Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7ED81AE2E6F11F1ACBFB3CFDAE4EC9C.roa
File: E7ED81AE2E6F11F1ACBFB3CFDAE4EC9C.roa (raw, json)
Hash identifier: rN0B7yaicfIihH+JirHLEfreBg8i5KPvZd0PnevVnw0=
Subject key identifier: 3F:C9:6E:3D:32:81:5B:EA:65:CF:E2:4C:53:D7:7E:F5:59:5E:DD:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C211
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7ED81AE2E6F11F1ACBFB3CFDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 08:42:39 +0000
ROA not before: Thu 02 Apr 2026 08:42:35 +0000
ROA not after: Wed 06 May 2026 08:42:35 +0000
asID: 44559
IP address blocks: 154.209.205.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115217 (0x1c211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 08:42:35 2026 GMT
Not After : May 6 08:42:35 2026 GMT
Subject: CN=69ce2bff-f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:6b:43:15:a5:c2:e7:8b:3f:9c:d4:81:db:
7c:9f:c8:82:cf:bb:08:5a:89:2f:25:b5:a4:28:93:
39:9d:bf:df:80:d6:88:20:71:af:33:0a:9c:bc:6c:
ce:ec:06:c3:67:5f:0f:92:12:ae:d7:55:f8:f5:3d:
db:68:5a:13:2b:7c:77:4f:2e:d2:d8:a2:ee:37:d4:
62:cc:d5:4c:09:6b:96:bf:68:47:1c:8d:68:30:0e:
de:91:9f:d9:f2:b6:ba:85:db:d9:23:7f:b8:04:8c:
65:4a:40:50:01:a4:82:5a:20:c1:e9:c1:1a:e8:2d:
97:bf:4d:1a:7c:68:e3:6e:a7:33:4d:99:35:b4:84:
5b:40:01:e7:c5:1b:59:cb:d7:89:ac:c1:dc:d9:aa:
3b:93:62:8f:4f:28:09:50:26:5c:25:be:f7:0b:ef:
de:28:8d:a7:2a:cf:e6:2d:f8:8e:b9:29:ce:7e:10:
8f:7a:99:11:e9:e6:82:ce:12:39:f2:2b:5c:7c:9e:
40:0d:c5:e1:f8:90:51:e1:4c:1a:cb:6f:0b:3c:ce:
27:0a:07:e1:63:b4:3e:9c:26:8f:c1:27:46:35:43:
c1:bc:6e:e0:f2:59:f9:07:a1:66:3a:87:6f:08:04:
8c:f7:30:f8:08:89:bd:e0:dc:b6:73:90:5f:f3:71:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:6E:3D:32:81:5B:EA:65:CF:E2:4C:53:D7:7E:F5:59:5E:DD:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7ED81AE2E6F11F1ACBFB3CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.205.0/24
154.209.207.0/24
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0-154.219.206.255
Signature Algorithm: sha256WithRSAEncryption
a8:d7:eb:b6:98:f6:80:9e:c5:98:60:25:d8:67:a0:4d:48:48:
22:53:8a:d7:f7:a6:04:e4:3b:d5:35:c0:73:1a:1c:76:ee:2b:
b7:e3:a7:67:1b:31:ef:6b:37:eb:3d:8a:4c:e2:1b:6c:26:74:
15:17:13:04:88:45:1b:43:d3:e2:a4:da:a6:b6:7a:0d:06:02:
8d:62:89:0f:b9:90:7e:4a:68:ca:2b:80:42:03:93:be:22:ed:
4a:7d:aa:d0:6e:4e:3c:55:3d:c8:78:61:b7:22:c3:e5:5b:c7:
07:c2:e0:c3:a8:b3:0b:c4:ea:5d:aa:1f:f4:97:e0:58:07:bd:
dc:63:35:c3:aa:dd:1c:20:cc:a1:f4:24:51:34:1f:31:40:bd:
74:d3:78:fc:15:89:c9:59:f6:d2:0b:68:91:01:6b:a2:c0:0e:
00:f9:61:47:81:16:14:7a:ab:e8:8c:c4:21:e3:70:e2:b1:dc:
53:85:f9:7b:a1:93:2f:88:b4:01:56:b2:9e:75:c9:4a:c6:d7:
f5:3c:3f:9a:7b:9d:e3:66:e9:3c:de:88:0b:dc:ab:0d:37:95:
9e:62:5f:f3:68:ff:33:1b:91:1f:63:b5:34:06:ac:ef:ac:29:
d2:aa:2a:04:cf:ab:51:17:f7:a4:f3:49:96:f0:63:82:c5:a1:
dd:c1:de:21
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAcIRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDAyMDg0MjM1WhcNMjYwNTA2MDg0MjM1WjAYMRYw
FAYDVQQDEw02OWNlMmJmZi1mMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAms1rQxWlwueLP5zUgdt8n8iCz7sIWokvJbWkKJM5nb/fgNaIIHGvMwqc
vGzO7AbDZ18PkhKu11X49T3baFoTK3x3Ty7S2KLuN9RizNVMCWuWv2hHHI1oMA7e
kZ/Z8ra6hdvZI3+4BIxlSkBQAaSCWiDB6cEa6C2Xv00afGjjbqczTZk1tIRbQAHn
xRtZy9eJrMHc2ao7k2KPTygJUCZcJb73C+/eKI2nKs/mLfiOuSnOfhCPepkR6eaC
zhI58itcfJ5ADcXh+JBR4Uway28LPM4nCgfhY7Q+nCaPwSdGNUPBvG7g8ln5B6Fm
OodvCASM9zD4CIm94Ny2c5Bf83HBYQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFD/J
bj0ygVvqZc/iTFPXfvVZXt2FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0VEODFBRTJFNkYxMUYxQUNCRkIzQ0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmtHNAwQAmtHPAwQAmtob
MAwDBACa28EDBACa28IDBACa28UDBACa28gwDAMEAprbzAMEAJrbzjANBgkqhkiG
9w0BAQsFAAOCAQEAqNfrtpj2gJ7FmGAl2GegTUhIIlOK1/emBOQ71TXAcxocdu4r
t+OnZxsx72s36z2KTOIbbCZ0FRcTBIhFG0PT4qTaprZ6DQYCjWKJD7mQfkpoyiuA
QgOTviLtSn2q0G5OPFU9yHhhtyLD5VvHB8Lgw6izC8TqXaof9JfgWAe93GM1w6rd
HCDMofQkUTQfMUC9dNN4/BWJyVn20gtokQFrosAOAPlhR4EWFHqr6IzEIeNw4rHc
U4X5e6GTL4i0AVaynnXJSsbX9Tw/mnud42bpPN6IC9yrDTeVnmJf82j/MxuRH2O1
NAas76wp0qoqBM+rURf3pPNJlvBjgsWh3cHeIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:26 2026 by rpki-client