Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74379176162F11F18635A7E2DAE4EC9C.roa
File: 74379176162F11F18635A7E2DAE4EC9C.roa (raw, json)
Hash identifier: LSEJ+6RTPSdMN7FoVBNcCIOX8NlSSpo4G90/XjugADQ=
Subject key identifier: F8:F2:FF:90:A9:A4:2A:9E:A6:B2:E6:74:4F:7E:1D:5A:09:08:10:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74379176162F11F18635A7E2DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 12:00:49 +0000
ROA not before: Mon 02 Mar 2026 12:00:44 +0000
ROA not after: Fri 02 Mar 2029 12:00:44 +0000
asID: 17561
IP address blocks: 154.80.62.0/24 maxlen: 24
154.80.63.0/24 maxlen: 24
154.80.64.0/24 maxlen: 24
154.80.65.0/24 maxlen: 24
154.80.66.0/24 maxlen: 24
154.80.67.0/24 maxlen: 24
154.80.68.0/24 maxlen: 24
154.80.69.0/24 maxlen: 24
154.80.70.0/24 maxlen: 24
154.80.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113919 (0x1bcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 12:00:44 2026 GMT
Not After : Mar 2 12:00:44 2029 GMT
Subject: CN=69a57bf1-ba6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:6b:30:76:46:2e:9b:15:ba:45:98:59:8d:
f8:54:76:1d:56:de:4b:48:56:db:65:f4:28:cf:00:
57:67:f3:28:6a:2b:18:21:aa:e1:85:8b:aa:6d:80:
54:62:db:9f:d3:d3:20:6d:91:c8:39:b3:ee:18:cb:
a7:72:1d:ae:f3:0b:32:99:f7:75:5c:e9:a1:8d:47:
6c:97:01:16:77:0c:33:7e:72:41:ea:95:94:ba:67:
25:38:18:7a:d3:21:eb:af:65:8c:d5:ac:c9:c8:6c:
03:f3:c3:ab:1d:a8:29:cf:3c:26:fa:8b:0b:5e:4a:
40:60:fb:58:4f:be:26:ae:0a:de:f6:94:8e:e0:6e:
53:db:b5:1a:b0:18:b3:a5:f7:53:41:03:41:db:52:
19:8b:10:b3:69:e6:5f:8b:2d:16:be:39:a1:3c:98:
a9:cd:cc:5c:e2:f6:ef:a2:45:85:d8:40:a9:c0:3f:
f4:fc:72:a2:1f:19:46:9a:73:25:65:c0:6e:98:d9:
d7:de:6e:fb:6b:49:08:47:8f:9e:e7:49:b2:17:ef:
56:7c:7f:ff:b9:70:86:7f:b8:77:42:2f:2c:40:93:
69:23:c6:9a:db:c3:61:48:03:a7:d9:dc:b3:6b:62:
b4:eb:fa:3a:77:fe:a1:d8:d2:78:f1:78:af:bf:de:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:FF:90:A9:A4:2A:9E:A6:B2:E6:74:4F:7E:1D:5A:09:08:10:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74379176162F11F18635A7E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.62.0-154.80.71.255
Signature Algorithm: sha256WithRSAEncryption
b3:eb:03:73:96:7c:98:61:e5:38:79:da:f5:83:c4:d2:2d:2f:
dd:8e:76:1d:91:f4:74:6b:85:36:5e:70:3d:1a:83:a0:6e:0c:
05:57:f1:53:32:0d:e4:31:96:87:d6:d3:f9:c6:73:c8:30:d0:
43:e9:3c:9c:1e:62:32:16:e5:c9:79:78:2a:c1:8d:81:3c:67:
79:e3:0b:64:f2:2d:56:61:19:cd:91:c6:8e:65:7a:e6:b9:c1:
2c:2c:85:fb:b7:d8:e9:f2:73:f7:57:b7:37:66:3c:f6:f6:fe:
36:0a:a5:62:0b:85:46:88:53:48:98:db:d1:62:74:92:5c:a5:
0b:5b:4d:8a:2f:0d:04:fa:24:ee:7e:50:25:78:e4:32:87:e8:
0d:12:cd:c7:c4:58:6a:71:38:b3:2f:63:54:fb:86:76:d8:6f:
0d:10:b2:09:d3:14:81:80:6f:ca:ab:75:46:86:24:df:02:6b:
b6:1c:98:62:41:a5:91:db:23:bd:4b:15:23:b6:ca:93:a4:4c:
5e:d8:21:91:a2:70:e1:92:bc:c9:d3:c3:fe:bf:4f:62:0e:d0:
17:68:be:50:41:35:2f:b7:92:2a:31:a2:bc:db:c4:43:f4:e7:
a1:1c:8a:e8:69:ca:c1:6e:3b:fa:06:4c:28:d5:01:fd:19:c0:
3b:ff:a3:85
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbz/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzAyMTIwMDQ0WhcNMjkwMzAyMTIwMDQ0WjAYMRYw
FAYDVQQDEw02OWE1N2JmMS1iYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyF9rMHZGLpsVukWYWY34VHYdVt5LSFbbZfQozwBXZ/MoaisYIarhhYuq
bYBUYtuf09MgbZHIObPuGMunch2u8wsymfd1XOmhjUdslwEWdwwzfnJB6pWUumcl
OBh60yHrr2WM1azJyGwD88OrHagpzzwm+osLXkpAYPtYT74mrgre9pSO4G5T27Ua
sBizpfdTQQNB21IZixCzaeZfiy0WvjmhPJipzcxc4vbvokWF2ECpwD/0/HKiHxlG
mnMlZcBumNnX3m77a0kIR4+e50myF+9WfH//uXCGf7h3Qi8sQJNpI8aa28NhSAOn
2dyza2K06/o6d/6h2NJ48Xivv949ewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPjy
/5CppCqeprLmdE9+HVoJCBAUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NDM3OTE3NjE2MkYxMUYxODYzNUE3RTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUD4DBAOaUEAwDQYJ
KoZIhvcNAQELBQADggEBALPrA3OWfJhh5Th52vWDxNItL92Odh2R9HRrhTZecD0a
g6BuDAVX8VMyDeQxlofW0/nGc8gw0EPpPJweYjIW5cl5eCrBjYE8Z3njC2TyLVZh
Gc2Rxo5leua5wSwshfu32Onyc/dXtzdmPPb2/jYKpWILhUaIU0iY29FidJJcpQtb
TYovDQT6JO5+UCV45DKH6A0SzcfEWGpxOLMvY1T7hnbYbw0QsgnTFIGAb8qrdUaG
JN8Ca7YcmGJBpZHbI71LFSO2ypOkTF7YIZGicOGSvMnTw/6/T2IO0BdovlBBNS+3
kioxorzbxEP056EciuhpysFuO/oGTCjVAf0ZwDv/o4U=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:44 2026 by rpki-client