Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F315DC2449511F1A95994E4CE1D38B0.roa
File: 5F315DC2449511F1A95994E4CE1D38B0.roa (raw, json)
Hash identifier: dAkbkrXyUd2qOrHb6y3F9ObXvBKiAF2zJSyGHh49TCI=
Subject key identifier: 82:65:C7:10:3C:87:50:AB:4E:9C:05:97:B0:EB:CD:59:4A:EA:49:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C83F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F315DC2449511F1A95994E4CE1D38B0.roa
Signing time: Thu 30 Apr 2026 13:06:17 +0000
ROA not before: Thu 30 Apr 2026 13:06:12 +0000
ROA not after: Fri 05 Jun 2026 13:06:12 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116799 (0x1c83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:06:12 2026 GMT
Not After : Jun 5 13:06:12 2026 GMT
Subject: CN=69f353c8-6189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:f9:e9:ba:71:cc:f0:ed:45:4a:c4:92:36:
2a:5b:45:66:c7:69:d9:6a:c7:f9:e8:58:83:c6:e9:
1f:cb:30:07:f6:36:e0:f0:65:fd:ec:59:2f:3b:ca:
ea:49:c5:80:9d:db:26:45:78:ae:b7:30:03:2f:74:
f7:2d:2c:97:4b:a8:a9:45:40:46:9d:d9:1b:27:42:
24:77:bb:26:cc:5c:9f:be:a1:c7:c7:56:2f:6d:c0:
02:57:c0:29:26:db:0e:db:4f:58:ba:df:84:55:4a:
d8:65:66:0a:33:77:cd:b0:a4:8a:79:16:21:2e:cc:
d8:3f:79:3a:f6:51:09:fa:ef:3c:d6:6d:80:02:b1:
10:ca:52:2a:44:f6:da:11:c0:ff:0b:b2:02:88:0d:
b2:c2:69:45:e0:30:f4:a1:b7:57:bc:4c:6d:20:ea:
c7:bd:d4:ad:4a:92:c7:aa:99:1a:e6:c8:a1:45:7c:
d9:51:07:f2:35:a1:a0:28:22:b2:a4:72:87:7d:98:
91:54:33:0e:48:d7:2c:e2:72:04:30:73:e9:47:44:
e6:d6:ad:c1:13:d2:ac:fe:68:d3:93:2a:ce:98:6f:
ff:31:df:2f:b8:61:b2:02:4c:b8:73:58:cd:02:4f:
58:2f:db:87:df:a4:0a:f0:cc:17:12:6b:c6:2a:a6:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:C7:10:3C:87:50:AB:4E:9C:05:97:B0:EB:CD:59:4A:EA:49:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F315DC2449511F1A95994E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0/23
Signature Algorithm: sha256WithRSAEncryption
68:1a:cb:06:34:72:79:64:3a:53:03:2b:9c:59:aa:d3:3c:07:
48:92:2f:6d:e0:67:c4:bb:5e:18:7c:41:37:1b:45:1b:38:35:
38:b2:bc:ae:7b:67:0c:ee:2d:36:28:33:3a:ee:53:b0:d7:3b:
55:89:a4:8d:ea:c3:9c:9f:82:ab:44:fa:87:b1:3b:f6:db:07:
9d:46:75:5f:16:71:dd:e1:18:40:d6:1c:67:a7:07:03:c5:d6:
af:eb:2d:90:5b:1f:d5:50:8e:2d:7f:38:1a:13:82:f4:45:7d:
93:e2:90:26:74:f6:cd:96:77:08:41:1c:19:e1:79:66:56:c7:
69:c2:44:03:d3:7d:4c:21:b3:21:dc:0c:97:a3:34:93:e7:5a:
20:6a:9c:9c:3a:e9:ba:07:f3:66:69:a5:9a:a1:e5:c7:4a:c1:
4f:d5:ca:39:e0:ac:3f:b3:f3:03:e0:96:4c:f0:6c:08:73:02:
6a:31:ab:cc:56:eb:78:13:24:5c:fd:15:e3:99:01:3b:02:42:
89:cc:84:48:ee:5d:78:96:c8:be:17:a7:84:b7:eb:7e:b6:3a:
92:a7:ac:26:1a:b1:5a:d6:f9:fd:d1:e5:f7:27:cb:6a:f4:a9:
9d:17:d9:f4:a3:18:72:5d:ca:08:6a:91:0c:3e:00:ca:59:c3:
e5:70:49:bb
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAcg/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDMwMTMwNjEyWhcNMjYwNjA1MTMwNjEyWjAYMRYw
FAYDVQQDEw02OWYzNTNjOC02MTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtSD56bpxzPDtRUrEkjYqW0Vmx2nZasf56FiDxukfyzAH9jbg8GX97Fkv
O8rqScWAndsmRXiutzADL3T3LSyXS6ipRUBGndkbJ0Ikd7smzFyfvqHHx1YvbcAC
V8ApJtsO209Yut+EVUrYZWYKM3fNsKSKeRYhLszYP3k69lEJ+u881m2AArEQylIq
RPbaEcD/C7ICiA2ywmlF4DD0obdXvExtIOrHvdStSpLHqpka5sihRXzZUQfyNaGg
KCKypHKHfZiRVDMOSNcs4nIEMHPpR0Tm1q3BE9Ks/mjTkyrOmG//Md8vuGGyAky4
c1jNAk9YL9uH36QK8MwXEmvGKqbGXwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFIJl
xxA8h1CrTpwFl7DrzVlK6kmyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RjMxNURDMjQ0OTUxMUYxQTk1OTk0RTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAmtvAAwQAmtvDMAwDBACa
28kDBAKa28gwDAMEBJrb0AMEAJrb0gMEAZrb1DANBgkqhkiG9w0BAQsFAAOCAQEA
aBrLBjRyeWQ6UwMrnFmq0zwHSJIvbeBnxLteGHxBNxtFGzg1OLK8rntnDO4tNigz
Ou5TsNc7VYmkjerDnJ+Cq0T6h7E79tsHnUZ1XxZx3eEYQNYcZ6cHA8XWr+stkFsf
1VCOLX84GhOC9EV9k+KQJnT2zZZ3CEEcGeF5ZlbHacJEA9N9TCGzIdwMl6M0k+da
IGqcnDrpugfzZmmlmqHlx0rBT9XKOeCsP7PzA+CWTPBsCHMCajGrzFbreBMkXP0V
45kBOwJCicyESO5deJbIvhenhLfrfrY6kqesJhqxWtb5/dHl9yfLavSpnRfZ9KMY
cl3KCGqRDD4AylnD5XBJuw==
-----END CERTIFICATE-----
Generated at Sat May 9 11:03:51 2026 by rpki-client