Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D7B4F03FD811F1998CAB04CF1D38B0.roa
File: 04D7B4F03FD811F1998CAB04CF1D38B0.roa (raw, json)
Hash identifier: bKRYu9Ic3g/1jTZfVa+Sl9eKg5uJz9LXt3wRz/USO24=
Subject key identifier: B7:25:F1:F4:B8:BD:36:0F:A9:11:92:6F:AA:DA:3D:6F:C6:C2:92:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C746
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D7B4F03FD811F1998CAB04CF1D38B0.roa
Signing time: Fri 24 Apr 2026 12:20:46 +0000
ROA not before: Fri 24 Apr 2026 12:20:41 +0000
ROA not after: Sun 31 May 2026 12:20:41 +0000
asID: 20326
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116550 (0x1c746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 12:20:41 2026 GMT
Not After : May 31 12:20:41 2026 GMT
Subject: CN=69eb601d-dc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:29:49:5b:43:26:e0:7c:ad:54:df:ad:c6:
84:ea:ad:5d:b8:ad:2c:a0:74:94:5a:85:3a:8b:a7:
7d:3e:36:57:11:7f:24:3d:9b:0b:e5:2b:d2:1a:dd:
8f:13:ae:cf:49:4c:a4:2c:8c:6c:76:78:8f:80:b1:
91:97:3d:d1:3c:e8:aa:fc:96:70:77:31:16:a4:22:
51:39:25:83:43:f6:4c:6f:c0:3b:16:c4:15:a5:4a:
43:bd:05:34:88:2a:52:0d:82:ff:f9:90:4b:94:d4:
f0:c2:66:bf:86:95:9e:81:32:fc:34:ca:84:c0:09:
1d:df:aa:43:05:ea:ae:42:23:80:33:44:9c:70:ea:
35:f9:0a:ea:61:44:d8:bd:a1:5b:0f:24:ac:5e:cb:
f7:a8:7b:d0:60:3f:3c:ea:ba:7e:57:c1:c7:ad:a7:
af:d6:50:d8:85:9f:e3:15:47:ff:ad:dd:84:cc:d3:
a2:bb:18:d5:b2:91:62:eb:32:10:9d:4e:1a:ea:d3:
f7:ca:6e:81:94:8e:69:e2:ee:b0:b3:20:d4:9e:33:
61:c0:83:ee:95:52:f0:47:fb:97:a9:8c:a5:8f:c9:
b0:32:02:e0:31:1c:86:e0:5d:f4:84:e2:b4:26:4b:
51:f9:41:3f:81:ba:33:91:93:77:76:bc:53:c6:72:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:F1:F4:B8:BD:36:0F:A9:11:92:6F:AA:DA:3D:6F:C6:C2:92:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D7B4F03FD811F1998CAB04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c1:c8:7d:75:50:6e:43:56:ba:90:11:00:6e:41:4c:5c:27:
9a:09:0f:b5:80:75:e5:8b:a8:20:5b:13:b0:2b:39:20:e6:d4:
da:cf:95:50:fd:79:46:bf:19:5b:66:78:94:90:cb:82:51:b1:
72:3a:4e:d7:fe:02:38:9d:21:fc:d3:45:70:87:7a:96:14:ba:
30:61:7a:2c:d4:a0:70:81:a7:fc:9a:89:92:19:43:52:70:8d:
10:55:c8:07:73:69:43:67:2b:ae:22:46:2e:f5:f2:9f:f9:2a:
0c:85:d0:43:4a:f4:55:26:64:83:11:13:00:ce:d2:dd:63:6b:
d8:cf:83:79:fb:f6:76:19:15:51:e2:d7:5b:ad:54:fe:68:25:
58:37:85:6a:cc:93:9c:9c:de:0e:31:f8:b1:1f:9d:25:f1:3b:
15:cf:d9:d9:f8:1d:7c:9a:94:10:67:93:7e:93:01:5f:6c:21:
a5:b9:3f:72:b6:f5:b2:27:ae:1c:f1:ab:ff:39:61:37:e0:e0:
d7:85:e1:db:44:90:0d:6a:97:d1:cb:4c:ba:9e:53:fe:52:79:
3a:a2:b8:6d:1c:ad:99:60:53:67:46:06:26:76:cf:79:31:0b:
5b:04:6a:bf:85:fd:d6:4f:ba:18:00:17:c3:e7:a8:b3:5b:fd:
ad:99:e2:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcdGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI0MTIyMDQxWhcNMjYwNTMxMTIyMDQxWjAYMRYw
FAYDVQQDEw02OWViNjAxZC1kYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvispSVtDJuB8rVTfrcaE6q1duK0soHSUWoU6i6d9PjZXEX8kPZsL5SvS
Gt2PE67PSUykLIxsdniPgLGRlz3RPOiq/JZwdzEWpCJROSWDQ/ZMb8A7FsQVpUpD
vQU0iCpSDYL/+ZBLlNTwwma/hpWegTL8NMqEwAkd36pDBequQiOAM0SccOo1+Qrq
YUTYvaFbDySsXsv3qHvQYD886rp+V8HHraev1lDYhZ/jFUf/rd2EzNOiuxjVspFi
6zIQnU4a6tP3ym6BlI5p4u6wsyDUnjNhwIPulVLwR/uXqYylj8mwMgLgMRyG4F30
hOK0JktR+UE/gbozkZN3drxTxnLCMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLcl
8fS4vTYPqRGSb6raPW/GwpJaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNEQ3QjRGMDNGRDgxMUYxOTk4Q0FCMDRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLBMA0GCSqGSIb3DQEB
CwUAA4IBAQAwwch9dVBuQ1a6kBEAbkFMXCeaCQ+1gHXli6ggWxOwKzkg5tTaz5VQ
/XlGvxlbZniUkMuCUbFyOk7X/gI4nSH800Vwh3qWFLowYXos1KBwgaf8momSGUNS
cI0QVcgHc2lDZyuuIkYu9fKf+SoMhdBDSvRVJmSDERMAztLdY2vYz4N5+/Z2GRVR
4tdbrVT+aCVYN4VqzJOcnN4OMfixH50l8TsVz9nZ+B18mpQQZ5N+kwFfbCGluT9y
tvWyJ64c8av/OWE34ODXheHbRJANapfRy0y6nlP+Unk6orhtHK2ZYFNnRgYmds95
MQtbBGq/hf3WT7oYABfD56izW/2tmeJc
-----END CERTIFICATE-----
Generated at Sat May 9 10:59:52 2026 by rpki-client