Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A0B9B88F1111F1B5F754DFCE1D38B0.roa
File: 18A0B9B88F1111F1B5F754DFCE1D38B0.roa (raw, json)
Hash identifier: jTm8Sjm1OOxF5aKWbIdhfNrF6HEKbhKWj/Yy1rU85mI=
Subject key identifier: 28:17:39:F4:1B:F8:6C:F5:D7:40:20:E6:44:F6:F8:6B:CA:AB:21:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A0B9B88F1111F1B5F754DFCE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:58:22 +0000
ROA not before: Mon 03 Aug 2026 07:58:18 +0000
ROA not after: Thu 10 Sep 2026 07:58:18 +0000
asID: 138915
IP address blocks: 154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121962 (0x1dc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:58:18 2026 GMT
Not After : Sep 10 07:58:18 2026 GMT
Subject: CN=6a704a1e-9e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:5c:e7:00:40:cc:f1:c6:4b:13:ef:c0:9a:
48:e2:d3:cc:5a:b5:28:6b:83:39:fd:fe:e0:65:8a:
f7:df:99:31:2d:88:8e:bb:ed:34:d4:46:50:d2:2e:
17:10:58:ff:5a:be:be:48:e3:e7:1f:bd:0f:8d:02:
5e:8e:83:f5:b5:42:8e:09:a5:a9:5c:ce:3d:d6:db:
b6:69:bd:f4:52:1d:3c:08:1f:fd:b0:3b:20:29:d9:
1f:a2:20:9a:9d:d9:df:16:65:8b:9c:39:b9:2d:e4:
ce:ae:c1:49:b1:7b:ea:c3:37:d6:4a:f9:4f:11:f9:
4c:f6:9a:82:7e:c2:43:80:22:ad:46:c1:85:46:ec:
8d:01:01:65:28:a5:9a:68:00:a6:f9:68:ca:2f:42:
3d:5e:27:c6:45:b3:1f:22:3d:dc:d5:25:31:d1:e7:
82:b1:61:b9:77:62:60:cc:5d:1e:29:6f:54:07:e8:
16:81:eb:f5:6a:ba:a9:69:fc:40:bf:3a:3e:03:8d:
32:03:43:a5:ec:ee:71:ee:1b:bf:e9:30:83:fb:b7:
85:57:b8:ca:5f:73:a2:71:e2:72:1b:8a:9f:ec:f2:
4b:29:10:2a:2f:cd:6a:a1:f4:a8:3f:47:d8:05:28:
0b:3e:ed:9d:ca:bc:32:b6:79:88:2b:b5:d6:37:82:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:17:39:F4:1B:F8:6C:F5:D7:40:20:E6:44:F6:F8:6B:CA:AB:21:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A0B9B88F1111F1B5F754DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.44.0-154.223.49.255
154.223.51.0-154.223.64.255
154.223.66.0-154.223.77.255
Signature Algorithm: sha256WithRSAEncryption
a0:1f:cd:82:de:54:1a:62:14:62:89:48:15:9e:89:bd:fb:e3:
87:1c:58:31:73:1a:96:5c:01:48:07:38:16:75:61:a5:52:bc:
1c:b9:62:0b:f9:cd:f3:68:07:ba:e4:db:5d:b1:bd:13:b0:6d:
f2:83:27:86:3a:9c:b3:2f:ed:eb:7f:f4:e1:d3:73:4f:c0:25:
8c:2e:0b:15:ed:f6:ad:c1:77:b6:06:da:f4:c5:3b:04:ac:47:
de:aa:28:36:26:02:b7:54:a4:0e:6b:04:0e:54:1c:2b:0f:df:
6d:29:a9:37:38:10:82:83:df:fd:06:88:99:f6:85:4c:fd:19:
63:50:04:3d:92:0f:eb:d1:75:f4:ba:92:43:0a:48:f7:e2:33:
58:08:79:14:35:8d:9d:6e:00:0b:dc:49:08:ad:29:0b:fa:1b:
52:3a:7c:42:4b:37:8c:12:5c:a5:dc:3b:4a:14:9d:b4:84:41:
46:6a:c4:b3:bb:26:a3:c7:06:1e:81:03:3d:cc:06:ca:2d:34:
bb:96:bb:61:ca:e7:9a:78:31:13:00:8e:3a:d0:58:af:d2:90:
bb:d8:82:b7:10:3e:27:f6:3a:07:d8:83:bd:16:49:3e:b6:5f:
79:df:21:9d:15:2c:0e:05:96:3d:fe:9c:12:22:32:74:58:6a:
28:97:a9:55
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAdxqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODAzMDc1ODE4WhcNMjYwOTEwMDc1ODE4WjAYMRYw
FAYDVQQDEw02YTcwNGExZS05ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu8pc5wBAzPHGSxPvwJpI4tPMWrUoa4M5/f7gZYr335kxLYiOu+001EZQ
0i4XEFj/Wr6+SOPnH70PjQJejoP1tUKOCaWpXM491tu2ab30Uh08CB/9sDsgKdkf
oiCandnfFmWLnDm5LeTOrsFJsXvqwzfWSvlPEflM9pqCfsJDgCKtRsGFRuyNAQFl
KKWaaACm+WjKL0I9XifGRbMfIj3c1SUx0eeCsWG5d2JgzF0eKW9UB+gWgev1arqp
afxAvzo+A40yA0Ol7O5x7hu/6TCD+7eFV7jKX3OiceJyG4qf7PJLKRAqL81qofSo
P0fYBSgLPu2dyrwytnmIK7XWN4I9NQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFCgX
OfQb+Gz110Ag5kT2+GvKqyE0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOEEwQjlCODhGMTExMUYxQjVGNzU0REZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAKa3ywDBAGa3zAwDAME
AJrfMwMEAJrfQDAMAwQBmt9CAwQBmt9MMA0GCSqGSIb3DQEBCwUAA4IBAQCgH82C
3lQaYhRiiUgVnom9++OHHFgxcxqWXAFIBzgWdWGlUrwcuWIL+c3zaAe65Ntdsb0T
sG3ygyeGOpyzL+3rf/Th03NPwCWMLgsV7fatwXe2Btr0xTsErEfeqig2JgK3VKQO
awQOVBwrD99tKak3OBCCg9/9BoiZ9oVM/RljUAQ9kg/r0XX0upJDCkj34jNYCHkU
NY2dbgAL3EkIrSkL+htSOnxCSzeMElyl3DtKFJ20hEFGasSzuyajxwYegQM9zAbK
LTS7lrthyueaeDETAI460Fiv0pC72IK3ED4n9joH2IO9Fkk+tl953yGdFSwOBZY9
/pwSIjJ0WGool6lV
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:29 2026 by rpki-client