Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33A967C2244611F1AD22DFCDDAE4EC9C.roa
File: 33A967C2244611F1AD22DFCDDAE4EC9C.roa (raw, json)
Hash identifier: hF/qnPcej1Nwa4gmu9gn5/LLdbnVERUjSETDuKbf/ug=
Subject key identifier: DC:5D:75:13:23:AF:5D:BE:07:BE:B4:68:B7:44:7A:39:5B:90:61:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C014
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33A967C2244611F1AD22DFCDDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:18:57 +0000
ROA not before: Fri 20 Mar 2026 10:18:51 +0000
ROA not after: Sun 26 Apr 2026 10:18:51 +0000
asID: 138915
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114708 (0x1c014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:18:51 2026 GMT
Not After : Apr 26 10:18:51 2026 GMT
Subject: CN=69bd1f11-4eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:9a:c9:b3:b5:2e:47:1e:5c:8c:11:0c:db:
77:f8:42:db:fa:9e:7f:2d:40:62:34:24:02:00:c6:
89:40:eb:3b:6d:31:ee:4f:94:6c:50:91:ed:be:7b:
48:35:e1:4e:9c:d1:f0:8a:28:4a:7c:6d:9c:e9:66:
94:5b:43:d2:82:78:4b:43:79:9b:6d:d2:b1:06:6a:
49:bb:1b:25:67:f7:65:e6:2d:5a:3f:aa:6f:2c:bf:
1e:a4:8a:03:ea:6e:5b:eb:ac:52:0d:8f:b4:2a:d7:
d4:6f:27:94:66:59:f5:12:a5:ec:c0:42:5d:2e:a1:
86:f3:f2:a0:30:22:c1:9c:20:ed:dd:cd:d4:dc:d5:
23:bd:5d:9d:4d:2e:e8:36:7c:29:8e:f9:35:9c:dd:
bb:f3:2b:aa:e5:3c:4c:ed:34:2c:93:e6:65:2a:24:
10:0b:0d:55:f6:e2:53:64:32:e0:0d:7e:d7:3d:2b:
3e:17:fe:d6:a8:eb:81:81:13:1c:96:79:c6:af:f0:
50:7c:db:32:bf:89:56:14:59:6b:86:a2:ae:67:df:
a0:25:f6:1c:11:fa:18:8e:af:d8:aa:83:8c:04:28:
0b:65:17:63:12:9f:a3:d1:dc:cd:47:13:43:7c:be:
9d:cf:fc:ee:2b:6e:99:2b:8e:93:64:28:fc:37:25:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:75:13:23:AF:5D:BE:07:BE:B4:68:B7:44:7A:39:5B:90:61:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33A967C2244611F1AD22DFCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.138.255
Signature Algorithm: sha256WithRSAEncryption
41:18:c2:0a:55:60:ce:49:0d:4a:be:c3:bc:3c:04:61:71:8e:
f4:3f:fb:2a:da:01:83:34:09:5e:7b:11:fc:b0:ac:d8:3e:36:
70:3b:29:72:87:4a:0d:78:48:d0:0d:00:fe:9d:8c:cd:42:e6:
d9:bf:24:30:ac:65:ee:9e:be:8a:3c:c2:e9:c1:bc:52:be:00:
db:71:d6:f3:bf:f2:f8:0f:e0:25:8a:ba:5d:6f:52:0a:4a:f8:
7e:06:c4:38:b1:c0:01:e0:23:4b:3a:a6:ad:36:fc:f6:04:54:
bf:ff:af:cc:69:bb:c3:3d:e0:f7:43:4b:6d:21:0b:ff:df:51:
a1:04:01:02:7a:a4:cc:df:cf:45:d1:83:9f:0c:81:d4:74:07:
d3:4f:b6:af:b6:6b:d7:68:62:3d:7b:c0:8a:7d:83:66:8e:c0:
33:2d:d0:55:a1:13:31:0c:6d:4d:50:65:14:dc:c2:84:25:c4:
a2:e7:96:b3:fc:60:97:42:1c:9b:6f:79:cb:69:63:45:42:02:
d7:3f:ec:14:50:8f:40:26:1b:3a:8c:58:3b:a5:02:06:45:14:
64:ae:84:c3:89:94:8d:54:6f:9a:67:36:85:10:ef:d4:01:54:
22:ff:8b:9a:2a:1f:db:9e:01:cf:a6:3f:03:0c:e4:e7:0a:3b:
80:5b:1e:bc
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcAUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzIwMTAxODUxWhcNMjYwNDI2MTAxODUxWjAYMRYw
FAYDVQQDEw02OWJkMWYxMS00ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzfWaybO1LkceXIwRDNt3+ELb+p5/LUBiNCQCAMaJQOs7bTHuT5RsUJHt
vntINeFOnNHwiihKfG2c6WaUW0PSgnhLQ3mbbdKxBmpJuxslZ/dl5i1aP6pvLL8e
pIoD6m5b66xSDY+0KtfUbyeUZln1EqXswEJdLqGG8/KgMCLBnCDt3c3U3NUjvV2d
TS7oNnwpjvk1nN278yuq5TxM7TQsk+ZlKiQQCw1V9uJTZDLgDX7XPSs+F/7WqOuB
gRMclnnGr/BQfNsyv4lWFFlrhqKuZ9+gJfYcEfoYjq/YqoOMBCgLZRdjEp+j0dzN
RxNDfL6dz/zuK26ZK46TZCj8NyUdrwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNxd
dRMjr12+B760aLdEejlbkGGzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zM0E5NjdDMjI0NDYxMUYxQUQyMkRGQ0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeazYADBACazYowDQYJ
KoZIhvcNAQELBQADggEBAEEYwgpVYM5JDUq+w7w8BGFxjvQ/+yraAYM0CV57Efyw
rNg+NnA7KXKHSg14SNANAP6djM1C5tm/JDCsZe6evoo8wunBvFK+ANtx1vO/8vgP
4CWKul1vUgpK+H4GxDixwAHgI0s6pq02/PYEVL//r8xpu8M94PdDS20hC//fUaEE
AQJ6pMzfz0XRg58MgdR0B9NPtq+2a9doYj17wIp9g2aOwDMt0FWhEzEMbU1QZRTc
woQlxKLnlrP8YJdCHJtvectpY0VCAtc/7BRQj0AmGzqMWDulAgZFFGSuhMOJlI1U
b5pnNoUQ79QBVCL/i5oqH9ueAc+mPwMM5OcKO4BbHrw=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:35 2026 by rpki-client