Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DA664043A511F19AB54DB6CE1D38B0.roa
File: 75DA664043A511F19AB54DB6CE1D38B0.roa (raw, json)
Hash identifier: dkixXjzjTK1segeQ3+obbJJTtxNIfgF/7N8JzkD2Ars=
Subject key identifier: CB:3D:45:A1:70:EA:F4:9B:C9:64:02:0E:F4:2A:AC:DB:76:4C:D2:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DA664043A511F19AB54DB6CE1D38B0.roa
Signing time: Wed 29 Apr 2026 08:28:55 +0000
ROA not before: Wed 29 Apr 2026 08:28:50 +0000
ROA not after: Tue 02 Jun 2026 08:28:50 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116686 (0x1c7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 08:28:50 2026 GMT
Not After : Jun 2 08:28:50 2026 GMT
Subject: CN=69f1c147-e32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:54:ab:26:a9:3a:bb:35:42:06:91:e6:52:
cd:7d:f3:63:c9:65:ba:71:93:aa:f8:97:2a:47:6d:
aa:59:4b:98:83:6b:04:b5:59:9f:ce:19:e8:98:45:
fc:83:a3:c1:f4:61:01:ab:e9:f7:b2:05:19:ce:c6:
de:79:16:2d:09:65:2f:42:97:e1:d5:e5:33:7e:52:
52:b6:de:ec:cb:53:ef:b7:79:45:61:be:17:bc:f0:
a0:33:f7:3c:87:3e:9d:1d:95:b4:91:c5:fd:a8:83:
80:af:5a:0c:0d:d9:c9:f7:3b:d1:14:e2:a5:5d:58:
cc:a3:7d:d9:ed:05:90:e4:1c:34:93:78:90:04:33:
ff:83:38:d8:d0:ac:5c:04:dc:93:3d:d8:36:1a:17:
d1:85:ef:92:59:e5:af:54:07:ed:b3:2a:6f:85:d5:
80:77:1d:5f:ad:48:d7:47:dd:33:74:1e:0d:d1:05:
da:00:c3:a3:f8:69:90:59:5e:ef:35:1b:71:f6:f1:
94:53:e9:0e:fa:9b:3e:31:49:f3:8f:e7:74:00:6e:
ad:ec:07:d3:e9:e2:3a:35:0f:7f:cd:d9:bc:ed:a5:
a6:6c:08:2c:95:8f:3e:56:a3:7a:09:8e:12:2b:74:
e6:52:04:4d:91:b3:89:3f:79:fe:b9:18:5a:ad:66:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:45:A1:70:EA:F4:9B:C9:64:02:0E:F4:2A:AC:DB:76:4C:D2:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DA664043A511F19AB54DB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
95:07:53:b2:98:15:84:02:d6:8d:91:dc:1a:69:4c:ba:7d:01:
7f:77:2e:04:d6:c7:59:f8:76:fe:94:53:66:33:a5:53:5f:f5:
cb:7b:ee:9c:f6:7c:65:a0:11:0a:64:a7:5f:50:43:d9:64:fe:
11:e2:8f:81:0b:ce:b0:e2:74:8a:27:50:bf:e8:cd:13:fc:f8:
e3:0c:71:40:36:d1:1a:ff:0f:0a:0d:9a:54:1b:6e:42:59:df:
e2:84:ae:20:e6:e5:73:19:8a:e7:eb:f0:18:3c:70:c1:70:bb:
49:ec:61:64:e2:c4:8b:e4:48:b5:1a:1c:b9:21:00:aa:55:75:
28:91:aa:a7:9f:71:9a:d2:2e:9d:a2:70:60:ee:6a:92:79:e1:
d6:1c:54:7f:08:95:77:dc:dd:2a:9b:bb:3d:c2:75:30:a8:d5:
aa:9c:ee:43:1b:0e:1e:b5:26:ff:74:66:21:67:b3:dd:4c:20:
b7:d8:50:f8:dd:e8:98:7c:4a:2f:f4:ff:5d:55:04:f2:3d:fc:
e9:77:26:5f:4d:30:04:a2:29:8c:af:60:f6:d5:61:2d:eb:88:
88:35:ba:37:aa:58:7d:75:a6:b6:dd:16:e1:df:46:4b:7d:fb:
8b:6e:2d:15:8f:a0:1d:03:96:88:75:e2:e6:5c:07:fa:95:da:
fa:f2:a5:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcfOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI5MDgyODUwWhcNMjYwNjAyMDgyODUwWjAYMRYw
FAYDVQQDEw02OWYxYzE0Ny1lMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5x9UqyapOrs1QgaR5lLNffNjyWW6cZOq+JcqR22qWUuYg2sEtVmfzhno
mEX8g6PB9GEBq+n3sgUZzsbeeRYtCWUvQpfh1eUzflJStt7sy1Pvt3lFYb4XvPCg
M/c8hz6dHZW0kcX9qIOAr1oMDdnJ9zvRFOKlXVjMo33Z7QWQ5Bw0k3iQBDP/gzjY
0KxcBNyTPdg2GhfRhe+SWeWvVAftsypvhdWAdx1frUjXR90zdB4N0QXaAMOj+GmQ
WV7vNRtx9vGUU+kO+ps+MUnzj+d0AG6t7AfT6eI6NQ9/zdm87aWmbAgslY8+VqN6
CY4SK3TmUgRNkbOJP3n+uRharWaHmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMs9
RaFw6vSbyWQCDvQqrNt2TNIHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NURBNjY0MDQzQTUxMUYxOUFCNTREQjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlEgMA0GCSqGSIb3DQEB
CwUAA4IBAQCVB1OymBWEAtaNkdwaaUy6fQF/dy4E1sdZ+Hb+lFNmM6VTX/XLe+6c
9nxloBEKZKdfUEPZZP4R4o+BC86w4nSKJ1C/6M0T/PjjDHFANtEa/w8KDZpUG25C
Wd/ihK4g5uVzGYrn6/AYPHDBcLtJ7GFk4sSL5Ei1Ghy5IQCqVXUokaqnn3Ga0i6d
onBg7mqSeeHWHFR/CJV33N0qm7s9wnUwqNWqnO5DGw4etSb/dGYhZ7PdTCC32FD4
3eiYfEov9P9dVQTyPfzpdyZfTTAEoimMr2D21WEt64iINbo3qlh9daa23Rbh30ZL
ffuLbi0Vj6AdA5aIdeLmXAf6ldr68qXG
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:13 2026 by rpki-client