Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C2E6365B9F11F18BCACB08CF1D38B0.roa
File: D2C2E6365B9F11F18BCACB08CF1D38B0.roa (raw, json)
Hash identifier: uZtZJw+RBuZYoMUiEVpvTqAp4RwXMxKq4hnNL9K0/6w=
Subject key identifier: 72:90:5F:49:AB:BB:8C:9F:95:39:54:1D:B8:68:94:FD:60:24:E3:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D085
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C2E6365B9F11F18BCACB08CF1D38B0.roa
Signing time: Fri 29 May 2026 20:49:02 +0000
ROA not before: Fri 29 May 2026 20:48:57 +0000
ROA not after: Wed 01 Jul 2026 20:48:57 +0000
asID: 62240
IP address blocks: 154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.52.0/24 maxlen: 24
154.196.53.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118917 (0x1d085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 20:48:57 2026 GMT
Not After : Jul 1 20:48:57 2026 GMT
Subject: CN=6a19fbbe-b3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:60:ba:f0:3c:d6:51:88:1a:ae:aa:89:ab:
06:cc:30:26:3a:b5:15:49:6b:8e:15:68:d2:64:84:
7b:af:01:e6:1e:3c:81:2a:43:9e:04:6f:d6:8b:1c:
96:13:3a:98:a2:f8:77:16:67:45:40:19:a3:a1:18:
cc:64:3a:83:a9:16:e3:2e:01:2f:41:e8:a3:9b:05:
01:1c:13:b9:4b:07:36:c6:19:8b:18:c5:bb:38:65:
55:40:29:a0:8f:8c:bc:ac:a9:d5:d0:73:3c:90:10:
04:e6:5f:2d:ab:62:3b:f7:61:8a:b0:a0:e9:25:94:
e1:f9:78:27:2f:6f:4b:cb:91:66:fd:77:a7:93:f6:
96:7a:5e:17:5e:19:1a:68:b1:9b:0d:64:cd:d8:02:
b5:f0:86:86:6d:69:57:da:13:54:36:4d:af:da:bc:
2a:e5:cb:dc:8e:eb:8b:09:15:e3:e9:d0:5c:a9:01:
b3:bb:70:3b:a3:5a:f8:19:fd:7c:20:e6:60:c1:9d:
ab:ec:e4:41:80:4b:f7:57:ee:20:ca:db:fe:a7:7b:
99:bf:27:18:69:1e:c4:9a:d5:5d:e8:63:4f:fe:f0:
cc:e7:e8:ac:ab:b6:65:d5:e8:be:05:4c:ef:65:82:
8a:1c:ee:c2:4d:89:02:57:00:df:48:7b:61:d2:92:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:90:5F:49:AB:BB:8C:9F:95:39:54:1D:B8:68:94:FD:60:24:E3:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C2E6365B9F11F18BCACB08CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.99.0-154.194.100.255
154.196.22.0/24
154.196.50.0/24
154.196.52.0-154.196.57.255
Signature Algorithm: sha256WithRSAEncryption
72:f3:98:d0:85:49:f9:0e:dc:8c:01:78:e8:62:23:21:be:a0:
06:2a:1b:f4:7a:09:e6:9e:7e:07:03:9a:eb:3b:26:00:b3:c6:
5f:3f:1a:f6:40:98:9e:47:f0:0d:09:84:14:1f:76:b6:71:8f:
06:c5:6a:e5:75:6d:e9:5e:9b:b1:71:19:00:e7:de:52:c3:fe:
8d:47:ba:54:80:99:ad:b5:7e:9c:52:a1:ad:8b:c7:5e:37:ee:
bd:01:20:75:3f:0c:fb:04:3e:7c:1f:0b:7c:41:36:9e:12:53:
a3:d5:16:47:19:76:0b:96:09:f3:94:a0:2e:63:73:77:4c:64:
c9:8e:d8:78:44:00:08:b8:ea:40:58:f7:19:0b:5d:6a:a8:5f:
76:66:7d:c3:df:de:0e:76:0b:55:bf:8e:ff:d2:49:ce:94:75:
8c:e7:cc:3f:0e:68:03:69:e5:9f:bd:7a:b1:88:ce:4d:7e:03:
dc:45:3a:76:c5:ee:16:3f:18:23:b0:9d:82:2d:a8:9c:00:e8:
5f:90:ba:5e:b5:20:58:bf:87:95:c1:72:03:35:05:e4:5f:ff:
8c:f8:71:84:fa:fc:58:59:2f:51:0f:75:f1:eb:0f:19:05:2c:
07:6c:b9:a8:eb:c2:e3:47:40:e5:52:de:93:69:4d:19:fd:66:
8c:e9:1e:2c
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAdCFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MjA0ODU3WhcNMjYwNzAxMjA0ODU3WjAYMRYw
FAYDVQQDEw02YTE5ZmJiZS1iM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtXlguvA81lGIGq6qiasGzDAmOrUVSWuOFWjSZIR7rwHmHjyBKkOeBG/W
ixyWEzqYovh3FmdFQBmjoRjMZDqDqRbjLgEvQeijmwUBHBO5Swc2xhmLGMW7OGVV
QCmgj4y8rKnV0HM8kBAE5l8tq2I792GKsKDpJZTh+XgnL29Ly5Fm/Xenk/aWel4X
XhkaaLGbDWTN2AK18IaGbWlX2hNUNk2v2rwq5cvcjuuLCRXj6dBcqQGzu3A7o1r4
Gf18IOZgwZ2r7ORBgEv3V+4gytv+p3uZvycYaR7EmtVd6GNP/vDM5+isq7Zl1ei+
BUzvZYKKHO7CTYkCVwDfSHth0pLqPwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFHKQ
X0mru4yflTlUHbholP1gJOOVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMkMyRTYzNjVCOUYxMUYxOEJDQUNCMDhDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACawmMDBACawmQDBACa
xBYDBACaxDIwDAMEAprENAMEAZrEODANBgkqhkiG9w0BAQsFAAOCAQEAcvOY0IVJ
+Q7cjAF46GIjIb6gBiob9HoJ5p5+BwOa6zsmALPGXz8a9kCYnkfwDQmEFB92tnGP
BsVq5XVt6V6bsXEZAOfeUsP+jUe6VICZrbV+nFKhrYvHXjfuvQEgdT8M+wQ+fB8L
fEE2nhJTo9UWRxl2C5YJ85SgLmNzd0xkyY7YeEQACLjqQFj3GQtdaqhfdmZ9w9/e
DnYLVb+O/9JJzpR1jOfMPw5oA2nln716sYjOTX4D3EU6dsXuFj8YI7Cdgi2onADo
X5C6XrUgWL+HlcFyAzUF5F//jPhxhPr8WFkvUQ918esPGQUsB2y5qOvC40dA5VLe
k2lNGf1mjOkeLA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:00 2026 by rpki-client