Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/754F3FAE508C11F1A8BFA9A2CE1D38B0.roa
File: 754F3FAE508C11F1A8BFA9A2CE1D38B0.roa (raw, json)
Hash identifier: U2ZaNgkpd2yjNwk82AZDVlL4Seqh+5AEzqpzbVFO0Kk=
Subject key identifier: 44:C8:CC:75:B2:1C:34:81:23:F4:9C:97:61:77:D6:58:E2:BF:62:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/754F3FAE508C11F1A8BFA9A2CE1D38B0.roa
Signing time: Fri 15 May 2026 18:32:42 +0000
ROA not before: Fri 15 May 2026 18:32:37 +0000
ROA not after: Mon 22 Jun 2026 18:32:37 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117714 (0x1cbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 18:32:37 2026 GMT
Not After : Jun 22 18:32:37 2026 GMT
Subject: CN=6a0766ca-a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:c1:66:2e:e4:42:c0:a5:40:96:a6:50:d5:
27:d0:e5:b9:4d:1c:07:3d:4b:c9:f5:73:27:0b:cb:
44:e1:32:bc:98:55:53:53:3c:fc:21:9b:b9:fa:5e:
8b:8d:8a:2d:a4:1c:2e:c7:00:49:68:e1:06:53:02:
13:da:c0:be:12:73:c1:8e:d0:2e:9c:22:4c:25:dd:
92:5c:1f:1d:0a:a9:97:d2:d5:1c:c2:77:db:c8:54:
c1:57:3a:31:e9:8d:1f:e0:e4:d5:78:a9:5c:0a:06:
f1:27:b2:63:99:00:b7:c0:ba:6d:6f:a4:72:5e:4a:
b1:8b:81:71:e1:ff:8c:00:07:81:12:9f:c3:82:9d:
2a:02:c6:d2:06:b8:d0:53:87:37:0f:c3:b7:1c:01:
f0:0c:3e:cd:4f:29:6f:4b:eb:21:8f:d6:22:dc:a9:
63:97:e5:56:0e:09:c8:a6:c9:34:56:a6:5a:2f:8b:
97:0d:66:46:bd:90:74:72:fb:e5:9a:15:ce:af:4a:
c1:32:cf:57:aa:5c:24:ea:cc:08:34:de:c6:23:50:
51:f8:ca:cb:c9:c1:93:b8:07:8e:18:69:b6:66:11:
3f:e1:93:62:de:0a:1a:fa:ee:5c:b2:b8:76:ad:e4:
07:38:11:8a:ca:98:58:83:65:f6:95:79:28:f5:39:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C8:CC:75:B2:1C:34:81:23:F4:9C:97:61:77:D6:58:E2:BF:62:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/754F3FAE508C11F1A8BFA9A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
41:62:ed:2a:28:c6:43:1d:58:13:d1:91:79:96:bd:a7:c8:db:
2b:48:bc:62:17:27:f3:e4:19:a5:6b:4e:bb:c2:9d:f3:da:94:
05:4e:fb:9b:f3:dd:71:51:d2:87:d5:b8:8f:fc:df:e8:dd:5a:
9f:7f:ad:1e:50:63:9c:58:f4:1e:52:2a:a6:37:85:be:e1:7e:
01:b3:60:a2:b3:ed:9f:5b:11:bb:4e:9d:22:d8:39:3f:e9:e0:
74:66:2a:f9:bb:f7:1d:a4:ee:47:ea:e9:83:54:cc:ac:25:34:
68:7f:3a:73:1f:28:fc:b2:ca:e4:80:e8:ef:81:cc:04:f3:98:
76:39:58:d2:c0:54:22:f8:b3:2b:ba:12:55:e1:d8:98:09:84:
0f:b1:bb:99:0c:b5:71:a6:31:92:09:d9:eb:5c:9f:ef:fe:c6:
d2:34:8f:2c:4a:37:6f:18:c0:99:09:a0:81:a4:4b:57:ef:49:
6b:26:35:e6:d0:7d:bf:1e:8d:f4:b6:fb:06:18:5b:34:58:38:
8f:7f:7a:6f:cc:94:ad:75:01:a4:db:5c:bb:30:46:11:66:26:
d9:28:27:91:f8:35:01:08:74:32:9f:d6:91:ab:0c:3a:84:35:
72:4e:ac:b1:8f:43:f0:ac:23:82:1e:8c:f8:83:d3:47:72:6d:
db:97:be:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcvSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE1MTgzMjM3WhcNMjYwNjIyMTgzMjM3WjAYMRYw
FAYDVQQDEw02YTA3NjZjYS1hMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq0/BZi7kQsClQJamUNUn0OW5TRwHPUvJ9XMnC8tE4TK8mFVTUzz8IZu5
+l6LjYotpBwuxwBJaOEGUwIT2sC+EnPBjtAunCJMJd2SXB8dCqmX0tUcwnfbyFTB
Vzox6Y0f4OTVeKlcCgbxJ7JjmQC3wLptb6RyXkqxi4Fx4f+MAAeBEp/Dgp0qAsbS
BrjQU4c3D8O3HAHwDD7NTylvS+shj9Yi3Kljl+VWDgnIpsk0VqZaL4uXDWZGvZB0
cvvlmhXOr0rBMs9Xqlwk6swINN7GI1BR+MrLycGTuAeOGGm2ZhE/4ZNi3goa+u5c
srh2reQHOBGKyphYg2X2lXko9Tm0qwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFETI
zHWyHDSBI/Scl2F31ljiv2IIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NTRGM0ZBRTUwOEMxMUYxQThCRkE5QTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQBBYu0qKMZDHVgT0ZF5lr2nyNsrSLxiFyfz5Bmla067wp3z2pQFTvub
891xUdKH1biP/N/o3Vqff60eUGOcWPQeUiqmN4W+4X4Bs2Cis+2fWxG7Tp0i2Dk/
6eB0Zir5u/cdpO5H6umDVMysJTRofzpzHyj8ssrkgOjvgcwE85h2OVjSwFQi+LMr
uhJV4diYCYQPsbuZDLVxpjGSCdnrXJ/v/sbSNI8sSjdvGMCZCaCBpEtX70lrJjXm
0H2/Ho30tvsGGFs0WDiPf3pvzJStdQGk21y7MEYRZibZKCeR+DUBCHQyn9aRqww6
hDVyTqyxj0PwrCOCHoz4g9NHcm3bl76I
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:16 2026 by rpki-client