Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C3976945BBA11F1B919D7A7CE1D38B0.roa
File: 6C3976945BBA11F1B919D7A7CE1D38B0.roa (raw, json)
Hash identifier: SwaFnQ1PDCBNzfEgyytutciWNh26vX4t1BvmuqnSkYY=
Subject key identifier: CC:EC:7F:5E:B7:17:B3:BC:A4:49:64:C1:A6:7C:9B:EA:95:07:9B:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C3976945BBA11F1B919D7A7CE1D38B0.roa
Signing time: Fri 29 May 2026 23:59:27 +0000
ROA not before: Sat 30 May 2026 23:59:22 +0000
ROA not after: Wed 01 Jul 2026 23:59:22 +0000
asID: 62240
IP address blocks: 154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
154.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118975 (0x1d0bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 23:59:22 2026 GMT
Not After : Jul 1 23:59:22 2026 GMT
Subject: CN=6a1a285e-34e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:ce:8f:a3:f6:1d:13:e0:d5:5e:43:ae:4c:
1a:00:f9:28:e8:bb:8b:24:04:5f:fa:b0:2e:03:ac:
44:a5:29:3c:2a:81:95:ec:0d:5d:80:6d:3a:6e:f1:
46:c4:ca:6a:a7:55:ae:5d:ee:8a:70:35:ec:a4:ae:
a9:55:80:f8:04:d9:35:5f:8d:c7:1c:f0:30:a6:51:
ab:0d:6a:b2:fc:52:63:e3:4c:33:9d:92:e1:83:a7:
ae:1e:e6:44:88:c0:d9:ff:b2:f1:79:77:c5:41:a1:
a9:7e:47:aa:4a:da:33:48:7d:de:02:e9:8d:85:cd:
61:97:0f:1d:49:d2:e5:b6:c5:32:cb:13:9a:11:16:
78:d4:8b:6b:57:5d:21:27:e2:5b:04:03:f1:5f:d1:
d8:23:39:79:c0:ad:a3:42:2d:5d:37:74:ba:31:44:
0b:03:4a:8f:f9:cf:3e:1d:b6:e1:cd:70:78:60:42:
8d:eb:e6:46:e4:fc:96:65:f8:01:a9:50:c5:fe:19:
66:d1:a4:aa:69:4c:83:55:97:f5:e3:6c:d9:5c:58:
2c:5d:0c:6a:0b:da:79:75:56:4f:10:3f:c9:52:0a:
11:fd:d0:f2:b7:d8:89:44:54:aa:0c:57:e2:39:71:
5e:e4:ab:89:97:74:37:57:16:b1:12:3a:e3:92:2d:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EC:7F:5E:B7:17:B3:BC:A4:49:64:C1:A6:7C:9B:EA:95:07:9B:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C3976945BBA11F1B919D7A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.143.0-154.195.144.255
154.195.152.0-154.195.157.255
154.196.90.0/23
Signature Algorithm: sha256WithRSAEncryption
77:70:4c:c2:48:da:1a:28:2f:a3:8d:f9:85:f1:39:e4:11:68:
a2:8e:57:14:b9:cb:5c:99:ac:1a:5d:3e:37:70:6f:c0:fb:bd:
51:22:64:1d:ca:aa:45:36:b3:dc:dd:34:b0:c1:86:18:52:cf:
9d:43:97:27:ef:b6:d1:79:48:f2:55:e3:6e:92:a2:f2:30:82:
e6:1d:b9:d9:8e:6e:43:51:f7:b1:6c:b0:76:a1:77:31:8a:6c:
cd:85:01:4f:f1:f8:24:d2:5f:d5:f8:a4:9a:ef:ff:69:b5:a2:
22:b1:94:a8:04:a7:be:ee:81:dd:8b:c9:11:20:f1:65:6b:ec:
3e:14:61:cb:60:18:49:37:97:85:dc:05:67:11:04:68:d1:97:
db:40:a9:ce:0a:40:fd:a1:a6:ee:84:4d:e9:13:19:5f:8e:cb:
d1:79:cf:fe:a7:bb:b0:08:de:43:ff:9d:2e:b7:15:80:98:45:
78:9d:69:ff:51:e5:dc:31:1a:f2:c0:4f:a2:14:70:df:99:ca:
1f:30:29:c0:81:a1:e0:b0:4b:91:23:6e:ff:e5:a7:54:8d:d8:
10:a0:b0:02:c2:f4:d0:8a:21:14:14:71:80:cb:7e:63:ff:44:
45:f5:a7:a3:63:8c:0d:f0:53:59:3b:ce:e4:ba:ae:9b:b3:01:
e2:d4:d7:a1
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAdC/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTMwMjM1OTIyWhcNMjYwNzAxMjM1OTIyWjAYMRYw
FAYDVQQDEw02YTFhMjg1ZS0zNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvz7Oj6P2HRPg1V5DrkwaAPko6LuLJARf+rAuA6xEpSk8KoGV7A1dgG06
bvFGxMpqp1WuXe6KcDXspK6pVYD4BNk1X43HHPAwplGrDWqy/FJj40wznZLhg6eu
HuZEiMDZ/7LxeXfFQaGpfkeqStozSH3eAumNhc1hlw8dSdLltsUyyxOaERZ41Itr
V10hJ+JbBAPxX9HYIzl5wK2jQi1dN3S6MUQLA0qP+c8+HbbhzXB4YEKN6+ZG5PyW
ZfgBqVDF/hlm0aSqaUyDVZf142zZXFgsXQxqC9p5dVZPED/JUgoR/dDyt9iJRFSq
DFfiOXFe5KuJl3Q3VxaxEjrjki0euwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFMzs
f163F7O8pElkwaZ8m+qVB5u4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QzM5NzY5NDVCQkExMUYxQjkxOUQ3QTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACaw48DBACaw5AwDAME
A5rDmAMEAZrDnAMEAZrEWjANBgkqhkiG9w0BAQsFAAOCAQEAd3BMwkjaGigvo435
hfE55BFooo5XFLnLXJmsGl0+N3BvwPu9USJkHcqqRTaz3N00sMGGGFLPnUOXJ++2
0XlI8lXjbpKi8jCC5h252Y5uQ1H3sWywdqF3MYpszYUBT/H4JNJf1fikmu//abWi
IrGUqASnvu6B3YvJESDxZWvsPhRhy2AYSTeXhdwFZxEEaNGX20CpzgpA/aGm7oRN
6RMZX47L0XnP/qe7sAjeQ/+dLrcVgJhFeJ1p/1Hl3DEa8sBPohRw35nKHzApwIGh
4LBLkSNu/+WnVI3YEKCwAsL00IohFBRxgMt+Y/9ERfWno2OMDfBTWTvO5Lqum7MB
4tTXoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:01:41 2026 by rpki-client