Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED154D8A4F0611F19952D7E0CE1D38B0.roa
File: ED154D8A4F0611F19952D7E0CE1D38B0.roa (raw, json)
Hash identifier: fa8ICnin/Wm/Z6JWPSrYmmfzKucrfi1jreF5JjlWQhY=
Subject key identifier: B3:C4:4C:AC:B8:7F:86:63:EA:AE:E4:9D:95:7F:78:C9:37:43:AC:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED154D8A4F0611F19952D7E0CE1D38B0.roa
Signing time: Wed 13 May 2026 20:04:20 +0000
ROA not before: Wed 13 May 2026 20:04:15 +0000
ROA not after: Mon 18 Jan 2027 20:04:15 +0000
asID: 136907
IP address blocks: 154.81.16.0/20 maxlen: 24
154.83.0.0/23 maxlen: 24
154.86.32.0/20 maxlen: 24
154.86.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117637 (0x1cb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 20:04:15 2026 GMT
Not After : Jan 18 20:04:15 2027 GMT
Subject: CN=6a04d943-afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:83:2a:9d:85:5a:92:3d:f0:99:98:da:fe:
bb:fa:f0:df:7d:36:d7:ca:5d:6e:de:11:83:78:a9:
0a:cb:18:bc:49:da:38:21:04:57:da:91:a3:36:cc:
1c:53:1f:9a:c9:aa:6b:05:73:b0:e4:96:b1:49:9b:
45:09:5f:3a:99:10:83:71:a8:34:11:44:9b:a9:99:
0b:79:45:10:4e:b1:d1:5b:eb:c5:f4:4d:e2:f4:31:
34:c7:4c:c5:33:10:24:3c:66:ad:b4:54:2a:56:3a:
8d:37:b4:fc:dc:9a:96:92:32:97:22:9a:48:41:2a:
94:e5:50:c5:3c:c6:10:3d:7b:a9:91:59:01:2a:e8:
1a:1d:23:d9:a1:bc:83:70:26:8c:31:66:df:ef:43:
d3:0e:7d:ae:f6:be:a2:6e:59:fe:34:63:73:01:c2:
3b:ea:15:ec:ff:23:27:e5:ef:2a:02:48:e7:44:15:
49:a1:94:e3:c4:5a:08:4a:2f:ea:86:95:8b:bf:cd:
92:7d:06:02:36:e6:d4:e6:94:fa:60:4f:fa:35:35:
70:6f:61:39:ce:43:07:b5:22:c9:3f:88:a2:41:8d:
40:6c:51:26:99:0f:c3:52:82:8f:55:62:72:26:55:
bc:64:b5:64:dd:a3:b7:df:23:02:49:5e:a4:d5:cb:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:4C:AC:B8:7F:86:63:EA:AE:E4:9D:95:7F:78:C9:37:43:AC:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED154D8A4F0611F19952D7E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.16.0/20
154.83.0.0/23
154.86.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:f6:4d:85:59:80:cc:13:b3:66:cd:33:de:c2:fd:0b:ff:f4:
83:75:d5:e3:b1:cd:3c:34:aa:54:01:7c:18:a4:e3:dc:cf:d1:
c1:38:d2:c2:77:55:cd:14:ba:21:e1:ae:40:aa:84:a1:d5:c7:
f8:58:f0:d7:d8:56:8c:7f:96:88:c6:26:3b:69:8c:3f:4c:31:
e1:dc:e7:6f:f1:f2:0e:37:1f:af:6f:ec:19:26:2b:c7:02:81:
8e:5a:f5:f9:1a:79:bc:b5:2d:92:f7:5c:ee:42:a2:fb:da:fa:
f7:bf:f1:1a:eb:4e:0c:08:ca:59:c7:15:62:84:66:62:51:de:
eb:72:56:f8:8c:a7:3d:c1:86:c6:bb:bc:2c:fa:86:8e:78:5a:
3a:da:75:9c:7d:9e:eb:cc:a8:01:d1:d8:b7:1f:e2:ec:8e:b1:
68:35:6c:11:a0:ba:f5:f1:b0:83:6b:80:01:12:74:7e:ee:4c:
33:10:1a:03:fd:58:45:58:08:00:64:5c:a5:46:d7:fd:d6:44:
c2:5d:a4:7e:32:f2:ea:a0:a6:d7:21:d3:d8:98:8c:2b:8a:0c:
5c:0b:da:fa:bc:11:fa:45:54:bb:d6:3f:33:23:73:e4:d0:92:
f9:32:85:47:58:0a:80:aa:aa:80:af:d5:a8:7d:5a:f2:3a:42:
6d:d9:ef:36
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAcuFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTEzMjAwNDE1WhcNMjcwMTE4MjAwNDE1WjAYMRYw
FAYDVQQDEw02YTA0ZDk0My1hZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp2eDKp2FWpI98JmY2v67+vDffTbXyl1u3hGDeKkKyxi8Sdo4IQRX2pGj
NswcUx+ayaprBXOw5JaxSZtFCV86mRCDcag0EUSbqZkLeUUQTrHRW+vF9E3i9DE0
x0zFMxAkPGattFQqVjqNN7T83JqWkjKXIppIQSqU5VDFPMYQPXupkVkBKugaHSPZ
obyDcCaMMWbf70PTDn2u9r6ibln+NGNzAcI76hXs/yMn5e8qAkjnRBVJoZTjxFoI
Si/qhpWLv82SfQYCNubU5pT6YE/6NTVwb2E5zkMHtSLJP4iiQY1AbFEmmQ/DUoKP
VWJyJlW8ZLVk3aO33yMCSV6k1ctCNQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFLPE
TKy4f4Zj6q7knZV/eMk3Q6wQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRDE1NEQ4QTRGMDYxMUYxOTk1MkQ3RTBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEmlEQAwQBmlMAAwQFmlYg
MA0GCSqGSIb3DQEBCwUAA4IBAQBu9k2FWYDME7NmzTPewv0L//SDddXjsc08NKpU
AXwYpOPcz9HBONLCd1XNFLoh4a5AqoSh1cf4WPDX2FaMf5aIxiY7aYw/TDHh3Odv
8fIONx+vb+wZJivHAoGOWvX5Gnm8tS2S91zuQqL72vr3v/Ea604MCMpZxxVihGZi
Ud7rclb4jKc9wYbGu7ws+oaOeFo62nWcfZ7rzKgB0di3H+LsjrFoNWwRoLr18bCD
a4ABEnR+7kwzEBoD/VhFWAgAZFylRtf91kTCXaR+MvLqoKbXIdPYmIwrigxcC9r6
vBH6RVS71j8zI3Pk0JL5MoVHWAqAqqqAr9WofVryOkJt2e82
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:18 2026 by rpki-client