Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C1A00627B6D11F1B5C22AE4CE1D38B0.roa
File: 5C1A00627B6D11F1B5C22AE4CE1D38B0.roa (raw, json)
Hash identifier: hmSuW+vE/NP6KUocZosND11BGfKS2DWDbl9XHY/jzgM=
Subject key identifier: 20:F4:AF:C8:F6:EC:8A:E7:87:63:15:02:DA:A6:46:04:67:6B:CF:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C1A00627B6D11F1B5C22AE4CE1D38B0.roa
Signing time: Thu 09 Jul 2026 08:08:25 +0000
ROA not before: Thu 09 Jul 2026 08:08:21 +0000
ROA not after: Mon 09 Jul 2029 08:08:21 +0000
asID: 17561
IP address blocks: 154.80.138.0/24 maxlen: 24
154.80.139.0/24 maxlen: 24
154.80.140.0/24 maxlen: 24
154.80.141.0/24 maxlen: 24
154.80.142.0/24 maxlen: 24
154.80.143.0/24 maxlen: 24
154.80.144.0/24 maxlen: 24
154.80.145.0/24 maxlen: 24
154.80.146.0/24 maxlen: 24
154.80.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120749 (0x1d7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 08:08:21 2026 GMT
Not After : Jul 9 08:08:21 2029 GMT
Subject: CN=6a4f56f9-ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:82:c0:0d:98:5d:53:ea:33:43:61:e6:5d:
4d:10:6b:71:25:95:75:29:88:4f:af:e4:e4:a5:1f:
4f:41:d2:96:a7:00:11:80:77:bb:e0:29:47:2e:ee:
78:3a:7c:47:40:03:c8:89:0b:bd:07:6f:f0:c7:f9:
53:e5:d1:ff:6a:3b:bb:04:cb:da:11:bb:b2:f6:cc:
27:17:b1:6d:52:b4:1b:2a:b9:89:03:39:54:fb:b5:
75:d7:b6:52:34:48:d8:f3:e0:ac:19:de:04:28:67:
64:11:ca:4b:01:7c:1f:de:91:0f:a8:d3:b4:6a:ec:
e4:32:1d:86:be:49:6d:e1:c6:13:09:18:5f:79:c4:
39:d0:7c:5f:44:c8:45:db:bb:db:87:9c:bb:6d:9c:
53:78:40:a8:08:6e:1d:37:96:b2:ac:a9:31:43:2c:
cd:81:4a:3d:d2:08:03:2d:ac:46:2e:fe:8b:f0:19:
a5:75:94:86:c0:21:80:2a:47:7b:f0:45:34:1a:57:
ee:1c:6f:4a:8c:88:e6:7c:8c:4c:00:4d:22:10:90:
87:24:1c:5f:e9:cc:1c:ff:5d:28:da:60:f3:1a:6e:
c5:f8:64:45:ef:f7:3b:8c:74:4e:cb:74:35:94:84:
4c:76:22:fc:83:8b:6b:8b:c5:ad:a1:fb:95:73:7f:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:AF:C8:F6:EC:8A:E7:87:63:15:02:DA:A6:46:04:67:6B:CF:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C1A00627B6D11F1B5C22AE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.138.0-154.80.147.255
Signature Algorithm: sha256WithRSAEncryption
09:14:66:03:a4:3b:50:c5:d8:e0:1a:ee:47:38:c1:bf:cf:9f:
d5:e4:78:1c:49:e8:a6:56:16:ec:02:cd:29:e4:96:92:64:67:
fe:8a:28:cf:ee:43:69:6a:15:8e:8c:b1:4a:51:94:e2:11:31:
9a:73:ea:1a:cf:e7:60:db:f7:e5:64:87:09:22:5c:85:ea:48:
35:f1:fd:3d:a6:cd:69:78:06:b0:27:ce:68:1a:e9:c9:40:18:
6c:bc:76:fd:ab:fc:1e:5e:20:95:49:8e:8c:14:8a:b7:61:cb:
b5:9d:16:e0:fa:ca:9a:24:88:bb:3b:f4:16:df:3c:00:bd:2b:
6f:17:a6:02:ab:7f:d4:db:48:fc:8d:79:70:b1:45:1e:52:91:
60:d7:dd:3d:50:a2:97:db:b6:ba:cb:a8:56:9f:28:c2:e8:02:
5f:b5:85:c3:5d:3e:7f:c9:6a:a8:b2:38:07:46:b1:a8:d2:36:
ea:3d:ba:7e:46:a7:7c:c8:e0:f8:7c:57:80:40:94:62:4b:99:
ed:50:71:53:d9:f2:5b:2f:e2:d8:9d:53:83:d0:16:d2:84:a0:
d3:c7:af:a7:e9:d5:e8:3a:09:6b:19:b9:9a:0a:8b:7b:6e:91:
92:ca:0b:91:6f:be:c0:9e:57:3c:3e:87:09:3e:e3:61:0a:43:
32:bd:15:0e
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdetMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzA5MDgwODIxWhcNMjkwNzA5MDgwODIxWjAYMRYw
FAYDVQQDEw02YTRmNTZmOS1mZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv3uCwA2YXVPqM0Nh5l1NEGtxJZV1KYhPr+TkpR9PQdKWpwARgHe74ClH
Lu54OnxHQAPIiQu9B2/wx/lT5dH/aju7BMvaEbuy9swnF7FtUrQbKrmJAzlU+7V1
17ZSNEjY8+CsGd4EKGdkEcpLAXwf3pEPqNO0auzkMh2Gvklt4cYTCRhfecQ50Hxf
RMhF27vbh5y7bZxTeECoCG4dN5ayrKkxQyzNgUo90ggDLaxGLv6L8BmldZSGwCGA
Kkd78EU0GlfuHG9KjIjmfIxMAE0iEJCHJBxf6cwc/10o2mDzGm7F+GRF7/c7jHRO
y3Q1lIRMdiL8g4tri8WtofuVc3++bwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCD0
r8j27Irnh2MVAtqmRgRna887MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QzFBMDA2MjdCNkQxMUYxQjVDMjJBRTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUIoDBAKaUJAwDQYJ
KoZIhvcNAQELBQADggEBAAkUZgOkO1DF2OAa7kc4wb/Pn9XkeBxJ6KZWFuwCzSnk
lpJkZ/6KKM/uQ2lqFY6MsUpRlOIRMZpz6hrP52Db9+VkhwkiXIXqSDXx/T2mzWl4
BrAnzmga6clAGGy8dv2r/B5eIJVJjowUirdhy7WdFuD6ypokiLs79BbfPAC9K28X
pgKrf9TbSPyNeXCxRR5SkWDX3T1QopfbtrrLqFafKMLoAl+1hcNdPn/JaqiyOAdG
sajSNuo9un5Gp3zI4Ph8V4BAlGJLme1QcVPZ8lsv4tidU4PQFtKEoNPHr6fp1eg6
CWsZuZoKi3tukZLKC5FvvsCeVzw+hwk+42EKQzK9FQ4=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:20 2026 by rpki-client