:cf:
d4:2f:91:2d:65:40:61:e9:4b:a2:3e:e6:56:e3:7e:33:2e:71:
7c:c5:64:ed:85:1d:40:a6:2b:09:f3:52:3c:cc:e4:e8:7e:15:
76:28:a5:52:ff:74:4e:aa:7f:ff:d6:81:1b:6a:1a:bd:c1:56:
4d:e3:d6:c5:46:0f:af:f4:e1:d6:e9:6a:52:a5:c6:5b:8d:0a:
db:c9:89:87:94:fb:ab:45:cd:c1:88:a7:bc:92:07:ee:16:e8:
64:cc:0b:98:8f:4b:c0:16:e6:1f:64:04:ab:5b:f4:ae:a7:3f:
61:71:7d:8d:d4:67:40:3c:7e:70:7e:f6:99:b6:c2:d2:e6:ed:
da:4b:da:2c:11:c1:37:2f:ec:06:f5:75:84:72:7f:57:2f:c2:
4f:c0:f0:24
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbqOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIwMTQ0MjE5WhcNMjYwNjA0MTQ0MjE5WjAYMRYw
FAYDVQQDEw02OTk4NzJkMC1kNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5qPMIkKf4X1yzohyVArddJ8Wdqd+l7IE29rlfc+QK/DiOq4lb3pKBiTE
2yO+cC9YJFtsBxVOM9u/UB0gBnTDyVLMgIenNJsUgWO0BkTboyNFLfbmhzb209k0
NuDrRDDbMUjL6fZnZ9zbphWuVkT0gtjAOclnjm/q1zWeNiztmeBXuQTSzjDW8hk9
urMmXVqRLdBsnvljaD5nuuBI8hJQQyDbdMyfP1a6vsjc+NCTHWH755DHzVWyhCsS
tH5GJGsoBV8AiQT6pebFN8BpW0yse9I/vASnzZ5vgAwFwQXJCcuW24fq9ZK87VmK
wdX/vQ8mXZXwrxRU4Yc0u59kkchtVQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHxL
NDY3ZjUkE5WkoWh6XJ5btwM3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTcwMTVCQTBFNkExMUYxQTYxMUU5QUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKa0uQDBACa0uwwDQYJ
KoZIhvcNAQELBQADggEBAF9iJhuCKiI7kP3ltr5IsqvC5yhDLHJ+JFzM9Af0/YsS
bH759T1m0crEZUlR4t8nHA0KoC+17hbPgnMvKsGuTSkJaCfieKazOlXhgIiobnJf
3/qWcyS+3mgfCO5WsNHAZA+Bvs/f2vy0vk3Vz9QvkS1lQGHpS6I+5lbjfjMucXzF
ZO2FHUCmKwnzUjzM5Oh+FXYopVL/dE6qf//WgRtqGr3BVk3j1sVGD6/04dbpalKl
xluNCtvJiYeU+6tFzcGIp7ySB+4W6GTMC5iPS8AW5h9kBKtb9K6nP2FxfY3UZ0A8
fnB+9pm2wtLm7dpL2iwRwTcv7Ab1dYRyf1cvwk/A8CQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:46 2026 by rpki-client