Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EDA8FA5B2811F1BC0F51C6CE1D38B0.roa
File: 98EDA8FA5B2811F1BC0F51C6CE1D38B0.roa (raw, json)
Hash identifier: AU57YWJMfxQkrrr80cfsbfs6Pnkf/d44mGPXJaTIquQ=
Subject key identifier: 76:B3:32:38:FB:FF:2F:02:0D:88:77:46:9D:6C:B0:28:F4:76:D4:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D03A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EDA8FA5B2811F1BC0F51C6CE1D38B0.roa
Signing time: Fri 29 May 2026 06:35:35 +0000
ROA not before: Fri 29 May 2026 06:35:30 +0000
ROA not after: Wed 01 Jul 2026 06:35:30 +0000
asID: 62240
IP address blocks: 154.194.117.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.31.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118842 (0x1d03a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 06:35:30 2026 GMT
Not After : Jul 1 06:35:30 2026 GMT
Subject: CN=6a1933b7-dc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:e2:5d:65:c2:31:f2:c7:1a:fa:ca:dc:b1:
0d:65:36:2a:ac:a1:e4:53:a8:7d:3c:82:62:fd:0f:
13:ed:d6:09:e8:05:6b:69:32:46:f5:59:83:c1:e0:
e7:85:d9:47:12:02:70:f5:f3:f5:64:2f:e3:ff:85:
7f:6d:bc:69:b6:4d:63:c6:4a:8b:00:d1:41:2a:ac:
70:0e:76:12:bf:a4:ed:05:c7:35:a5:47:ca:36:d6:
7a:5b:8a:64:41:d4:fc:8f:69:54:b7:9c:60:98:29:
fd:dd:4d:95:85:a4:41:df:5b:ac:f5:dc:0a:05:20:
4c:f1:a8:db:56:98:cf:92:96:ca:5f:39:90:23:c5:
c5:25:82:f8:ee:3b:be:91:f1:ae:e9:f5:e8:78:08:
94:fd:ad:41:ee:2f:43:f7:13:46:21:58:08:54:c8:
b8:ad:22:0d:f0:64:38:7e:15:39:0e:49:3d:14:3e:
fe:98:c1:e0:cb:9e:93:42:2c:f5:24:bb:47:4b:3e:
15:b3:82:ca:2c:b6:da:82:cb:39:5e:86:b2:ba:56:
22:8b:e8:b3:c9:d9:3e:a1:d8:fa:5a:ca:a8:af:54:
cc:4f:12:a3:8e:d8:3d:14:f8:ce:fb:d8:25:e7:41:
ac:e3:c0:b2:8c:a5:84:33:3b:f4:bd:97:71:6c:94:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:32:38:FB:FF:2F:02:0D:88:77:46:9D:6C:B0:28:F4:76:D4:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EDA8FA5B2811F1BC0F51C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.117.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.196.31.0/24
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.78.255
Signature Algorithm: sha256WithRSAEncryption
2a:39:95:49:7a:bb:ef:44:40:ae:f1:2c:11:b8:7b:61:7f:32:
12:10:8b:aa:0e:c7:a4:d2:e4:c0:75:5a:8b:94:a3:27:10:46:
fc:ea:c3:fb:4f:77:44:53:b4:b6:b1:68:f7:df:50:1b:7c:b8:
22:81:0a:93:85:7c:9c:ce:36:08:ba:2c:5a:d0:e4:ce:ca:f4:
39:b0:b0:1f:44:cf:c1:58:f8:40:ef:b5:ca:ae:18:f9:a0:03:
73:6a:73:3e:8c:f2:5d:2c:08:fe:88:cd:23:70:d8:e7:ca:ea:
f6:7d:d3:ab:18:c0:76:17:b7:ba:86:f3:f5:96:c3:be:9a:b8:
11:ce:0a:83:2d:6e:7d:4e:a8:e8:29:1f:4d:60:eb:bc:5e:bb:
74:db:23:c2:8d:4b:f2:a3:b3:9d:97:a6:8a:24:0c:d3:34:2a:
e4:3d:cb:8f:c8:9e:b5:87:13:e4:e2:ee:7d:1d:c4:09:de:91:
a8:01:f4:30:e2:f5:ad:29:22:98:46:bd:e9:3b:c0:51:78:00:
3c:05:91:1c:88:2c:cc:a5:6d:cb:93:5c:2b:a0:3e:38:42:2c:
3a:72:86:99:cc:f6:2a:4e:e3:bc:15:5b:8d:c8:6c:2b:6b:12:
d9:42:9d:e8:3f:7f:63:7d:4c:56:a1:1f:d5:b4:a4:58:a6:20:
56:33:03:d9
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAdA6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDYzNTMwWhcNMjYwNzAxMDYzNTMwWjAYMRYw
FAYDVQQDEw02YTE5MzNiNy1kYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqyriXWXCMfLHGvrK3LENZTYqrKHkU6h9PIJi/Q8T7dYJ6AVraTJG9VmD
weDnhdlHEgJw9fP1ZC/j/4V/bbxptk1jxkqLANFBKqxwDnYSv6TtBcc1pUfKNtZ6
W4pkQdT8j2lUt5xgmCn93U2VhaRB31us9dwKBSBM8ajbVpjPkpbKXzmQI8XFJYL4
7ju+kfGu6fXoeAiU/a1B7i9D9xNGIVgIVMi4rSIN8GQ4fhU5Dkk9FD7+mMHgy56T
Qiz1JLtHSz4Vs4LKLLbagss5XoayulYii+izydk+odj6Wsqor1TMTxKjjtg9FPjO
+9gl50Gs48CyjKWEMzv0vZdxbJTvTQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFHaz
Mjj7/y8CDYh3Rp1ssCj0dtSGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OEVEQThGQTVCMjgxMUYxQkMwRjUxQzZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmsJ1AwQAmsNxMAwDBACa
w40DBACaw44DBACaxB8DBACaxEQDBACaxEYwDAMEAprETAMEAJrETjANBgkqhkiG
9w0BAQsFAAOCAQEAKjmVSXq770RArvEsEbh7YX8yEhCLqg7HpNLkwHVai5SjJxBG
/OrD+093RFO0trFo999QG3y4IoEKk4V8nM42CLosWtDkzsr0ObCwH0TPwVj4QO+1
yq4Y+aADc2pzPozyXSwI/ojNI3DY58rq9n3TqxjAdhe3uobz9ZbDvpq4Ec4Kgy1u
fU6o6CkfTWDrvF67dNsjwo1L8qOznZemiiQM0zQq5D3Lj8ietYcT5OLufR3ECd6R
qAH0MOL1rSkimEa96TvAUXgAPAWRHIgszKVty5NcK6A+OEIsOnKGmcz2Kk7jvBVb
jchsK2sS2UKd6D9/Y31MVqEf1bSkWKYgVjMD2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:06 2026 by rpki-client