Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/452FBF4A5C5511F1AD5810DCCE1D38B0.roa
File: 452FBF4A5C5511F1AD5810DCCE1D38B0.roa (raw, json)
Hash identifier: H+/KA4YCAyyyGMlHu+8aIfR29ZUexP3d0YwEEsZnE64=
Subject key identifier: 67:94:64:4B:E1:57:A9:BF:0A:BE:4E:87:19:05:1E:95:BA:85:A7:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D101
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/452FBF4A5C5511F1AD5810DCCE1D38B0.roa
Signing time: Sat 30 May 2026 18:27:53 +0000
ROA not before: Sat 30 May 2026 18:27:48 +0000
ROA not after: Sat 06 Jun 2026 18:27:48 +0000
asID: 23764
IP address blocks: 154.83.28.0/24 maxlen: 24
154.85.14.0/24 maxlen: 24
154.85.15.0/24 maxlen: 24
154.209.20.0/24 maxlen: 24
154.209.21.0/24 maxlen: 24
154.209.22.0/24 maxlen: 24
154.209.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119041 (0x1d101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 18:27:48 2026 GMT
Not After : Jun 6 18:27:48 2026 GMT
Subject: CN=6a1b2c29-e8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:09:c3:41:ba:33:c3:47:d3:fa:7a:eb:6a:
b1:90:5d:e0:2b:f4:cd:2c:a1:b4:87:62:a1:f3:ea:
84:ec:ae:a0:8e:0b:e8:80:7d:4c:dc:23:f1:19:5e:
98:ad:89:07:1f:20:e8:d8:bf:e7:2f:0b:0f:1b:fd:
97:84:46:37:7e:68:b4:7f:e3:92:fd:17:92:46:b5:
86:69:7b:b3:13:80:3f:db:56:7d:89:59:25:d6:40:
55:d7:1e:bc:2a:64:75:6e:d6:25:ae:05:25:d5:80:
6f:95:f6:e3:99:ae:e4:b9:65:d8:30:f8:44:7f:6b:
af:3b:6a:d4:aa:32:26:e7:ea:19:c4:5a:ac:c5:63:
08:e0:76:26:15:13:4a:68:3f:e3:3d:51:93:ec:a5:
a2:75:47:7c:8d:d4:53:92:5d:33:58:89:8b:7a:b2:
7b:30:3b:92:57:fc:c7:78:c9:24:c3:ce:91:d7:d2:
01:ad:40:9b:82:d9:1a:2e:67:35:59:62:d4:c7:22:
c9:35:11:47:7d:22:3c:ac:66:e8:04:5b:18:a7:82:
b0:bb:8b:6d:e7:a4:4b:49:4a:37:5e:58:7d:91:03:
86:33:2e:4c:37:75:84:84:25:9a:77:df:63:9a:a4:
67:72:34:10:95:55:4d:fb:19:47:d7:0e:a3:3a:53:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:64:4B:E1:57:A9:BF:0A:BE:4E:87:19:05:1E:95:BA:85:A7:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/452FBF4A5C5511F1AD5810DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
154.85.14.0/23
154.209.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:35:95:ac:98:78:d0:b1:80:41:e8:72:66:89:ae:9a:65:bd:
de:81:43:0a:2e:34:50:25:12:11:3c:63:26:6a:0a:a6:4c:9b:
44:7a:82:f0:cc:4e:1f:b6:72:2d:91:0b:1b:de:5d:5f:d3:eb:
49:bc:b6:5b:b2:27:df:55:a5:8b:80:00:a9:50:f7:70:47:63:
fc:fe:9e:d3:12:96:ce:8b:1d:29:0f:24:55:4e:d3:b0:ee:b8:
ae:09:6a:33:5b:da:f7:ad:b7:09:9f:55:3a:e8:25:7c:23:69:
bd:0f:1c:d0:7a:ae:82:d1:52:9b:5e:ea:91:c2:11:6b:e6:0a:
18:59:83:f6:1d:dd:37:53:ff:26:04:e0:30:fd:c7:57:b4:e7:
6f:79:03:99:15:96:68:13:9e:bd:6c:66:c1:7c:76:88:48:c1:
53:9b:10:36:7b:cb:ee:74:3f:fb:0f:84:95:4f:bc:49:bc:4a:
78:8b:30:b2:52:7a:0c:97:f0:d1:80:ac:cd:8f:17:1b:30:d1:
33:fd:8f:d6:e2:e7:29:2f:49:13:a9:81:36:ba:6a:d1:e4:3a:
df:c3:d7:09:94:65:93:79:1d:10:1e:23:2e:7f:5a:d4:16:d7:
64:6d:65:13:8a:57:24:5d:94:3d:32:06:85:96:03:2b:a4:81:
d1:6e:6a:89
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAdEBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTMwMTgyNzQ4WhcNMjYwNjA2MTgyNzQ4WjAYMRYw
FAYDVQQDEw02YTFiMmMyOS1lOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsrAJw0G6M8NH0/p662qxkF3gK/TNLKG0h2Kh8+qE7K6gjgvogH1M3CPx
GV6YrYkHHyDo2L/nLwsPG/2XhEY3fmi0f+OS/ReSRrWGaXuzE4A/21Z9iVkl1kBV
1x68KmR1btYlrgUl1YBvlfbjma7kuWXYMPhEf2uvO2rUqjIm5+oZxFqsxWMI4HYm
FRNKaD/jPVGT7KWidUd8jdRTkl0zWImLerJ7MDuSV/zHeMkkw86R19IBrUCbgtka
Lmc1WWLUxyLJNRFHfSI8rGboBFsYp4Kwu4tt56RLSUo3Xlh9kQOGMy5MN3WEhCWa
d99jmqRncjQQlVVN+xlH1w6jOlPK6wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFGeU
ZEvhV6m/Cr5OhxkFHpW6haenMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NTJGQkY0QTVDNTUxMUYxQUQ1ODEwRENDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmlMcAwQBmlUOAwQCmtEU
MA0GCSqGSIb3DQEBCwUAA4IBAQAKNZWsmHjQsYBB6HJmia6aZb3egUMKLjRQJRIR
PGMmagqmTJtEeoLwzE4ftnItkQsb3l1f0+tJvLZbsiffVaWLgACpUPdwR2P8/p7T
EpbOix0pDyRVTtOw7riuCWozW9r3rbcJn1U66CV8I2m9DxzQeq6C0VKbXuqRwhFr
5goYWYP2Hd03U/8mBOAw/cdXtOdveQOZFZZoE569bGbBfHaISMFTmxA2e8vudD/7
D4SVT7xJvEp4izCyUnoMl/DRgKzNjxcbMNEz/Y/W4ucpL0kTqYE2umrR5Drfw9cJ
lGWTeR0QHiMuf1rUFtdkbWUTilckXZQ9MgaFlgMrpIHRbmqJ
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:54 2026 by rpki-client