Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/733BC270372611F1A50977C3CE1D38B0.roa
File: 733BC270372611F1A50977C3CE1D38B0.roa (raw, json)
Hash identifier: qawNgiqMiiORMWXicA5lGlas6lDWWZfPVJ1cc0+wBvA=
Subject key identifier: 4A:0E:CE:0C:1A:B4:24:41:CC:3D:66:82:ED:99:81:93:85:2E:90:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/733BC270372611F1A50977C3CE1D38B0.roa
Signing time: Mon 13 Apr 2026 10:49:31 +0000
ROA not before: Mon 13 Apr 2026 10:49:26 +0000
ROA not after: Sat 16 May 2026 10:49:26 +0000
asID: 22773
IP address blocks: 154.198.21.0/24 maxlen: 24
154.198.22.0/24 maxlen: 24
154.198.23.0/24 maxlen: 24
154.198.24.0/24 maxlen: 24
154.198.25.0/24 maxlen: 24
154.198.26.0/24 maxlen: 24
154.198.27.0/24 maxlen: 24
154.198.28.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
154.202.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115974 (0x1c506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 10:49:26 2026 GMT
Not After : May 16 10:49:26 2026 GMT
Subject: CN=69dcca3b-277d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:f8:c8:b0:97:9d:21:da:92:e1:16:09:ca:
02:83:7d:0e:f2:ec:47:48:0f:fa:81:c7:57:80:0d:
c2:2a:19:b6:59:60:ef:9c:e0:2c:ba:e4:2f:a7:00:
d0:7c:e0:69:5f:1c:0a:30:b0:2b:72:d5:cd:03:37:
37:9a:56:a3:da:26:9d:8c:7b:36:19:a0:e1:80:dc:
e1:4c:4b:db:39:74:f7:c3:29:87:aa:48:41:d3:1e:
56:53:33:87:45:6b:87:78:c5:dd:db:53:cd:94:71:
44:0a:eb:63:68:15:23:df:dc:96:66:a3:ee:a3:5e:
8d:6e:d1:9c:98:71:ca:f9:0a:ed:9c:d3:da:a2:68:
5e:2b:66:4a:67:e3:ca:50:57:ee:c1:d9:5f:f4:cc:
3b:6d:cd:99:8e:35:36:07:b8:4c:a2:71:48:b1:1e:
0d:46:96:c8:4a:31:8b:67:83:61:f8:f6:e4:66:c6:
f8:eb:b0:3b:31:15:f0:1d:70:57:f3:dc:1a:19:84:
dd:90:74:91:21:0e:a6:9b:11:0c:7b:ed:9c:bf:ca:
f1:76:4d:94:b6:ba:8b:e2:bc:45:96:d4:4e:b9:10:
20:29:5e:a8:f1:21:bf:23:f8:37:8d:40:8e:a8:9c:
f2:e8:27:a4:14:d9:e0:dd:f2:8f:16:15:00:32:ef:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:CE:0C:1A:B4:24:41:CC:3D:66:82:ED:99:81:93:85:2E:90:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/733BC270372611F1A50977C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.21.0-154.198.28.255
154.202.108.0/24
154.202.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:35:cc:b5:36:2c:ec:c4:53:eb:74:99:02:d7:62:6d:fe:8f:
5f:69:b3:e5:38:d7:50:e2:df:02:2c:e9:0e:18:ba:f3:4d:86:
02:79:47:8c:f6:60:ee:63:48:fd:1b:01:c8:3f:c2:32:04:90:
ef:54:b8:63:20:6c:60:27:ce:91:da:02:ac:f1:0d:c1:72:d3:
f1:9f:81:48:68:c4:8d:a5:82:70:b5:2f:d4:05:76:6a:4b:d9:
64:b3:ec:bd:ec:a5:d9:4e:fc:dd:ab:60:e6:76:4f:4a:9f:b9:
ad:1b:11:2c:94:58:c4:e8:78:2c:d9:df:f6:7e:91:71:ee:5b:
85:0e:60:3e:3c:a4:dd:43:be:5e:f3:4c:3f:78:58:53:ed:b9:
5f:c2:a3:20:9f:e3:5d:57:b4:d1:5d:53:ff:0d:ae:89:f4:31:
25:78:88:08:c3:4d:22:7e:1f:04:da:f8:00:ac:3d:82:cf:f0:
e9:af:26:48:3a:c9:b3:b5:fb:d0:33:0b:af:6e:84:39:67:9d:
f1:ee:12:af:25:76:ac:fc:4d:b9:0d:d7:21:1e:46:13:2d:d7:
49:07:77:b4:f3:00:b1:34:d3:ff:0f:96:5c:56:65:92:13:6a:
fa:cd:e2:36:ec:2c:f8:23:6f:a0:df:e8:39:fb:32:08:15:f8:
25:e1:25:0a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAcUGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMTA0OTI2WhcNMjYwNTE2MTA0OTI2WjAYMRYw
FAYDVQQDEw02OWRjY2EzYi0yNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6VT4yLCXnSHakuEWCcoCg30O8uxHSA/6gcdXgA3CKhm2WWDvnOAsuuQv
pwDQfOBpXxwKMLArctXNAzc3mlaj2iadjHs2GaDhgNzhTEvbOXT3wymHqkhB0x5W
UzOHRWuHeMXd21PNlHFECutjaBUj39yWZqPuo16NbtGcmHHK+QrtnNPaomheK2ZK
Z+PKUFfuwdlf9Mw7bc2ZjjU2B7hMonFIsR4NRpbISjGLZ4Nh+PbkZsb467A7MRXw
HXBX89waGYTdkHSRIQ6mmxEMe+2cv8rxdk2UtrqL4rxFltROuRAgKV6o8SG/I/g3
jUCOqJzy6CekFNng3fKPFhUAMu/2UQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFEoO
zgwatCRBzD1mgu2ZgZOFLpC6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MzNCQzI3MDM3MjYxMUYxQTUwOTc3QzNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACaxhUDBACaxhwDBACa
ymwDBACaym8wDQYJKoZIhvcNAQELBQADggEBABo1zLU2LOzEU+t0mQLXYm3+j19p
s+U411Di3wIs6Q4YuvNNhgJ5R4z2YO5jSP0bAcg/wjIEkO9UuGMgbGAnzpHaAqzx
DcFy0/GfgUhoxI2lgnC1L9QFdmpL2WSz7L3spdlO/N2rYOZ2T0qfua0bESyUWMTo
eCzZ3/Z+kXHuW4UOYD48pN1Dvl7zTD94WFPtuV/CoyCf411XtNFdU/8Nron0MSV4
iAjDTSJ+HwTa+ACsPYLP8OmvJkg6ybO1+9AzC69uhDlnnfHuEq8ldqz8TbkN1yEe
RhMt10kHd7TzALE00/8PllxWZZITavrN4jbsLPgjb6Df6Dn7MggV+CXhJQo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:15 2026 by rpki-client