Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E7217CC5B4311F186358AE3CE1D38B0.roa
File: 0E7217CC5B4311F186358AE3CE1D38B0.roa (raw, json)
Hash identifier: /Mx36ben2AIPRbVBo3gLggVu5vWYeyG5O3EJhEw9Z7U=
Subject key identifier: 46:C3:6B:E0:8D:D9:3F:3F:48:82:74:A4:2E:B7:D5:B4:25:12:EE:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D069
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E7217CC5B4311F186358AE3CE1D38B0.roa
Signing time: Fri 29 May 2026 09:44:59 +0000
ROA not before: Fri 29 May 2026 09:44:54 +0000
ROA not after: Thu 02 Jul 2026 09:44:54 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118889 (0x1d069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 09:44:54 2026 GMT
Not After : Jul 2 09:44:54 2026 GMT
Subject: CN=6a19601b-00b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:19:5d:84:8e:b1:b4:fc:41:c1:c7:c4:81:
b8:e0:2a:b3:be:ec:67:33:28:23:fe:3f:31:d2:2a:
c1:0a:f3:dc:76:08:df:b9:7e:66:aa:96:f7:78:f8:
c2:f7:2c:6f:af:4c:16:ef:c2:c7:76:d3:3f:7b:50:
a5:a0:81:dd:7e:a5:76:17:d6:a6:2c:de:9b:8f:b8:
0f:04:0f:10:90:92:7b:24:4e:37:ed:a6:97:b8:c0:
ce:3b:21:6f:9b:6a:cc:d0:e6:f7:24:72:ad:36:d6:
4a:cc:51:bd:4e:02:bc:a1:a0:bb:c6:9a:f5:14:cc:
da:16:d2:b0:5b:36:6e:8c:18:6f:1c:2d:ad:3e:16:
e9:23:bf:93:7a:5e:43:df:a8:63:b0:7c:5f:8e:51:
f2:fe:67:85:b8:d0:65:94:0c:11:64:0b:13:d7:d2:
34:8c:dc:97:65:fa:79:bb:7d:92:61:d3:1b:f9:54:
56:d9:b4:6f:d1:a2:d9:02:b1:33:b1:f7:1c:bb:23:
11:f8:ae:ff:2c:45:9b:59:51:f7:90:1d:6b:1b:e9:
cb:0c:4e:fc:c4:cf:6e:92:a3:86:c9:2a:a7:3f:7a:
c7:b7:93:d4:f3:f5:c7:a0:a7:e1:d5:7a:62:56:4b:
61:b5:b6:a6:81:8b:3f:36:f7:69:d0:59:d3:5e:bd:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C3:6B:E0:8D:D9:3F:3F:48:82:74:A4:2E:B7:D5:B4:25:12:EE:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E7217CC5B4311F186358AE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
41:05:dc:36:b9:41:f7:30:35:d3:f6:26:2a:c2:35:ee:af:76:
dc:b1:c9:34:38:41:93:ae:2d:cd:ba:a4:21:52:b9:7d:cd:1e:
59:ca:53:0d:fe:9a:20:ee:f5:a7:4e:96:24:78:81:fa:f3:90:
bd:6c:f6:80:a1:13:b0:e2:0f:8b:6d:63:3e:f7:09:98:67:46:
a4:c6:88:e3:35:ab:c9:cf:f5:55:88:fb:2e:c1:7e:76:54:23:
6f:34:79:b7:2c:f3:e2:6e:8a:25:8f:5e:43:8a:64:f3:fe:8c:
12:06:7e:aa:f6:43:49:5a:05:e4:da:99:5a:7a:8e:84:37:b3:
34:f8:58:0d:82:33:38:c5:49:c7:9d:5b:d5:dd:55:e8:93:ea:
78:35:08:96:99:6a:e4:d5:11:e2:f3:07:6d:85:54:04:28:6c:
b6:fc:d4:ac:00:68:0c:c1:bf:35:6c:e8:7d:54:73:17:b7:a9:
03:e9:e0:45:6f:9c:dd:08:65:2f:56:4b:c3:d1:65:2b:79:0c:
12:e9:5f:2d:f7:f4:2a:03:49:cd:cd:48:db:d6:e2:9c:1a:74:
ab:f2:6d:e2:40:7c:c5:13:a8:91:eb:7e:f4:26:82:ec:02:c4:
35:54:2a:74:90:26:96:a5:bd:d8:18:9f:fe:56:77:3a:6e:25:
a0:73:12:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdBpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDk0NDU0WhcNMjYwNzAyMDk0NDU0WjAYMRYw
FAYDVQQDEw02YTE5NjAxYi0wMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4DMZXYSOsbT8QcHHxIG44CqzvuxnMygj/j8x0irBCvPcdgjfuX5mqpb3
ePjC9yxvr0wW78LHdtM/e1CloIHdfqV2F9amLN6bj7gPBA8QkJJ7JE437aaXuMDO
OyFvm2rM0Ob3JHKtNtZKzFG9TgK8oaC7xpr1FMzaFtKwWzZujBhvHC2tPhbpI7+T
el5D36hjsHxfjlHy/meFuNBllAwRZAsT19I0jNyXZfp5u32SYdMb+VRW2bRv0aLZ
ArEzsfccuyMR+K7/LEWbWVH3kB1rG+nLDE78xM9ukqOGySqnP3rHt5PU8/XHoKfh
1XpiVkthtbamgYs/Nvdp0FnTXr04WQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEbD
a+CN2T8/SIJ0pC631bQlEu6HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRTcyMTdDQzVCNDMxMUYxODYzNThBRTNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmt/MMA0GCSqGSIb3DQEB
CwUAA4IBAQBBBdw2uUH3MDXT9iYqwjXur3bcsck0OEGTri3NuqQhUrl9zR5ZylMN
/pog7vWnTpYkeIH685C9bPaAoROw4g+LbWM+9wmYZ0akxojjNavJz/VViPsuwX52
VCNvNHm3LPPiboolj15DimTz/owSBn6q9kNJWgXk2plaeo6EN7M0+FgNgjM4xUnH
nVvV3VXok+p4NQiWmWrk1RHi8wdthVQEKGy2/NSsAGgMwb81bOh9VHMXt6kD6eBF
b5zdCGUvVkvD0WUreQwS6V8t9/QqA0nNzUjb1uKcGnSr8m3iQHzFE6iR6370JoLs
AsQ1VCp0kCaWpb3YGJ/+Vnc6biWgcxKJ
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:51:46 2026 by rpki-client