Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DA9C00E3D6711F18EDFBB0ACF1D38B0.roa
File: 6DA9C00E3D6711F18EDFBB0ACF1D38B0.roa (raw, json)
Hash identifier: Ndb/nJTxLpmgJluVDgzmxSY4KKPSBssHgMS1anJYC1o=
Subject key identifier: B6:43:DC:89:42:3C:9D:64:9F:70:EE:67:26:09:AB:8C:65:C9:2F:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C64A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DA9C00E3D6711F18EDFBB0ACF1D38B0.roa
Signing time: Tue 21 Apr 2026 09:49:46 +0000
ROA not before: Tue 21 Apr 2026 09:49:41 +0000
ROA not after: Sun 24 May 2026 09:49:41 +0000
asID: 204770
IP address blocks: 154.88.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116298 (0x1c64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 09:49:41 2026 GMT
Not After : May 24 09:49:41 2026 GMT
Subject: CN=69e7483a-fc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:e8:2b:45:31:c8:a7:a5:c5:13:bf:e7:95:
bf:f6:7e:13:98:41:35:31:16:55:c9:d3:e7:50:c3:
47:38:42:d0:26:e6:74:d4:b4:3d:af:fc:4b:f1:f5:
56:35:59:43:6a:bc:a2:0d:e5:9d:77:e6:52:fa:c0:
c3:e5:92:06:8b:ba:f0:fb:bf:cd:52:db:4a:b7:b5:
be:1a:08:da:2c:9a:85:a4:5d:0e:fc:c6:50:05:77:
3f:17:9c:44:04:7b:e6:2c:a1:ae:2e:bd:b8:70:3d:
86:16:3b:27:66:8b:df:f2:57:63:2d:d7:06:7a:c5:
e4:4c:16:5e:69:32:4a:63:00:c3:7a:f4:2a:0c:f9:
59:25:97:85:11:06:43:8d:5b:89:34:42:aa:75:21:
38:10:d8:9c:cf:a1:df:d9:a2:94:6c:55:fa:8a:f7:
13:97:a5:de:5f:d4:3a:14:c6:a7:c0:04:ef:f4:c5:
0e:1c:30:5c:26:d0:74:5f:0c:ea:a1:70:0a:70:39:
a0:e5:a0:87:53:46:a6:c7:47:e1:8a:29:46:58:70:
9e:42:fb:93:8f:54:1a:b1:88:c1:2b:d5:95:50:28:
75:8d:b9:ee:c5:c6:d1:31:15:e6:d2:07:a1:47:f6:
5f:47:5b:fc:6c:6a:71:49:77:29:d5:44:90:fb:00:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:43:DC:89:42:3C:9D:64:9F:70:EE:67:26:09:AB:8C:65:C9:2F:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DA9C00E3D6711F18EDFBB0ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ef:43:76:e6:bc:2b:f3:69:db:aa:5a:fe:df:ce:e4:29:ed:
5f:13:49:92:9f:42:07:78:7a:62:74:d5:7b:70:49:aa:54:cc:
7a:1d:c8:c7:05:0c:8c:cd:81:90:74:8d:97:92:eb:bc:4b:ae:
f0:b9:48:3d:30:3c:90:bc:54:35:73:47:d2:df:d7:32:f4:62:
0d:84:fb:11:cc:b8:2c:1e:36:65:51:52:73:8b:c8:99:96:49:
51:ff:4a:2b:76:2f:5a:44:7f:8c:cd:0c:1f:87:a0:bc:ef:fa:
95:56:d3:e9:91:ae:89:e5:5d:d9:49:6e:ac:24:78:e2:4b:2a:
cd:89:43:d1:8c:ea:a5:3c:75:b8:4d:c2:a9:65:65:47:5a:24:
af:32:06:64:8d:a9:1f:f0:1e:61:cc:32:39:5a:cb:11:bf:a8:
33:a5:ca:0a:78:4b:53:91:1f:e7:43:0f:6f:f5:aa:cd:a9:96:
96:c1:2f:ca:75:62:0d:47:f6:fd:9e:07:da:ef:40:ed:bc:d5:
5c:78:2a:f7:ac:34:f2:b2:76:fe:70:2d:31:9c:22:99:20:7a:
4f:a8:31:51:d2:17:a2:32:9b:e1:f9:dd:3c:7c:3a:56:7b:87:
94:45:0f:5b:c0:54:3b:7b:67:84:cb:73:f8:2f:a0:9b:be:4e:
c4:dc:1b:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcZKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDIxMDk0OTQxWhcNMjYwNTI0MDk0OTQxWjAYMRYw
FAYDVQQDEw02OWU3NDgzYS1mYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1nzoK0UxyKelxRO/55W/9n4TmEE1MRZVydPnUMNHOELQJuZ01LQ9r/xL
8fVWNVlDaryiDeWdd+ZS+sDD5ZIGi7rw+7/NUttKt7W+GgjaLJqFpF0O/MZQBXc/
F5xEBHvmLKGuLr24cD2GFjsnZovf8ldjLdcGesXkTBZeaTJKYwDDevQqDPlZJZeF
EQZDjVuJNEKqdSE4ENicz6Hf2aKUbFX6ivcTl6XeX9Q6FManwATv9MUOHDBcJtB0
XwzqoXAKcDmg5aCHU0amx0fhiilGWHCeQvuTj1QasYjBK9WVUCh1jbnuxcbRMRXm
0gehR/ZfR1v8bGpxSXcp1USQ+wBnGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLZD
3IlCPJ1kn3DuZyYJq4xlyS+sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82REE5QzAwRTNENjcxMUYxOEVERkJCMEFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgDMA0GCSqGSIb3DQEB
CwUAA4IBAQDX70N25rwr82nbqlr+387kKe1fE0mSn0IHeHpidNV7cEmqVMx6HcjH
BQyMzYGQdI2Xkuu8S67wuUg9MDyQvFQ1c0fS39cy9GINhPsRzLgsHjZlUVJzi8iZ
lklR/0ordi9aRH+MzQwfh6C87/qVVtPpka6J5V3ZSW6sJHjiSyrNiUPRjOqlPHW4
TcKpZWVHWiSvMgZkjakf8B5hzDI5WssRv6gzpcoKeEtTkR/nQw9v9arNqZaWwS/K
dWINR/b9ngfa70DtvNVceCr3rDTysnb+cC0xnCKZIHpPqDFR0heiMpvh+d08fDpW
e4eURQ9bwFQ7e2eEy3P4L6Cbvk7E3BsM
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:41 2026 by rpki-client