Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D74618714111F185C717D6CE1D38B0.roa
File: 42D74618714111F185C717D6CE1D38B0.roa (raw, json)
Hash identifier: EaIh2CEzRAJHBRZ+SIbCFGehcSGdKyTvm2TmRGf6gag=
Subject key identifier: 3F:75:6B:9A:95:B1:43:2B:D6:9B:19:7A:23:0E:A0:95:35:AB:F6:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D55F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D74618714111F185C717D6CE1D38B0.roa
Signing time: Fri 26 Jun 2026 09:27:34 +0000
ROA not before: Fri 26 Jun 2026 09:27:29 +0000
ROA not after: Thu 30 Jul 2026 09:27:29 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120159 (0x1d55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:27:29 2026 GMT
Not After : Jul 30 09:27:29 2026 GMT
Subject: CN=6a3e4605-b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:af:c9:1c:5b:d5:32:cf:d2:e2:1d:9a:9c:
00:fb:3a:23:5a:6f:a8:30:39:ad:59:64:80:f7:0b:
73:f5:9f:25:62:d2:bb:af:7a:81:46:d3:0a:54:39:
11:06:03:ce:60:50:e5:65:a9:ba:29:b9:18:36:1e:
9b:62:74:f5:e7:7f:cf:93:d9:89:c5:30:ec:1e:f5:
5c:80:ff:ef:06:e0:f8:a0:0f:7b:37:0c:08:2b:75:
c1:e9:d1:24:5c:db:fb:e8:45:4c:13:c9:42:67:ac:
df:9d:45:fe:41:b8:49:d0:7d:e7:e5:c7:59:93:95:
e8:aa:56:68:e5:b5:d2:02:70:b7:b2:42:6e:a7:f5:
b4:e8:3c:ee:3b:c0:58:4f:d3:c1:f4:9a:6a:e8:46:
3c:51:ce:54:52:13:8f:33:93:22:00:8d:87:44:13:
7e:7a:d4:54:be:cc:29:33:15:21:46:8d:e8:9f:f0:
68:4b:f7:a7:0a:7a:66:7b:da:34:c4:09:f2:df:ed:
bd:f4:a5:1c:14:01:71:3f:4c:e5:7c:a3:45:f5:63:
f8:36:6f:dc:9c:70:ed:d4:7d:38:3f:3b:54:4c:ee:
be:68:17:53:be:dd:8e:53:c3:3a:41:67:92:cc:8a:
35:8d:56:68:07:b8:3d:e6:bd:13:d9:98:d6:94:fc:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:6B:9A:95:B1:43:2B:D6:9B:19:7A:23:0E:A0:95:35:AB:F6:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D74618714111F185C717D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.199.4.0/24
154.200.129.0/24
154.200.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:47:76:0a:70:51:39:e4:f9:60:2d:11:59:de:1a:26:eb:da:
9d:49:07:1f:0f:b7:97:77:56:5d:14:95:71:2d:d7:51:10:2e:
d2:11:68:67:cc:45:a9:bb:02:d9:30:c4:f4:e9:cf:dd:f3:e0:
ce:a8:39:e4:3e:4d:19:83:71:22:23:92:b4:fc:44:aa:4d:91:
3a:b1:15:ee:c0:81:11:d4:f8:e4:ad:8d:61:16:25:05:5f:05:
b2:16:e7:1b:f9:5f:ea:d8:cf:b7:e8:d1:a9:a4:33:41:e4:ba:
35:ad:bc:f9:17:1c:72:33:dc:83:13:cd:3c:22:15:a1:f5:4a:
a2:3f:59:ef:86:71:57:14:2e:da:1d:10:a7:59:f5:06:b7:10:
b0:89:17:33:51:78:4e:a2:3c:b3:ec:72:c9:2a:d7:dc:25:f5:
a0:f9:b8:78:be:b8:c7:8a:7e:ac:3d:14:67:4f:80:33:e2:7c:
af:2c:90:8b:ea:9e:d4:4e:3c:e5:85:43:62:fc:f7:3e:92:67:
ed:37:bf:29:4a:b8:c4:cd:52:30:89:4c:f9:61:4d:11:84:ba:
d3:7c:12:48:f1:36:bb:0b:32:35:32:3a:fe:1a:52:94:b5:9e:
a6:b4:c4:2c:59:ee:36:90:77:ba:08:cd:02:ac:b9:c5:7e:8d:
0d:87:80:e3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAdVfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MDkyNzI5WhcNMjYwNzMwMDkyNzI5WjAYMRYw
FAYDVQQDEw02YTNlNDYwNS1iOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2s2vyRxb1TLP0uIdmpwA+zojWm+oMDmtWWSA9wtz9Z8lYtK7r3qBRtMK
VDkRBgPOYFDlZam6KbkYNh6bYnT153/Pk9mJxTDsHvVcgP/vBuD4oA97NwwIK3XB
6dEkXNv76EVME8lCZ6zfnUX+QbhJ0H3n5cdZk5XoqlZo5bXSAnC3skJup/W06Dzu
O8BYT9PB9Jpq6EY8Uc5UUhOPM5MiAI2HRBN+etRUvswpMxUhRo3on/BoS/enCnpm
e9o0xAny3+299KUcFAFxP0zlfKNF9WP4Nm/cnHDt1H04PztUTO6+aBdTvt2OU8M6
QWeSzIo1jVZoB7g95r0T2ZjWlPwB3QIDAQABo4ICtzCCArMwHQYDVR0OBBYEFD91
a5qVsUMr1psZeiMOoJU1q/Z6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MkQ3NDYxODcxNDExMUYxODVDNzE3RDZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmsECAwQAmscEAwQAmsiB
AwQAmsidMA0GCSqGSIb3DQEBCwUAA4IBAQDKR3YKcFE55PlgLRFZ3hom69qdSQcf
D7eXd1ZdFJVxLddREC7SEWhnzEWpuwLZMMT06c/d8+DOqDnkPk0Zg3EiI5K0/ESq
TZE6sRXuwIER1PjkrY1hFiUFXwWyFucb+V/q2M+36NGppDNB5Lo1rbz5FxxyM9yD
E808IhWh9UqiP1nvhnFXFC7aHRCnWfUGtxCwiRczUXhOojyz7HLJKtfcJfWg+bh4
vrjHin6sPRRnT4Az4nyvLJCL6p7UTjzlhUNi/Pc+kmftN78pSrjEzVIwiUz5YU0R
hLrTfBJI8Ta7CzI1Mjr+GlKUtZ6mtMQsWe42kHe6CM0CrLnFfo0Nh4Dj
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:19 2026 by rpki-client