Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B682E03676E111F18E638806CF1D38B0.roa
File: B682E03676E111F18E638806CF1D38B0.roa (raw, json)
Hash identifier: qxMeqebsWtsO1/mUau4CvLNQXZPqrL/0dvLWVc5kkik=
Subject key identifier: 0E:5C:CF:39:61:23:9F:C8:57:11:B4:A9:DA:7B:88:92:16:CD:80:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B682E03676E111F18E638806CF1D38B0.roa
Signing time: Fri 03 Jul 2026 13:18:43 +0000
ROA not before: Fri 03 Jul 2026 13:18:37 +0000
ROA not after: Thu 06 Aug 2026 13:18:37 +0000
asID: 140224
IP address blocks: 154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120510 (0x1d6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 13:18:37 2026 GMT
Not After : Aug 6 13:18:37 2026 GMT
Subject: CN=6a47b6b3-a593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:4d:88:66:b8:41:0f:43:29:ae:29:07:cf:
a9:80:5a:98:93:a5:9e:74:3d:21:a8:64:d0:c9:6f:
eb:0b:a8:49:33:59:7a:e7:1b:18:ca:f4:d0:3a:8b:
99:51:51:ca:dc:7e:6c:12:a5:70:0a:00:15:6b:95:
08:69:59:f4:58:7d:34:19:85:b7:ec:cf:47:4b:99:
15:1d:8a:9f:94:f0:d4:2f:23:fc:52:01:45:62:a9:
46:7c:f6:6b:d4:f6:a4:62:40:ee:d8:8b:38:7a:16:
06:95:e6:94:9f:1b:49:6e:13:98:e9:f8:a0:f3:dc:
c1:92:28:3e:bd:5e:13:84:f0:ad:8e:d7:40:76:4f:
14:c2:fc:0a:de:ed:cc:90:05:58:e3:ce:dd:57:e2:
b2:df:62:b9:9e:dd:b8:58:68:f4:be:58:8e:c6:11:
84:d6:a4:93:4f:58:1d:9e:63:d2:5b:84:cb:57:67:
00:59:67:14:31:1b:4e:9d:23:12:f0:7d:5a:ae:ab:
a2:ac:97:ab:90:62:0c:bb:93:be:a1:2b:89:d7:7e:
0b:c2:73:0f:3d:7d:bb:a7:0d:44:88:f5:5c:3b:6c:
a9:f7:8a:ee:4a:5a:ce:47:73:46:a8:27:a1:a4:d5:
c9:98:5c:7d:7b:51:0a:5c:00:1a:a8:93:b7:01:fc:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:CF:39:61:23:9F:C8:57:11:B4:A9:DA:7B:88:92:16:CD:80:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B682E03676E111F18E638806CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.20.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
7f:59:a1:fc:ea:92:1a:18:67:6b:52:17:f1:6d:d7:f6:ab:23:
49:33:3f:9f:46:69:21:73:43:b5:0b:fd:db:75:8d:b2:0c:14:
4f:26:b5:98:bf:44:22:39:a4:62:a6:2f:71:76:9f:2f:5a:93:
c4:75:0b:14:3a:a1:46:4c:7f:65:68:b2:64:41:70:f5:9a:4c:
af:2e:96:7d:42:61:30:7b:c0:f9:a2:c6:53:d0:ee:a1:47:14:
dc:29:bf:77:f0:b2:c6:5b:b9:cf:db:21:d9:8e:75:bc:b8:a5:
d0:09:0d:7b:25:a9:80:db:cd:a2:33:74:aa:5e:5c:0f:ff:7c:
51:f9:3f:d6:f9:d9:a0:a5:1d:f7:5f:08:65:f4:a2:77:99:84:
84:14:46:6a:8c:09:aa:1b:65:3d:ef:4d:0b:b9:a4:36:fa:24:
ca:1e:eb:58:4c:71:5a:e0:83:8d:8f:d6:f4:c6:44:95:a2:98:
0f:cb:87:3f:30:12:5b:1c:41:5e:92:cd:b4:31:80:54:71:76:
bd:7a:78:f7:b9:42:81:2e:cf:84:87:de:26:10:fb:36:eb:79:
b6:12:5d:8a:0d:48:7b:4a:ac:42:fa:c6:c5:45:13:3a:ce:b2:
39:38:bb:a4:fa:41:68:ca:ee:1d:86:38:c7:1c:28:ce:81:7c:
65:17:52:3b
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAda+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMTMxODM3WhcNMjYwODA2MTMxODM3WjAYMRYw
FAYDVQQDEw02YTQ3YjZiMy1hNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvz9NiGa4QQ9DKa4pB8+pgFqYk6WedD0hqGTQyW/rC6hJM1l65xsYyvTQ
OouZUVHK3H5sEqVwCgAVa5UIaVn0WH00GYW37M9HS5kVHYqflPDULyP8UgFFYqlG
fPZr1PakYkDu2Is4ehYGleaUnxtJbhOY6fig89zBkig+vV4ThPCtjtdAdk8UwvwK
3u3MkAVY487dV+Ky32K5nt24WGj0vliOxhGE1qSTT1gdnmPSW4TLV2cAWWcUMRtO
nSMS8H1arquirJerkGIMu5O+oSuJ134LwnMPPX27pw1EiPVcO2yp94ruSlrOR3NG
qCehpNXJmFx9e1EKXAAaqJO3AfxifwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFA5c
zzlhI5/IVxG0qdp7iJIWzYDmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNjgyRTAzNjc2RTExMUYxOEU2Mzg4MDZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaVhQDBAGaVhwwDQYJ
KoZIhvcNAQELBQADggEBAH9ZofzqkhoYZ2tSF/Ft1/arI0kzP59GaSFzQ7UL/dt1
jbIMFE8mtZi/RCI5pGKmL3F2ny9ak8R1CxQ6oUZMf2VosmRBcPWaTK8uln1CYTB7
wPmixlPQ7qFHFNwpv3fwssZbuc/bIdmOdby4pdAJDXslqYDbzaIzdKpeXA//fFH5
P9b52aClHfdfCGX0oneZhIQURmqMCaobZT3vTQu5pDb6JMoe61hMcVrgg42P1vTG
RJWimA/Lhz8wElscQV6SzbQxgFRxdr16ePe5QoEuz4SH3iYQ+zbrebYSXYoNSHtK
rEL6xsVFEzrOsjk4u6T6QWjK7h2GOMccKM6BfGUXUjs=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:36 2026 by rpki-client