Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F214D8C03A7D11F1A337A1ABCE1D38B0.roa
File: F214D8C03A7D11F1A337A1ABCE1D38B0.roa (raw, json)
Hash identifier: f6gdOxQTzOaGErIK7wd5rnhflnz1CyCugf3uG4E0Iwk=
Subject key identifier: A0:7E:4D:55:F8:26:E9:A8:16:76:40:B1:6B:37:E9:91:B3:5A:77:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F214D8C03A7D11F1A337A1ABCE1D38B0.roa
Signing time: Fri 17 Apr 2026 16:53:23 +0000
ROA not before: Fri 17 Apr 2026 16:53:19 +0000
ROA not after: Sun 24 May 2026 16:53:19 +0000
asID: 55020
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116207 (0x1c5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 16:53:19 2026 GMT
Not After : May 24 16:53:19 2026 GMT
Subject: CN=69e26583-a910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:7d:3a:76:fc:6e:87:8c:d8:09:27:4d:41:
5a:e8:8c:fe:ce:74:42:28:8a:e8:0c:e5:79:88:f5:
28:7e:62:c1:7b:ea:af:7c:60:75:ef:a5:0e:f5:14:
3b:f2:12:da:32:ea:f1:f3:b9:71:c2:41:d4:be:5b:
32:ca:b6:e7:30:90:6e:2f:b6:12:e7:37:ca:d1:d9:
d7:ea:69:83:d3:5b:80:e8:0d:bf:7e:8d:54:5f:79:
7d:ef:50:8c:70:95:99:69:77:e6:c2:ed:42:e2:fe:
70:c6:d7:0e:45:76:e7:82:19:11:80:55:6b:cb:e9:
24:ea:0b:d7:0a:d7:d4:40:fa:9c:62:ba:5c:fd:b4:
bb:f5:86:d9:49:7f:30:33:fe:36:ec:0d:67:3b:40:
ca:e2:3f:c3:a5:2f:71:45:9e:8c:e2:21:55:01:77:
89:d6:e6:0e:51:1b:f7:2b:07:00:e3:5a:a5:63:3e:
43:1d:08:85:fd:e4:f2:ec:c2:c3:78:94:6e:9e:27:
74:1e:cf:2c:c4:b2:56:23:95:2a:61:d8:02:43:5c:
de:27:72:5d:58:bf:26:d8:0a:96:d9:d0:f1:59:f0:
00:08:7b:7c:68:e4:47:dc:8b:b6:8f:83:6f:d1:c8:
de:69:71:4b:2d:ba:94:ac:0e:f8:e8:e7:17:ff:3b:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:4D:55:F8:26:E9:A8:16:76:40:B1:6B:37:E9:91:B3:5A:77:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F214D8C03A7D11F1A337A1ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:88:9e:6e:57:a0:d8:37:31:04:67:23:c7:d9:e3:25:9c:ec:
e7:b0:af:5f:d2:a8:d0:92:ee:3b:bc:51:97:f1:5e:41:5f:2d:
a9:dd:36:76:42:b5:3b:d2:a4:4e:b9:6a:d6:14:ba:4b:09:02:
e2:fd:0b:06:0a:79:45:7b:95:3a:3d:93:ab:dd:0f:6b:41:9f:
44:41:b9:db:69:6e:c7:a7:1a:bc:eb:da:4e:44:ef:89:5b:1d:
a0:ed:22:08:ba:84:b1:09:6e:58:3e:a0:f9:70:ad:36:82:3e:
01:71:57:b8:eb:3a:d8:ee:c9:aa:4a:60:09:8e:b8:dd:74:e2:
56:6a:61:2e:70:4f:50:b7:5f:25:a3:21:3a:08:29:14:27:4c:
2a:b0:5e:b3:2c:bf:6e:44:a6:b5:3a:d8:1f:01:b4:90:40:68:
f0:26:c7:f2:2e:cc:80:b8:f1:3c:fc:98:fd:d1:60:2d:9c:e1:
4e:2d:73:6c:7e:93:ff:f9:70:b0:97:ef:cc:f3:16:54:a7:22:
24:50:ea:f1:a1:0c:62:5a:56:4f:14:11:57:70:3c:cc:d5:95:
b1:c1:54:c0:89:c5:18:76:65:93:75:0f:4d:95:bc:bb:0a:ef:
2a:4e:c7:dc:b7:45:50:54:b3:d3:4b:d3:3a:ff:83:38:46:e2:
07:4f:92:44
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAcXvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE3MTY1MzE5WhcNMjYwNTI0MTY1MzE5WjAYMRYw
FAYDVQQDEw02OWUyNjU4My1hOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzzx9Onb8boeM2AknTUFa6Iz+znRCKIroDOV5iPUofmLBe+qvfGB176UO
9RQ78hLaMurx87lxwkHUvlsyyrbnMJBuL7YS5zfK0dnX6mmD01uA6A2/fo1UX3l9
71CMcJWZaXfmwu1C4v5wxtcORXbnghkRgFVry+kk6gvXCtfUQPqcYrpc/bS79YbZ
SX8wM/427A1nO0DK4j/DpS9xRZ6M4iFVAXeJ1uYOURv3KwcA41qlYz5DHQiF/eTy
7MLDeJRunid0Hs8sxLJWI5UqYdgCQ1zeJ3JdWL8m2AqW2dDxWfAACHt8aORH3Iu2
j4Nv0cjeaXFLLbqUrA746OcX/zuiIQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFKB+
TVX4JumoFnZAsWs36ZGzWnfVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMjE0RDhDMDNBN0QxMUYxQTMzN0ExQUJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBASaWcADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBAI+Inm5XoNg3MQRnI8fZ4yWc7Oewr1/SqNCS
7ju8UZfxXkFfLandNnZCtTvSpE65atYUuksJAuL9CwYKeUV7lTo9k6vdD2tBn0RB
udtpbsenGrzr2k5E74lbHaDtIgi6hLEJblg+oPlwrTaCPgFxV7jrOtjuyapKYAmO
uN104lZqYS5wT1C3XyWjIToIKRQnTCqwXrMsv25EprU62B8BtJBAaPAmx/IuzIC4
8Tz8mP3RYC2c4U4tc2x+k//5cLCX78zzFlSnIiRQ6vGhDGJaVk8UEVdwPMzVlbHB
VMCJxRh2ZZN1D02VvLsK7ypOx9y3RVBUs9NL0zr/gzhG4gdPkkQ=
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:40 2026 by rpki-client