Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82D6FB62535711F19A6414A7CE1D38B0.roa
File: 82D6FB62535711F19A6414A7CE1D38B0.roa (raw, json)
Hash identifier: QcSCEH/YKuquuv9FORBMXZ8+zu3z5tWcAbKY7hbxPI0=
Subject key identifier: 92:01:7C:47:E6:5B:55:EC:C6:BC:56:6D:E6:43:85:BF:A5:22:5F:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82D6FB62535711F19A6414A7CE1D38B0.roa
Signing time: Tue 19 May 2026 07:51:15 +0000
ROA not before: Tue 19 May 2026 07:51:10 +0000
ROA not after: Wed 19 Aug 2026 07:51:10 +0000
asID: 18013
IP address blocks: 154.210.16.0/20 maxlen: 24
154.212.132.0/22 maxlen: 24
154.212.135.0/24 maxlen: 24
154.215.2.0/23 maxlen: 24
154.221.2.0/23 maxlen: 24
154.221.8.0/21 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117852 (0x1cc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 07:51:10 2026 GMT
Not After : Aug 19 07:51:10 2026 GMT
Subject: CN=6a0c1673-058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:28:c1:39:22:bd:8a:16:3f:3c:6a:44:df:
8b:27:77:a4:7c:15:b4:dc:be:55:13:d6:03:a7:54:
82:06:61:b9:05:f3:da:ec:ef:41:b3:d4:e3:10:cb:
45:0c:ea:e2:c2:a8:90:41:04:e4:c6:1d:08:26:e8:
01:0b:8f:8a:55:1c:7e:76:8a:6c:b9:9e:59:d2:29:
0e:6f:92:1b:51:d2:fa:cc:04:29:85:80:bf:da:9a:
7a:62:53:86:4b:b2:e8:d4:0d:ac:51:c2:1c:61:dd:
13:09:6b:ed:ba:22:3d:0a:48:d5:13:6b:d6:e8:38:
b1:8b:a3:68:e3:c9:15:7f:40:53:3d:2a:e2:01:13:
be:69:db:18:a1:00:5d:3a:a6:b1:37:1c:56:81:d9:
44:ba:15:d5:ab:f1:8b:85:06:0a:fc:6f:ca:9b:22:
58:96:61:32:64:4f:d7:53:5c:ab:ec:bd:e9:d7:9a:
b8:c9:02:34:4f:62:a8:4d:68:94:d0:7d:ce:8e:0b:
b0:77:ae:78:b8:ff:98:b7:5d:40:c3:2e:a8:ec:07:
5f:49:20:98:ae:62:c9:17:dc:25:45:19:ff:6a:dd:
dc:5f:77:2d:8d:a0:25:49:c4:36:bc:21:db:a5:34:
44:5c:5c:0b:68:d7:c5:c3:e3:18:c5:1a:00:49:40:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:7C:47:E6:5B:55:EC:C6:BC:56:6D:E6:43:85:BF:A5:22:5F:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82D6FB62535711F19A6414A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.212.132.0/22
154.215.2.0/23
154.221.2.0/23
154.221.8.0/21
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
16:53:53:6d:0f:23:92:d5:e9:fd:ac:9c:3e:c3:a8:56:b7:0a:
26:a9:28:63:aa:57:42:51:db:67:bb:24:aa:f9:9a:93:60:76:
e6:3a:c0:ab:4d:da:e3:77:45:ac:01:33:eb:37:8d:d0:89:2e:
63:32:c6:2f:4c:8c:5a:68:3e:b1:19:a6:8c:a4:53:21:4c:76:
b2:a9:7a:4e:a0:c9:0a:e5:ea:9e:57:93:d5:be:9e:0c:26:57:
d8:ec:90:ef:71:b5:e1:4c:96:8d:41:b8:d3:04:18:9f:d3:54:
9e:71:d8:f3:3d:78:81:81:c1:9a:9d:9a:61:3f:13:52:4f:19:
6d:4b:42:69:cf:09:57:1c:b8:2c:d6:b4:b9:a4:ef:69:8f:8e:
a0:7e:25:47:de:5c:7a:79:27:df:a4:ef:da:c7:4b:ef:5b:20:
b5:8c:17:be:4f:9c:cb:e3:a9:3c:c4:4c:1c:bd:c4:0b:08:42:
38:17:9b:37:60:df:bc:2b:d2:b6:cb:95:9f:05:90:2c:18:0d:
43:a8:6c:d2:c9:76:ab:4f:8c:f7:80:17:6a:7f:41:45:cb:41:
13:7f:fc:a9:08:ff:dc:8d:4b:70:25:e5:3d:c3:21:09:d4:c7:
a7:7c:03:52:89:cd:22:5b:f1:c8:2b:83:6d:83:ec:19:40:df:
ee:87:2d:62
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAcxcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE5MDc1MTEwWhcNMjYwODE5MDc1MTEwWjAYMRYw
FAYDVQQDEw02YTBjMTY3My0wNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxPQowTkivYoWPzxqRN+LJ3ekfBW03L5VE9YDp1SCBmG5BfPa7O9Bs9Tj
EMtFDOriwqiQQQTkxh0IJugBC4+KVRx+dopsuZ5Z0ikOb5IbUdL6zAQphYC/2pp6
YlOGS7Lo1A2sUcIcYd0TCWvtuiI9CkjVE2vW6Dixi6No48kVf0BTPSriARO+adsY
oQBdOqaxNxxWgdlEuhXVq/GLhQYK/G/KmyJYlmEyZE/XU1yr7L3p15q4yQI0T2Ko
TWiU0H3Ojguwd654uP+Yt11Awy6o7AdfSSCYrmLJF9wlRRn/at3cX3ctjaAlScQ2
vCHbpTREXFwLaNfFw+MYxRoASUBhNwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFJIB
fEfmW1XsxrxWbeZDhb+lIl9SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MkQ2RkI2MjUzNTcxMUYxOUE2NDE0QTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEmtIQAwQCmtSEAwQBmtcC
AwQBmt0CAwQDmt0IAwQEmt7gMA0GCSqGSIb3DQEBCwUAA4IBAQAWU1NtDyOS1en9
rJw+w6hWtwomqShjqldCUdtnuySq+ZqTYHbmOsCrTdrjd0WsATPrN43QiS5jMsYv
TIxaaD6xGaaMpFMhTHayqXpOoMkK5eqeV5PVvp4MJlfY7JDvcbXhTJaNQbjTBBif
01SecdjzPXiBgcGanZphPxNSTxltS0JpzwlXHLgs1rS5pO9pj46gfiVH3lx6eSff
pO/ax0vvWyC1jBe+T5zL46k8xEwcvcQLCEI4F5s3YN+8K9K2y5WfBZAsGA1DqGzS
yXarT4z3gBdqf0FFy0ETf/ypCP/cjUtwJeU9wyEJ1MenfANSic0iW/HIK4Ntg+wZ
QN/uhy1i
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:39 2026 by rpki-client