Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ECE4E66446E11F180A4D0FACE1D38B0.roa
File: 5ECE4E66446E11F180A4D0FACE1D38B0.roa (raw, json)
Hash identifier: 2Iiqw3VKVBJGoZS9EPKUwReStnCNg0ULDkOfEeLTgnE=
Subject key identifier: 26:EA:F5:E4:CC:5F:7E:EE:A2:6D:65:0C:50:64:23:62:2A:A1:68:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ECE4E66446E11F180A4D0FACE1D38B0.roa
Signing time: Thu 30 Apr 2026 08:27:06 +0000
ROA not before: Thu 30 Apr 2026 08:26:59 +0000
ROA not after: Fri 05 Jun 2026 08:26:59 +0000
asID: 199707
IP address blocks: 154.83.246.0/24 maxlen: 24
154.90.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116735 (0x1c7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:26:59 2026 GMT
Not After : Jun 5 08:26:59 2026 GMT
Subject: CN=69f31259-2318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:af:dd:2b:13:77:1c:28:b1:c6:db:89:a8:
3d:63:5b:99:72:96:2e:79:b9:eb:d4:28:71:44:08:
0b:2b:5e:68:40:06:db:5e:8d:b5:99:79:ed:b4:72:
fa:f3:32:62:b0:50:ea:36:98:7d:db:7b:c8:23:96:
1a:fc:4f:8b:05:3b:e8:14:85:7e:6e:e5:24:99:10:
be:7d:43:9c:d7:20:fd:ec:27:b5:eb:86:9e:bb:2e:
7e:59:f2:01:1b:72:f6:6d:c6:2c:c9:33:8e:7c:1a:
1a:31:e7:17:ba:a2:4b:5c:6b:ea:ea:cd:ed:d4:b2:
c0:32:ec:93:c8:5d:39:77:1f:77:78:0d:6e:59:0d:
9b:f7:60:5c:40:f5:fb:ac:62:b4:0a:57:b3:f9:fd:
ce:df:00:a5:e6:ea:00:92:70:6f:90:83:e2:ba:e4:
2a:a2:cf:84:c4:80:92:3d:23:f4:44:d4:5a:5f:87:
46:90:a5:c4:50:32:7a:c7:40:5f:b2:b0:d9:0f:6d:
e6:c1:5b:3e:5f:33:03:05:59:d2:84:76:dd:7e:4b:
7e:c2:eb:30:8c:0d:4c:84:54:33:74:d2:fe:ee:9e:
92:a6:8f:79:5a:a3:36:f4:c1:44:4b:4d:24:22:34:
96:78:b8:05:e7:0d:d6:91:96:3f:24:40:f7:c5:93:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:F5:E4:CC:5F:7E:EE:A2:6D:65:0C:50:64:23:62:2A:A1:68:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ECE4E66446E11F180A4D0FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.246.0/24
154.90.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6a:19:08:16:f5:35:35:d6:73:5f:fe:97:57:01:c4:cc:8a:
1e:85:df:ff:76:b4:ef:10:3a:bc:fb:e8:fb:31:91:ae:fb:90:
eb:91:82:15:56:50:c3:76:84:8c:ed:28:27:27:5c:7d:07:1b:
41:cc:63:5f:95:e2:25:fb:3e:90:fd:2b:e1:d9:eb:82:6c:f0:
70:c6:f7:cf:8d:a5:77:48:7b:cd:e9:f8:19:67:48:5d:96:49:
32:6a:64:4f:5d:89:19:04:20:8a:ec:ee:a0:0c:dc:6e:ea:66:
28:f7:17:9c:e3:ee:89:3c:fb:97:77:56:c8:bb:f2:70:bf:27:
c5:51:43:90:20:e9:95:73:c2:bf:32:b5:e1:54:b5:5d:07:a2:
d7:66:b4:3f:59:60:f0:ab:72:f8:7c:2c:8d:b1:f8:00:20:49:
38:10:0f:bc:e9:53:47:1f:78:d1:97:ab:b7:55:76:a9:9b:68:
10:0f:fb:82:be:81:a0:34:2e:20:20:cf:31:ed:36:bb:15:78:
5d:ea:d4:a7:c6:64:6c:f0:2e:d3:cb:ba:5a:73:37:13:b6:9a:
29:34:70:82:a4:7b:32:4f:35:9f:22:ef:83:4b:e4:80:d2:e3:
5d:95:e7:a5:77:e7:a3:aa:67:bf:9d:bb:f1:b6:cd:1e:a0:d6:
0f:1f:9a:ca
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcf/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDMwMDgyNjU5WhcNMjYwNjA1MDgyNjU5WjAYMRYw
FAYDVQQDEw02OWYzMTI1OS0yMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0B+v3SsTdxwoscbbiag9Y1uZcpYuebnr1ChxRAgLK15oQAbbXo21mXnt
tHL68zJisFDqNph923vII5Ya/E+LBTvoFIV+buUkmRC+fUOc1yD97Ce164aeuy5+
WfIBG3L2bcYsyTOOfBoaMecXuqJLXGvq6s3t1LLAMuyTyF05dx93eA1uWQ2b92Bc
QPX7rGK0Clez+f3O3wCl5uoAknBvkIPiuuQqos+ExICSPSP0RNRaX4dGkKXEUDJ6
x0BfsrDZD23mwVs+XzMDBVnShHbdfkt+wuswjA1MhFQzdNL+7p6Spo95WqM29MFE
S00kIjSWeLgF5w3WkZY/JED3xZNtvwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCbq
9eTMX37uom1lDFBkI2IqoWgQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RUNFNEU2NjQ0NkUxMUYxODBBNEQwRkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlP2AwQAmlpCMA0GCSqG
SIb3DQEBCwUAA4IBAQBNahkIFvU1NdZzX/6XVwHEzIoehd//drTvEDq8++j7MZGu
+5DrkYIVVlDDdoSM7SgnJ1x9BxtBzGNfleIl+z6Q/Svh2euCbPBwxvfPjaV3SHvN
6fgZZ0hdlkkyamRPXYkZBCCK7O6gDNxu6mYo9xec4+6JPPuXd1bIu/JwvyfFUUOQ
IOmVc8K/MrXhVLVdB6LXZrQ/WWDwq3L4fCyNsfgAIEk4EA+86VNHH3jRl6u3VXap
m2gQD/uCvoGgNC4gIM8x7Ta7FXhd6tSnxmRs8C7Ty7paczcTtpopNHCCpHsyTzWf
Iu+DS+SA0uNdleeld+ejqme/nbvxts0eoNYPH5rK
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:15 2026 by rpki-client