Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6983C8926CB211F194B8E9CCCE1D38B0.roa
File: 6983C8926CB211F194B8E9CCCE1D38B0.roa (raw, json)
Hash identifier: ZAYrn/tnmjyzf4pJpelK5Jb2BqULdb8eGq3uApqd3vI=
Subject key identifier: 56:48:C1:D3:C8:51:48:DE:BD:A0:7A:F9:B2:6B:39:D0:DD:6D:23:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D43D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6983C8926CB211F194B8E9CCCE1D38B0.roa
Signing time: Sat 20 Jun 2026 14:14:56 +0000
ROA not before: Sat 20 Jun 2026 14:14:51 +0000
ROA not after: Mon 27 Jul 2026 14:14:51 +0000
asID: 154177
IP address blocks: 154.205.130.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.139.0/24 maxlen: 24
154.205.144.0/24 maxlen: 24
154.205.146.0/24 maxlen: 24
154.205.147.0/24 maxlen: 24
154.205.149.0/24 maxlen: 24
154.205.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119869 (0x1d43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 14:14:51 2026 GMT
Not After : Jul 27 14:14:51 2026 GMT
Subject: CN=6a36a060-716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:30:de:10:01:4a:a1:3b:f7:75:91:48:c3:
26:b9:ca:39:16:c9:1c:f0:d4:e3:10:c6:bc:f3:18:
44:19:65:c4:fd:e4:7b:31:3c:e5:86:b1:e4:bd:22:
e0:0a:23:c2:1b:0a:5f:00:0d:75:6f:c6:78:d3:ad:
be:68:d4:3a:1c:e1:fe:5f:f4:b7:c2:ea:dd:9a:76:
df:69:76:22:48:bd:6d:b0:d7:42:48:34:ff:3a:78:
2b:f6:da:26:6e:b3:ad:b1:15:3b:30:98:dc:ac:12:
dc:3c:fd:78:5c:43:aa:92:91:49:17:eb:1f:c1:22:
38:cb:45:4c:d1:6f:68:42:45:8b:5d:56:03:2e:80:
a6:df:fc:02:48:70:91:dc:fe:13:33:14:68:e0:bc:
09:ac:61:8d:41:6d:9f:99:f1:af:c9:ee:91:7a:3f:
1a:21:15:9f:7c:fe:92:a6:1f:d2:60:8a:a6:da:df:
4b:98:59:10:2b:62:20:98:5d:cd:fe:44:e0:0f:6e:
a1:bc:02:72:3a:9c:29:d3:56:46:14:10:d9:2a:cf:
a8:39:ae:41:ad:0b:29:ec:df:33:28:25:ad:85:b2:
08:9d:e5:b7:47:6f:e6:be:2a:be:35:bb:35:a1:a1:
81:ab:dd:b8:39:5f:e0:c7:f5:4c:6d:da:94:79:6d:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:C1:D3:C8:51:48:DE:BD:A0:7A:F9:B2:6B:39:D0:DD:6D:23:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6983C8926CB211F194B8E9CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.130.0/24
154.205.133.0-154.205.134.255
154.205.136.0/23
154.205.139.0/24
154.205.144.0/24
154.205.146.0/23
154.205.149.0-154.205.150.255
Signature Algorithm: sha256WithRSAEncryption
09:60:37:12:ec:a4:4e:03:d0:e7:f6:a7:a0:dc:62:2f:6e:d4:
55:32:50:63:bf:03:42:28:b3:b6:e2:75:df:8b:75:25:45:3a:
df:02:93:f9:cc:20:ad:48:95:56:0d:4e:9c:43:8c:60:83:e0:
1d:c8:ca:9c:ed:dd:99:2a:e2:d6:36:b5:6a:41:84:6e:c7:08:
d4:8c:3c:0f:86:7f:a1:d7:d8:19:5e:9e:fb:48:a5:05:8e:e1:
7d:eb:0e:db:db:d2:12:1b:66:9f:3e:d0:ed:b4:1f:ee:df:a4:
2e:0f:9f:f1:44:df:eb:19:3d:94:97:43:cb:29:05:d2:92:b2:
a2:26:27:5d:24:66:52:20:6c:1c:1d:b3:c0:67:5f:45:4e:ca:
d2:2d:e7:a4:5c:e3:e3:48:4e:41:a7:ba:3e:50:3a:42:66:38:
c6:0b:ea:e1:47:d8:80:2f:8f:42:74:12:ac:28:38:f1:d5:48:
ae:c0:0f:7e:09:e2:c0:67:e9:fd:ca:01:06:5b:c3:31:b9:57:
7d:78:a4:ca:b7:ff:0c:e8:97:6c:5e:8e:96:eb:10:5d:5a:6b:
2e:86:5f:10:4f:25:57:17:ff:6f:6f:7e:62:8e:53:16:57:2f:
b2:18:79:bc:00:91:b0:4d:f6:96:ab:b0:7e:a0:a6:9f:54:f1:
50:9f:d2:d7
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAdQ9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIwMTQxNDUxWhcNMjYwNzI3MTQxNDUxWjAYMRYw
FAYDVQQDEw02YTM2YTA2MC03MTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwtQw3hABSqE793WRSMMmuco5Fskc8NTjEMa88xhEGWXE/eR7MTzlhrHk
vSLgCiPCGwpfAA11b8Z4062+aNQ6HOH+X/S3wurdmnbfaXYiSL1tsNdCSDT/Ongr
9tombrOtsRU7MJjcrBLcPP14XEOqkpFJF+sfwSI4y0VM0W9oQkWLXVYDLoCm3/wC
SHCR3P4TMxRo4LwJrGGNQW2fmfGvye6Rej8aIRWffP6Sph/SYIqm2t9LmFkQK2Ig
mF3N/kTgD26hvAJyOpwp01ZGFBDZKs+oOa5BrQsp7N8zKCWthbIIneW3R2/mviq+
Nbs1oaGBq924OV/gx/VMbdqUeW1HawIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFFZI
wdPIUUjevaB6+bJrOdDdbSNNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OTgzQzg5MjZDQjIxMUYxOTRCOEU5Q0NDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAms2CMAwDBACazYUDBACa
zYYDBAGazYgDBACazYsDBACazZADBAGazZIwDAMEAJrNlQMEAJrNljANBgkqhkiG
9w0BAQsFAAOCAQEACWA3EuykTgPQ5/anoNxiL27UVTJQY78DQiiztuJ134t1JUU6
3wKT+cwgrUiVVg1OnEOMYIPgHcjKnO3dmSri1ja1akGEbscI1Iw8D4Z/odfYGV6e
+0ilBY7hfesO29vSEhtmnz7Q7bQf7t+kLg+f8UTf6xk9lJdDyykF0pKyoiYnXSRm
UiBsHB2zwGdfRU7K0i3npFzj40hOQae6PlA6QmY4xgvq4UfYgC+PQnQSrCg48dVI
rsAPfgniwGfp/coBBlvDMblXfXikyrf/DOiXbF6OlusQXVprLoZfEE8lVxf/b29+
Yo5TFlcvshh5vACRsE32lquwfqCmn1TxUJ/S1w==
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:30 2026 by rpki-client