Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A57A0552370911F189772F17CF1D38B0.roa
File: A57A0552370911F189772F17CF1D38B0.roa (raw, json)
Hash identifier: YA6F3OAhg12sdDu+xdK9lNJf1m38IX+b/PVcZdo9xrA=
Subject key identifier: 1F:7C:E3:26:2C:8E:E4:DA:12:AB:F3:B9:59:0C:C4:41:36:F9:F4:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A57A0552370911F189772F17CF1D38B0.roa
Signing time: Mon 13 Apr 2026 07:23:20 +0000
ROA not before: Mon 13 Apr 2026 07:23:15 +0000
ROA not after: Thu 12 Apr 2029 07:23:15 +0000
asID: 17561
IP address blocks: 154.218.64.0/24 maxlen: 24
154.218.65.0/24 maxlen: 24
154.218.66.0/24 maxlen: 24
154.218.67.0/24 maxlen: 24
154.218.68.0/24 maxlen: 24
154.218.69.0/24 maxlen: 24
154.218.70.0/24 maxlen: 24
154.218.80.0/24 maxlen: 24
154.218.81.0/24 maxlen: 24
154.218.82.0/24 maxlen: 24
154.218.83.0/24 maxlen: 24
154.218.84.0/24 maxlen: 24
154.218.85.0/24 maxlen: 24
154.218.86.0/24 maxlen: 24
154.218.87.0/24 maxlen: 24
154.218.88.0/24 maxlen: 24
154.218.89.0/24 maxlen: 24
154.218.90.0/24 maxlen: 24
154.218.91.0/24 maxlen: 24
154.218.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115944 (0x1c4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 07:23:15 2026 GMT
Not After : Apr 12 07:23:15 2029 GMT
Subject: CN=69dc99e8-ac8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:ed:66:d4:43:27:30:58:75:22:f4:27:6e:
db:18:7d:18:78:2d:bd:8e:9b:71:74:ff:cc:d8:ce:
0e:c8:b5:a4:f7:96:a1:29:be:d5:a9:1d:2b:d6:5b:
96:81:32:6d:8e:6f:27:ac:a9:82:15:fc:e6:72:44:
c3:89:a9:95:88:a4:00:7f:50:12:4f:a1:55:1d:5e:
be:55:d3:32:30:84:26:6e:48:38:b1:ed:dd:d9:2a:
cc:e7:6b:8d:bf:b9:2b:4d:53:02:0c:54:17:f4:ba:
f8:7d:2f:4a:cb:4f:1a:8a:a0:b9:98:e4:9a:fb:17:
6b:ae:a1:01:6f:13:a9:e6:b1:5d:17:6e:ae:cd:2c:
a5:de:5f:48:a7:61:b5:c1:9c:e5:9a:89:ae:8f:7c:
0a:44:02:07:96:a0:b1:64:91:76:93:63:16:c9:be:
0c:22:be:1d:7b:ad:8e:f4:e8:89:56:a0:3c:8d:c5:
1a:15:5a:26:37:64:8a:0a:cb:98:65:fd:00:1b:29:
7e:6f:98:10:5c:d4:41:d5:3b:67:38:db:fe:08:8c:
e4:e0:63:08:c9:2e:05:bc:4b:14:cf:87:c2:af:4f:
4f:1f:f1:1e:00:47:44:a5:05:4e:d0:b7:2e:f7:a8:
46:3b:57:94:63:b7:98:11:75:77:8d:22:a4:d5:c2:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:E3:26:2C:8E:E4:DA:12:AB:F3:B9:59:0C:C4:41:36:F9:F4:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A57A0552370911F189772F17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.64.0-154.218.70.255
154.218.80.0-154.218.92.255
Signature Algorithm: sha256WithRSAEncryption
5f:f3:b0:04:cf:7a:7b:dc:ac:f4:f6:fc:ad:7c:34:85:40:a7:
c8:a4:f8:62:c9:2e:f4:94:8a:99:9d:8b:07:8b:d3:1d:4c:1d:
44:11:d2:40:fd:f5:ba:6f:04:f5:93:72:d0:7a:6b:ab:3e:9c:
60:65:e6:ef:19:d7:55:8c:0c:8d:09:d8:89:04:96:f2:1e:73:
cb:2e:06:f1:50:68:ad:77:fb:52:8e:52:ec:43:a0:29:ac:88:
16:4f:04:a3:81:bb:62:c8:5a:cb:36:79:6e:11:f6:ce:1a:3c:
15:dd:a5:48:bd:19:7a:93:f5:13:42:98:2e:c3:30:3a:e7:fb:
78:fa:e2:9b:18:b1:aa:40:ba:ab:9c:7b:a5:34:0d:0f:53:ff:
5d:b3:dd:81:8a:02:4b:91:d2:e6:ed:d3:d6:bf:97:d3:57:da:
71:45:d1:75:28:22:f3:fb:e3:3f:7b:4f:a3:95:66:a6:2f:5a:
c0:c8:83:f1:31:47:a4:2b:60:98:43:7d:98:9f:66:63:de:db:
2c:a9:d1:c0:94:dd:12:29:dc:ba:5c:d4:99:34:99:0f:ac:34:
35:f0:88:ba:a2:6c:17:29:23:8d:bf:7e:16:5d:67:c9:44:9a:
66:6b:3a:c6:0a:d5:ee:5d:94:36:d5:7e:ba:4d:ce:bb:75:88:
0a:3f:24:01
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAcToMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMDcyMzE1WhcNMjkwNDEyMDcyMzE1WjAYMRYw
FAYDVQQDEw02OWRjOTllOC1hYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA36ftZtRDJzBYdSL0J27bGH0YeC29jptxdP/M2M4OyLWk95ahKb7VqR0r
1luWgTJtjm8nrKmCFfzmckTDiamViKQAf1AST6FVHV6+VdMyMIQmbkg4se3d2SrM
52uNv7krTVMCDFQX9Lr4fS9Ky08aiqC5mOSa+xdrrqEBbxOp5rFdF26uzSyl3l9I
p2G1wZzlmomuj3wKRAIHlqCxZJF2k2MWyb4MIr4de62O9OiJVqA8jcUaFVomN2SK
CsuYZf0AGyl+b5gQXNRB1TtnONv+CIzk4GMIyS4FvEsUz4fCr09PH/EeAEdEpQVO
0Lcu96hGO1eUY7eYEXV3jSKk1cIN+wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFB98
4yYsjuTaEqvzuVkMxEE2+fRcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNTdBMDU1MjM3MDkxMUYxODk3NzJGMTdDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAaa2kADBACa2kYwDAME
BJraUAMEAJraXDANBgkqhkiG9w0BAQsFAAOCAQEAX/OwBM96e9ys9Pb8rXw0hUCn
yKT4Ysku9JSKmZ2LB4vTHUwdRBHSQP31um8E9ZNy0Hprqz6cYGXm7xnXVYwMjQnY
iQSW8h5zyy4G8VBorXf7Uo5S7EOgKayIFk8Eo4G7YshayzZ5bhH2zho8Fd2lSL0Z
epP1E0KYLsMwOuf7ePrimxixqkC6q5x7pTQND1P/XbPdgYoCS5HS5u3T1r+X01fa
cUXRdSgi8/vjP3tPo5Vmpi9awMiD8TFHpCtgmEN9mJ9mY97bLKnRwJTdEinculzU
mTSZD6w0NfCIuqJsFykjjb9+Fl1nyUSaZms6xgrV7l2UNtV+uk3Ou3WICj8kAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:54 2026 by rpki-client