Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11AF533E574511F1844873A3CE1D38B0.roa
File: 11AF533E574511F1844873A3CE1D38B0.roa (raw, json)
Hash identifier: Ov6HtKgWK/wfynXL5NSdjgviQHSZF92JYss4DpnVelE=
Subject key identifier: CC:8C:5A:F6:E5:F0:2D:ED:D3:FE:5A:7B:60:6D:21:5D:41:28:95:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11AF533E574511F1844873A3CE1D38B0.roa
Signing time: Sun 24 May 2026 07:49:19 +0000
ROA not before: Sun 24 May 2026 07:49:13 +0000
ROA not after: Tue 30 Jun 2026 07:49:13 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118445 (0x1cead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 07:49:13 2026 GMT
Not After : Jun 30 07:49:13 2026 GMT
Subject: CN=6a12ad7f-b769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:a1:0b:91:36:2c:20:c5:0d:74:37:87:3c:
28:51:30:30:96:db:f2:e8:df:1f:80:2f:06:d5:0e:
1d:ec:1f:0e:d1:96:f7:2d:86:fc:81:58:74:e0:ea:
cd:7d:b6:a5:c7:e3:f5:93:b6:e1:4f:76:f5:8a:7e:
97:f8:a2:40:d7:a4:85:71:b9:1c:7f:3f:d4:a6:d9:
5e:d1:7d:e1:c6:68:84:88:20:6b:63:02:a6:20:6a:
19:f2:a1:38:d4:e8:c4:09:f3:af:9f:72:fa:7a:07:
81:60:7a:af:cd:c3:eb:01:d9:29:28:95:ff:94:aa:
03:f7:a9:f2:2c:0d:98:b6:67:0b:56:3c:bc:f1:81:
65:c1:35:78:01:6b:2c:0c:4f:27:09:09:01:8b:bb:
3f:88:46:8d:48:90:a2:ff:79:16:bc:81:18:9c:04:
99:9d:e8:30:28:64:78:31:20:2b:5a:c0:75:61:b3:
fb:f9:7e:e6:31:4f:c5:cb:56:da:88:bd:90:19:f6:
ac:52:89:d6:05:b5:fc:d0:c7:f1:37:91:4c:93:2d:
0c:a4:f4:19:23:76:c2:58:ae:50:11:eb:6e:58:9a:
c7:6a:7b:de:53:77:56:5b:49:38:f7:c2:51:3d:7e:
a3:c7:b7:5e:5b:25:ec:38:5f:c2:f1:d8:74:2f:88:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:5A:F6:E5:F0:2D:ED:D3:FE:5A:7B:60:6D:21:5D:41:28:95:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11AF533E574511F1844873A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
9b:b1:ff:42:e4:2e:ae:c7:c0:ed:c4:3a:26:1d:79:76:25:f6:
0a:82:ef:d9:27:2a:3b:d1:0d:f8:67:60:2d:76:f5:60:41:fd:
3d:1b:d3:67:6e:fe:9b:08:65:c9:fb:b8:df:b4:2a:ec:86:ce:
ad:db:20:d6:ae:1b:b8:de:2b:4e:60:01:9a:5f:b9:ee:7b:95:
7f:c3:da:be:ec:99:eb:34:c6:85:b5:1b:9e:f6:05:72:4c:c4:
24:65:04:d0:78:4d:b7:ab:d4:b0:0c:44:0f:c6:f9:84:78:35:
32:d3:f5:bc:d4:8f:8e:85:e2:f3:33:a2:9e:94:80:f3:5b:b4:
42:66:9d:f3:22:18:c4:10:c6:5b:14:f6:70:97:3e:69:17:09:
38:82:3e:b8:a6:25:24:70:82:da:d9:33:19:be:cf:ce:52:ae:
c8:bf:9d:19:c5:21:b6:48:f6:8a:3a:98:92:4e:1e:dc:b9:bb:
da:df:5d:47:7f:2e:fe:38:43:15:de:2c:96:4f:e6:ae:71:84:
92:86:35:ac:8d:14:80:56:1b:ba:8b:2d:35:94:b6:da:75:ed:
71:4f:e5:2e:33:83:6e:a3:26:fc:36:7e:f4:ad:5e:6d:f9:c1:
a2:82:fd:6e:3e:a1:0b:44:6d:db:70:96:88:ae:e6:21:e9:61:
e7:15:26:cb
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAc6tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI0MDc0OTEzWhcNMjYwNjMwMDc0OTEzWjAYMRYw
FAYDVQQDEw02YTEyYWQ3Zi1iNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0k6hC5E2LCDFDXQ3hzwoUTAwltvy6N8fgC8G1Q4d7B8O0Zb3LYb8gVh0
4OrNfbalx+P1k7bhT3b1in6X+KJA16SFcbkcfz/Uptle0X3hxmiEiCBrYwKmIGoZ
8qE41OjECfOvn3L6egeBYHqvzcPrAdkpKJX/lKoD96nyLA2YtmcLVjy88YFlwTV4
AWssDE8nCQkBi7s/iEaNSJCi/3kWvIEYnASZnegwKGR4MSArWsB1YbP7+X7mMU/F
y1baiL2QGfasUonWBbX80MfxN5FMky0MpPQZI3bCWK5QEetuWJrHanveU3dWW0k4
98JRPX6jx7deWyXsOF/C8dh0L4jm/wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFMyM
Wvbl8C3t0/5ae2BtIV1BKJV3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUFGNTMzRTU3NDUxMUYxODQ0ODczQTNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDmslIMAwDBAOayVgDBAGa
yVwwDQYJKoZIhvcNAQELBQADggEBAJux/0LkLq7HwO3EOiYdeXYl9gqC79knKjvR
DfhnYC129WBB/T0b02du/psIZcn7uN+0KuyGzq3bINauG7jeK05gAZpfue57lX/D
2r7smes0xoW1G572BXJMxCRlBNB4Tber1LAMRA/G+YR4NTLT9bzUj46F4vMzop6U
gPNbtEJmnfMiGMQQxlsU9nCXPmkXCTiCPrimJSRwgtrZMxm+z85Srsi/nRnFIbZI
9oo6mJJOHty5u9rfXUd/Lv44QxXeLJZP5q5xhJKGNayNFIBWG7qLLTWUttp17XFP
5S4zg26jJvw2fvStXm35waKC/W4+oQtEbdtwloiu5iHpYecVJss=
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:55 2026 by rpki-client