Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E51A0EC864D611F18EBAC415CF1D38B0.roa
File: E51A0EC864D611F18EBAC415CF1D38B0.roa (raw, json)
Hash identifier: EcpXd5WGsCfteF0TOe+jVHh2P3OrI667wrEAxgK2V8w=
Subject key identifier: 8F:04:DB:17:B4:9A:91:68:8A:21:83:1E:42:67:C8:AA:5F:CB:65:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D28A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E51A0EC864D611F18EBAC415CF1D38B0.roa
Signing time: Wed 10 Jun 2026 14:15:56 +0000
ROA not before: Wed 10 Jun 2026 14:15:51 +0000
ROA not after: Fri 17 Jul 2026 14:15:51 +0000
asID: 139613
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119434 (0x1d28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 14:15:51 2026 GMT
Not After : Jul 17 14:15:51 2026 GMT
Subject: CN=6a29719c-c744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:13:90:cd:d3:33:6b:3a:cb:5c:37:3d:1b:
cd:b5:80:bf:43:76:8e:f8:d4:d6:5f:a4:bd:8c:f9:
51:f9:d2:b4:30:01:30:d4:7b:79:97:57:09:20:57:
25:8a:ba:8e:93:7b:b4:7b:a2:76:36:15:32:e2:05:
80:7a:22:31:2b:ac:84:33:9a:74:f5:ae:1f:e1:3d:
df:57:1c:b1:93:f9:55:96:d8:b6:8e:cc:21:c9:05:
2e:4f:c0:3c:db:ad:f2:b6:42:5c:34:58:dd:81:08:
77:48:cb:f7:a4:b1:9f:e8:38:31:c4:67:c8:39:17:
86:70:b9:96:6f:73:ef:86:2f:b1:ec:12:97:47:f9:
d9:15:90:72:9b:af:fb:a1:10:e4:ec:24:99:b5:e2:
97:a0:92:f7:9c:71:b3:38:04:df:16:64:dd:6f:ab:
4f:be:5b:4f:87:23:29:8d:07:cb:40:1d:8d:5b:23:
8a:64:02:c8:b7:17:08:4e:2b:f8:20:69:a9:2c:e0:
87:9e:ea:bb:79:5e:85:f6:ff:52:2e:e8:12:2b:3f:
c7:1a:11:14:04:ab:37:dd:ca:41:c3:c1:b6:59:8e:
68:03:4a:56:63:e5:82:74:2c:0f:7b:3f:88:8d:50:
00:c8:cc:0f:c4:86:cd:4c:21:e7:7e:85:4a:fc:f3:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:DB:17:B4:9A:91:68:8A:21:83:1E:42:67:C8:AA:5F:CB:65:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E51A0EC864D611F18EBAC415CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.140.0/24
154.81.161.0/24
154.81.164.0/24
154.81.178.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:22:ae:86:b1:38:3c:15:f0:c2:f1:06:55:58:93:6b:fc:01:
a0:1b:dc:10:ab:3e:0f:4a:19:ef:74:e3:5c:d0:35:ab:62:97:
bf:ea:f2:92:1d:9a:da:b8:0e:57:d3:84:5e:b4:02:44:7f:5e:
ca:0d:ea:f6:b1:ad:b5:59:58:2b:33:ad:16:3f:46:0b:65:d8:
ed:02:34:02:9c:16:cf:10:98:ff:29:ad:86:61:75:07:55:4c:
d1:07:82:1b:d1:67:ea:4c:4e:91:97:ca:10:83:af:56:b8:2f:
aa:31:2f:9f:49:21:a6:49:9f:0a:7d:d9:45:eb:d2:08:2e:1b:
8c:71:a6:70:d2:c9:31:8a:51:f0:94:74:c9:2b:e6:ea:5d:77:
5f:5a:a1:65:ce:3c:2e:f9:66:bc:99:73:79:78:0e:1a:2e:76:
7e:0f:55:35:52:85:31:e2:6a:0b:5b:90:2f:33:4b:21:33:e6:
46:d8:d2:7f:3b:44:23:88:45:ae:fc:d4:a1:1c:cc:5e:85:ff:
b7:01:23:e3:09:ce:ca:ca:8c:52:ad:9b:a8:2f:9a:20:87:78:
68:f3:b1:6c:60:68:e8:9e:b6:7e:ac:88:78:19:fb:2d:a3:de:
b1:cb:a3:85:44:e1:64:cd:07:b3:20:03:7a:3c:0c:15:1b:75:
9c:3a:cb:17
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIDAdKKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjEwMTQxNTUxWhcNMjYwNzE3MTQxNTUxWjAYMRYw
FAYDVQQDEw02YTI5NzE5Yy1jNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3aYTkM3TM2s6y1w3PRvNtYC/Q3aO+NTWX6S9jPlR+dK0MAEw1Ht5l1cJ
IFclirqOk3u0e6J2NhUy4gWAeiIxK6yEM5p09a4f4T3fVxyxk/lVlti2jswhyQUu
T8A8263ytkJcNFjdgQh3SMv3pLGf6DgxxGfIOReGcLmWb3Pvhi+x7BKXR/nZFZBy
m6/7oRDk7CSZteKXoJL3nHGzOATfFmTdb6tPvltPhyMpjQfLQB2NWyOKZALItxcI
Tiv4IGmpLOCHnuq7eV6F9v9SLugSKz/HGhEUBKs33cpBw8G2WY5oA0pWY+WCdCwP
ez+IjVAAyMwPxIbNTCHnfoVK/PO8eQIDAQABo4IDEjCCAw4wHQYDVR0OBBYEFI8E
2xe0mpFoiiGDHkJnyKpfy2WjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNTFBMEVDODY0RDYxMUYxOEVCQUM0MTVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAJpRPQMEAJpRjAMEAJpR
oQMEAJpRpAMEAJpRsgMEAJpRtQMEAJpRvwMEAJpSEgMEAJpSFAMEAJpTgAMEAJpT
hwMEAJpTiQMEAJpTjQMEAJpTngMEAJpTuwMEAZpTvgMEAJpT0QMEAJpT0wMEAJpT
9zANBgkqhkiG9w0BAQsFAAOCAQEAuCKuhrE4PBXwwvEGVViTa/wBoBvcEKs+D0oZ
73TjXNA1q2KXv+rykh2a2rgOV9OEXrQCRH9eyg3q9rGttVlYKzOtFj9GC2XY7QI0
ApwWzxCY/ymthmF1B1VM0QeCG9Fn6kxOkZfKEIOvVrgvqjEvn0khpkmfCn3ZRevS
CC4bjHGmcNLJMYpR8JR0ySvm6l13X1qhZc48LvlmvJlzeXgOGi52fg9VNVKFMeJq
C1uQLzNLITPmRtjSfztEI4hFrvzUoRzMXoX/twEj4wnOysqMUq2bqC+aIId4aPOx
bGBo6J62fqyIeBn7LaPescujhUThZM0HsyADejwMFRt1nDrLFw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:02:20 2026 by rpki-client