Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F0F4928713B11F1BD19BAB0CE1D38B0.roa
File: 3F0F4928713B11F1BD19BAB0CE1D38B0.roa (raw, json)
Hash identifier: LaE2y89m/5R+ek9yCE1T3h01ljYWS1z20vIqQpZWtL4=
Subject key identifier: 8D:30:BC:F9:CC:40:0C:B3:4E:08:38:26:6B:F1:93:6E:55:9A:BE:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D557
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F0F4928713B11F1BD19BAB0CE1D38B0.roa
Signing time: Fri 26 Jun 2026 08:44:30 +0000
ROA not before: Fri 26 Jun 2026 08:44:26 +0000
ROA not after: Thu 30 Jul 2026 08:44:26 +0000
asID: 9304
IP address blocks: 154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120151 (0x1d557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 08:44:26 2026 GMT
Not After : Jul 30 08:44:26 2026 GMT
Subject: CN=6a3e3bee-73b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:fe:93:f3:80:93:91:84:02:b6:48:94:84:
91:26:7c:bf:56:8d:92:f0:31:e7:48:45:4f:e4:69:
1f:bc:fa:8f:e7:69:ea:11:bf:f1:9c:b5:62:da:b9:
64:0b:0b:b4:c6:64:8a:d1:c5:65:f9:cc:b0:96:27:
66:07:5f:54:40:91:a8:3c:a7:0c:21:de:c9:35:55:
0c:70:2c:30:3b:d5:d5:cc:b3:43:aa:f6:c0:37:af:
6f:eb:ca:58:cc:e1:3c:4e:35:4c:10:49:94:ff:f1:
93:61:9a:2a:15:bd:ac:47:41:1c:fd:11:4c:84:7e:
79:16:90:e5:3e:7e:6c:4f:2c:d9:1d:36:33:b1:90:
35:d6:3d:45:b0:64:7d:dc:50:6a:f1:60:08:ad:cf:
d4:08:5e:81:da:0a:6b:ed:4d:c0:11:4e:8d:6e:3a:
1f:b7:7d:c3:b8:b2:93:65:f0:99:83:48:5a:66:11:
08:d2:14:00:58:f3:69:fb:62:c8:5a:e0:86:02:e0:
8a:b5:c0:ee:50:78:7f:14:8a:4e:2e:fe:6b:d7:33:
27:4a:7c:52:62:7e:3e:40:c5:2b:9f:a7:4b:fe:e0:
0d:94:d0:09:b1:ad:0d:47:0d:a6:9c:db:e3:18:3b:
e3:a3:43:14:fa:a3:7c:49:33:22:c6:62:5e:10:f6:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:30:BC:F9:CC:40:0C:B3:4E:08:38:26:6B:F1:93:6E:55:9A:BE:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F0F4928713B11F1BD19BAB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.200.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cd:40:27:3c:98:78:2b:23:38:ae:3f:b2:ae:db:fc:32:d4:
26:2d:ae:35:91:9e:32:b1:1b:fe:96:14:80:a9:74:cb:5f:75:
19:5b:3e:06:8a:58:27:bb:55:aa:ab:99:98:3e:7e:b3:0c:48:
6e:43:0e:af:49:7e:78:26:6b:04:ed:3e:60:ad:12:2a:55:66:
aa:31:f6:14:7c:bc:9f:be:89:b0:2f:ff:fc:04:e3:87:52:81:
a3:d2:d4:29:22:6d:c0:ab:bb:b9:77:21:61:77:c4:39:e5:ac:
8e:b2:0b:6d:89:0e:ce:0a:31:60:01:ba:96:2a:93:cb:06:e8:
10:a5:32:cb:28:1a:08:23:29:c8:9e:01:b0:1f:3f:c9:55:17:
af:d5:76:02:a0:82:83:60:18:97:97:ff:95:ef:80:cd:bd:bd:
0c:27:8a:84:50:a8:07:ef:7f:1e:88:a4:7a:b0:81:38:3d:0a:
1b:f0:ab:e6:c1:85:cf:39:1e:9a:3b:bc:64:63:42:ee:fc:d6:
16:95:bc:a6:cc:46:7e:56:21:d9:2a:7f:5f:53:c8:00:5d:42:
db:80:dd:db:e0:69:9d:5e:13:d0:17:b2:d1:24:16:b1:f8:30:
7c:43:78:cd:4b:25:2b:b6:17:16:5c:9e:1a:fc:67:5a:f9:be:
0b:86:14:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAdVXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI2MDg0NDI2WhcNMjYwNzMwMDg0NDI2WjAYMRYw
FAYDVQQDEw02YTNlM2JlZS03M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAseP+k/OAk5GEArZIlISRJny/Vo2S8DHnSEVP5GkfvPqP52nqEb/xnLVi
2rlkCwu0xmSK0cVl+cywlidmB19UQJGoPKcMId7JNVUMcCwwO9XVzLNDqvbAN69v
68pYzOE8TjVMEEmU//GTYZoqFb2sR0Ec/RFMhH55FpDlPn5sTyzZHTYzsZA11j1F
sGR93FBq8WAIrc/UCF6B2gpr7U3AEU6Nbjoft33DuLKTZfCZg0haZhEI0hQAWPNp
+2LIWuCGAuCKtcDuUHh/FIpOLv5r1zMnSnxSYn4+QMUrn6dL/uANlNAJsa0NRw2m
nNvjGDvjo0MU+qN8STMixmJeEPZXEwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFI0w
vPnMQAyzTgg4Jmvxk25Vmr5HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRjBGNDkyODcxM0IxMUYxQkQxOUJBQjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmsLDAwQAmsSGAwQAmsSg
AwQAmsgBMA0GCSqGSIb3DQEBCwUAA4IBAQCbzUAnPJh4KyM4rj+yrtv8MtQmLa41
kZ4ysRv+lhSAqXTLX3UZWz4Gilgnu1Wqq5mYPn6zDEhuQw6vSX54JmsE7T5grRIq
VWaqMfYUfLyfvomwL//8BOOHUoGj0tQpIm3Aq7u5dyFhd8Q55ayOsgttiQ7OCjFg
AbqWKpPLBugQpTLLKBoIIynIngGwHz/JVRev1XYCoIKDYBiXl/+V74DNvb0MJ4qE
UKgH738eiKR6sIE4PQob8KvmwYXPOR6aO7xkY0Lu/NYWlbymzEZ+ViHZKn9fU8gA
XULbgN3b4GmdXhPQF7LRJBax+DB8Q3jNSyUrthcWXJ4a/Gda+b4LhhQV
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:24 2026 by rpki-client