Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BC784EE243811F1B975E37EDAE4EC9C.roa
File: 6BC784EE243811F1B975E37EDAE4EC9C.roa (raw, json)
Hash identifier: c6F0vdsl+BmddGYnXPBdvUdQsTt5mgiWRYbmcxZ9Opo=
Subject key identifier: 87:C9:E6:82:35:1B:61:2B:18:A6:A9:88:EF:E5:19:30:F7:F9:A0:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C008
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BC784EE243811F1B975E37EDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 08:40:17 +0000
ROA not before: Fri 20 Mar 2026 08:40:12 +0000
ROA not after: Sun 26 Apr 2026 08:40:12 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114696 (0x1c008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 08:40:12 2026 GMT
Not After : Apr 26 08:40:12 2026 GMT
Subject: CN=69bd07f1-dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:56:95:4d:85:42:e9:80:32:b7:34:39:bd:
ac:2d:9b:fc:d6:96:e5:59:2a:48:07:d5:fa:25:83:
60:c6:37:14:0d:cc:ea:ca:cd:35:52:50:de:ec:92:
f8:e0:53:bc:1d:75:5a:c1:bd:75:ab:f8:d6:fe:aa:
cc:36:10:e7:bb:c0:70:c9:a1:e9:54:79:13:e9:d5:
10:13:e1:27:de:b7:b4:b9:a2:4f:77:b0:41:61:7e:
e4:d9:e1:c9:b3:dd:eb:97:ac:7f:2b:5f:10:1b:13:
7f:12:36:7e:af:c8:c0:b6:ff:cd:8c:69:8c:47:95:
58:ae:2a:f9:d1:5e:90:99:d3:f6:e9:81:a3:20:b4:
43:67:41:db:6f:36:5a:2b:87:51:3e:a4:80:93:31:
ea:68:4d:6d:91:83:2b:ed:97:13:c0:c9:10:83:bf:
53:a3:d7:4c:07:bb:7b:89:0e:5c:1b:d1:6a:61:5a:
fa:27:90:d5:f4:64:23:3c:fe:2e:bf:a6:9b:c0:b4:
46:4f:4b:fb:42:ab:36:a3:cb:04:b2:8c:8b:ff:0c:
88:f3:f6:43:25:66:2e:62:8b:85:86:ed:5b:03:42:
61:6f:8c:46:a2:de:6f:d2:78:f0:0f:e3:b4:7b:47:
77:48:f5:39:fd:68:24:b0:f9:43:5f:9d:3d:c3:d9:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:E6:82:35:1B:61:2B:18:A6:A9:88:EF:E5:19:30:F7:F9:A0:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BC784EE243811F1B975E37EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.66.255
154.94.91.0/24
154.94.122.0-154.94.127.255
Signature Algorithm: sha256WithRSAEncryption
b9:bb:c1:c5:09:1e:66:9e:8a:1c:0e:e9:43:04:30:4d:b2:1c:
12:f2:d4:67:dd:a8:90:bb:1f:d2:00:d2:b8:04:15:77:1a:0f:
d2:24:cf:95:2b:e4:72:ad:0a:9f:57:f6:4e:9e:4e:79:57:e3:
f6:48:e1:1d:50:aa:0d:7f:25:8b:1a:cf:30:c0:be:b9:96:b2:
04:f6:1e:bc:4b:86:2e:70:6c:9b:55:73:69:b0:9c:72:91:2d:
f1:83:b2:40:18:43:f5:ee:17:60:12:bb:56:93:2d:ee:3c:e6:
7c:3c:70:43:c4:df:00:db:86:13:eb:9b:69:f9:59:d7:b3:43:
94:32:8d:52:df:08:cb:f4:75:0c:9b:17:9f:a7:c7:96:01:0c:
92:a1:fc:6a:66:b8:a4:bd:3e:1b:ff:cb:05:f0:14:d1:3f:87:
10:18:40:1f:93:3c:3d:18:36:b0:a2:5e:26:26:e1:d3:0a:04:
64:79:a6:ca:2b:5d:bb:b5:9a:b7:58:6d:1e:c6:da:6e:dc:7c:
ff:60:64:ea:bf:13:52:6a:fc:60:9a:25:50:63:c8:1b:fe:d7:
7d:19:92:22:56:63:c0:03:4c:f7:e7:b4:6c:ef:f3:73:0e:76:
36:75:b0:d1:06:15:d7:48:17:e4:5f:34:82:51:2a:73:69:0d:
4c:18:7b:63
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAcAIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzIwMDg0MDEyWhcNMjYwNDI2MDg0MDEyWjAYMRYw
FAYDVQQDEw02OWJkMDdmMS1kY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAygNWlU2FQumAMrc0Ob2sLZv81pblWSpIB9X6JYNgxjcUDczqys01UlDe
7JL44FO8HXVawb11q/jW/qrMNhDnu8BwyaHpVHkT6dUQE+En3re0uaJPd7BBYX7k
2eHJs93rl6x/K18QGxN/EjZ+r8jAtv/NjGmMR5VYrir50V6QmdP26YGjILRDZ0Hb
bzZaK4dRPqSAkzHqaE1tkYMr7ZcTwMkQg79To9dMB7t7iQ5cG9FqYVr6J5DV9GQj
PP4uv6abwLRGT0v7Qqs2o8sEsoyL/wyI8/ZDJWYuYouFhu1bA0Jhb4xGot5v0njw
D+O0e0d3SPU5/WgksPlDX509w9lOZQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFIfJ
5oI1G2ErGKapiO/lGTD3+aCrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QkM3ODRFRTI0MzgxMUYxQjk3NUUzN0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAaaXUADBACaXUIDBACa
XlswDAMEAZpeegMEB5peADANBgkqhkiG9w0BAQsFAAOCAQEAubvBxQkeZp6KHA7p
QwQwTbIcEvLUZ92okLsf0gDSuAQVdxoP0iTPlSvkcq0Kn1f2Tp5OeVfj9kjhHVCq
DX8lixrPMMC+uZayBPYevEuGLnBsm1VzabCccpEt8YOyQBhD9e4XYBK7VpMt7jzm
fDxwQ8TfANuGE+ubaflZ17NDlDKNUt8Iy/R1DJsXn6fHlgEMkqH8ama4pL0+G//L
BfAU0T+HEBhAH5M8PRg2sKJeJibh0woEZHmmyitdu7Wat1htHsbabtx8/2Bk6r8T
Umr8YJolUGPIG/7XfRmSIlZjwANM9+e0bO/zcw52NnWw0QYV10gX5F80glEqc2kN
TBh7Yw==
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:06 2026 by rpki-client