Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A32642397D11F1BBE44013CF1D38B0.roa
File: F4A32642397D11F1BBE44013CF1D38B0.roa (raw, json)
Hash identifier: /4CsCPe6ox28ruXg0Fn+cjdA6QGudOs/lRRH3lZU8fM=
Subject key identifier: 2F:29:71:00:40:71:A5:45:4E:93:1D:76:B8:5E:8B:1A:D3:08:B5:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C595
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A32642397D11F1BBE44013CF1D38B0.roa
Signing time: Thu 16 Apr 2026 10:20:57 +0000
ROA not before: Thu 16 Apr 2026 10:20:52 +0000
ROA not after: Thu 30 Apr 2026 10:20:52 +0000
asID: 401783
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116117 (0x1c595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 10:20:52 2026 GMT
Not After : Apr 30 10:20:52 2026 GMT
Subject: CN=69e0b808-7f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:60:10:7e:56:1e:34:68:0e:f5:d6:20:be:
0d:18:bf:49:42:c5:5f:9b:48:47:e2:3c:48:b7:6a:
11:71:69:c2:d0:72:10:94:48:5d:41:1e:eb:49:3c:
32:8f:6f:bd:ee:e9:ec:8c:ce:32:ce:9b:b9:cc:67:
88:d7:34:41:0a:a3:62:ec:8d:23:22:e7:11:85:c0:
5f:80:cd:a3:19:d3:fb:62:79:cd:93:d7:8e:0b:ac:
b8:f1:32:9c:6a:63:13:ef:89:64:96:08:57:71:dd:
a5:ec:f4:11:79:59:4c:b4:a8:7e:58:61:ba:24:8a:
ac:db:a0:57:af:5c:ae:c6:fd:76:43:92:5c:e9:ea:
60:3a:f8:bc:a6:8d:e3:09:6c:d6:dc:64:94:8a:79:
79:9e:a4:42:63:e8:60:3a:cf:db:3c:20:78:43:99:
5d:87:8e:dc:fa:71:29:a7:d2:1d:4b:0f:d1:30:4e:
33:67:cb:03:d1:ec:ff:ec:8e:d3:31:52:8b:54:b9:
de:58:1f:76:2d:d2:f9:d2:8b:0c:ce:46:ba:ca:20:
6c:b2:7f:31:51:d3:69:ca:7f:69:de:25:71:5e:30:
d8:e1:59:bc:74:b6:11:ca:1f:8a:03:d9:f9:75:58:
ef:32:92:35:c0:e2:2e:58:2b:0a:f3:c3:a4:09:e0:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:71:00:40:71:A5:45:4E:93:1D:76:B8:5E:8B:1A:D3:08:B5:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A32642397D11F1BBE44013CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.160.255
Signature Algorithm: sha256WithRSAEncryption
97:78:46:4d:81:f1:55:17:cc:b7:8c:02:31:ba:ef:f1:0c:f2:
9b:91:ea:fd:ee:e7:53:04:bc:64:18:72:92:2f:1f:cd:e1:1e:
97:e8:4d:03:99:3f:22:ec:22:b5:53:4c:9c:45:5e:8e:6e:18:
47:f4:8f:51:d8:91:90:a8:88:8d:7b:8c:ab:b1:de:d6:d8:86:
df:b0:ed:33:55:2c:54:64:c9:2f:8d:ff:fe:a7:77:de:32:cc:
d8:b3:66:fe:46:01:e3:c9:8c:2c:22:e5:ae:22:88:3c:1b:7f:
15:dd:6e:07:a1:a9:55:5d:6a:e9:18:9a:91:8d:41:d1:9b:ec:
04:cd:38:28:55:fd:71:96:18:b8:cf:e8:88:d8:2e:42:e2:11:
33:61:53:78:85:78:f2:f2:a9:a7:de:46:c7:07:36:e6:d8:bb:
58:f6:1a:c4:83:c4:4c:d9:8a:32:98:93:9a:b3:23:7a:6e:a8:
00:e7:c8:ad:13:d7:b4:f3:64:0f:d7:58:20:b1:f0:d5:2f:ba:
0d:2b:42:45:9a:36:39:54:f9:a5:eb:f6:1b:7e:3c:18:00:80:
9a:ab:2d:36:e6:a0:20:c7:e4:c3:35:f1:34:56:6e:60:ce:1d:
ea:bc:ef:16:f6:78:13:59:d1:57:d2:76:c1:88:ac:85:fb:49:
15:26:39:b7
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAcWVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE2MTAyMDUyWhcNMjYwNDMwMTAyMDUyWjAYMRYw
FAYDVQQDEw02OWUwYjgwOC03ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2a1gEH5WHjRoDvXWIL4NGL9JQsVfm0hH4jxIt2oRcWnC0HIQlEhdQR7r
STwyj2+97unsjM4yzpu5zGeI1zRBCqNi7I0jIucRhcBfgM2jGdP7YnnNk9eOC6y4
8TKcamMT74lklghXcd2l7PQReVlMtKh+WGG6JIqs26BXr1yuxv12Q5Jc6epgOvi8
po3jCWzW3GSUinl5nqRCY+hgOs/bPCB4Q5ldh47c+nEpp9IdSw/RME4zZ8sD0ez/
7I7TMVKLVLneWB92LdL50osMzka6yiBssn8xUdNpyn9p3iVxXjDY4Vm8dLYRyh+K
A9n5dVjvMpI1wOIuWCsK88OkCeCfYQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFC8p
cQBAcaVFTpMddrheixrTCLVqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNEEzMjY0MjM5N0QxMUYxQkJFNDQwMTNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBmsiCAwQAmsiMAwQAmsiO
AwQAmsiaMAwDBAKayJwDBACayKAwDQYJKoZIhvcNAQELBQADggEBAJd4Rk2B8VUX
zLeMAjG67/EM8puR6v3u51MEvGQYcpIvH83hHpfoTQOZPyLsIrVTTJxFXo5uGEf0
j1HYkZCoiI17jKux3tbYht+w7TNVLFRkyS+N//6nd94yzNizZv5GAePJjCwi5a4i
iDwbfxXdbgehqVVdaukYmpGNQdGb7ATNOChV/XGWGLjP6IjYLkLiETNhU3iFePLy
qafeRscHNubYu1j2GsSDxEzZijKYk5qzI3puqADnyK0T17TzZA/XWCCx8NUvug0r
QkWaNjlU+aXr9ht+PBgAgJqrLTbmoCDH5MM18TRWbmDOHeq87xb2eBNZ0VfSdsGI
rIX7SRUmObc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:16 2026 by rpki-client