Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D379FE6275511F1ADEB9DA6DAE4EC9C.roa
File: 7D379FE6275511F1ADEB9DA6DAE4EC9C.roa (raw, json)
Hash identifier: TGA8unUzXEo7hcD5b4DlWoP0nJQkcwXxWVGzX7CkFtM=
Subject key identifier: AE:F2:FA:F8:57:23:D2:13:ED:2F:DA:A6:72:6F:B9:BB:60:38:6D:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D379FE6275511F1ADEB9DA6DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 07:45:56 +0000
ROA not before: Tue 24 Mar 2026 07:45:50 +0000
ROA not after: Thu 27 Aug 2026 07:45:50 +0000
asID: 45669
IP address blocks: 154.81.225.0/24 maxlen: 24
154.81.226.0/24 maxlen: 24
154.81.227.0/24 maxlen: 24
154.81.228.0/24 maxlen: 24
154.81.229.0/24 maxlen: 24
154.81.230.0/24 maxlen: 24
154.81.231.0/24 maxlen: 24
154.81.232.0/24 maxlen: 24
154.81.233.0/24 maxlen: 24
154.81.234.0/24 maxlen: 24
154.81.235.0/24 maxlen: 24
154.81.236.0/24 maxlen: 24
154.81.237.0/24 maxlen: 24
154.81.238.0/24 maxlen: 24
154.81.239.0/24 maxlen: 24
154.81.240.0/24 maxlen: 24
154.81.241.0/24 maxlen: 24
154.81.242.0/24 maxlen: 24
154.81.243.0/24 maxlen: 24
154.81.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114817 (0x1c081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 07:45:50 2026 GMT
Not After : Aug 27 07:45:50 2026 GMT
Subject: CN=69c24133-850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:a5:6c:05:60:12:37:ee:19:2e:f9:fd:1d:
47:7d:d8:11:56:09:33:7f:b6:e1:8e:99:11:7e:86:
c9:db:81:db:c2:c2:81:b5:7a:99:f5:c7:0e:e3:14:
72:f5:f3:5b:03:38:83:a8:e3:17:3d:2b:9d:f6:0f:
ad:f8:47:9e:45:e2:f5:b1:c3:fc:88:b1:62:8c:46:
be:22:c3:e3:70:bd:f6:42:ea:b4:f5:1f:49:d0:85:
dd:12:99:b0:43:60:db:2a:5a:7c:c2:a1:e8:83:96:
75:03:28:02:92:52:b4:66:8e:f1:2d:2b:0c:bb:85:
02:76:12:6f:2d:e2:a9:16:21:72:47:6c:2a:f6:ad:
59:04:1f:58:83:bc:0f:7f:8a:3e:bc:53:38:39:22:
f4:a4:2a:75:27:56:62:4a:85:71:d0:a8:2b:5c:06:
5b:ef:8d:d4:e9:69:65:fb:5a:44:dc:83:96:7e:da:
99:e5:36:a7:ea:13:1d:09:35:b4:66:58:5f:4a:24:
8b:1e:5c:02:47:9b:a4:03:a6:2c:dc:3d:84:87:c9:
05:18:2c:94:56:02:50:96:ab:c9:56:88:59:c0:66:
75:99:aa:4c:b6:2f:fa:be:da:f9:24:db:9e:fb:81:
44:5e:0d:0b:a6:58:7b:ba:06:7d:6b:8c:08:c4:ec:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F2:FA:F8:57:23:D2:13:ED:2F:DA:A6:72:6F:B9:BB:60:38:6D:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D379FE6275511F1ADEB9DA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.225.0-154.81.244.255
Signature Algorithm: sha256WithRSAEncryption
7c:90:9f:0f:5a:3e:79:4e:a9:15:b1:1e:93:fc:70:bd:d1:df:
99:e4:5d:30:22:e8:36:cf:c4:11:bb:17:49:05:9b:e1:20:aa:
a5:bc:d5:4a:47:84:10:52:0d:4e:be:fc:ae:6d:ce:0b:e6:b3:
3c:ee:e1:f7:90:40:ae:b1:b9:b7:ec:a3:95:d9:a5:fe:bd:5c:
f4:bd:c0:3d:2d:a5:28:df:77:99:01:33:33:b5:7d:45:0a:58:
e3:04:20:48:34:51:a8:f1:1c:23:b7:36:e3:d3:9c:a3:ae:b3:
d7:40:7a:ec:13:5a:b3:42:d2:5b:65:94:49:68:87:b5:af:ed:
3e:46:6e:3a:2a:b6:41:f2:80:5a:04:d0:2a:99:3e:b2:e9:85:
74:da:f6:a9:34:70:63:43:0b:b1:6a:e2:ef:c5:0a:e4:cb:a7:
00:db:27:7b:c4:b5:04:4a:f2:15:f2:2d:93:94:ae:02:f4:89:
72:be:a6:9b:f6:33:15:5f:94:bd:e1:f7:49:b3:e1:b1:71:af:
85:56:61:90:1d:33:8d:85:cb:9f:7d:5d:93:92:1e:85:78:d1:
d4:e5:1a:d3:b1:4d:aa:3f:c5:d2:3f:f1:c8:1b:5c:1b:90:db:
91:55:50:a6:bc:1b:d8:d3:aa:45:18:59:df:30:3d:62:d2:a4:
1a:44:bb:bd
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcCBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI0MDc0NTUwWhcNMjYwODI3MDc0NTUwWjAYMRYw
FAYDVQQDEw02OWMyNDEzMy04NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyTqlbAVgEjfuGS75/R1HfdgRVgkzf7bhjpkRfobJ24HbwsKBtXqZ9ccO
4xRy9fNbAziDqOMXPSud9g+t+EeeReL1scP8iLFijEa+IsPjcL32Quq09R9J0IXd
EpmwQ2DbKlp8wqHog5Z1AygCklK0Zo7xLSsMu4UCdhJvLeKpFiFyR2wq9q1ZBB9Y
g7wPf4o+vFM4OSL0pCp1J1ZiSoVx0KgrXAZb743U6Wll+1pE3IOWftqZ5Tan6hMd
CTW0ZlhfSiSLHlwCR5ukA6Ys3D2Eh8kFGCyUVgJQlqvJVohZwGZ1mapMti/6vtr5
JNue+4FEXg0Lplh7ugZ9a4wIxOywkQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFK7y
+vhXI9IT7S/apnJvubtgOG2VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RDM3OUZFNjI3NTUxMUYxQURFQjlEQTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaUeEDBACaUfQwDQYJ
KoZIhvcNAQELBQADggEBAHyQnw9aPnlOqRWxHpP8cL3R35nkXTAi6DbPxBG7F0kF
m+EgqqW81UpHhBBSDU6+/K5tzgvmszzu4feQQK6xubfso5XZpf69XPS9wD0tpSjf
d5kBMzO1fUUKWOMEIEg0UajxHCO3NuPTnKOus9dAeuwTWrNC0ltllEloh7Wv7T5G
bjoqtkHygFoE0CqZPrLphXTa9qk0cGNDC7Fq4u/FCuTLpwDbJ3vEtQRK8hXyLZOU
rgL0iXK+ppv2MxVflL3h90mz4bFxr4VWYZAdM42Fy599XZOSHoV40dTlGtOxTao/
xdI/8cgbXBuQ25FVUKa8G9jTqkUYWd8wPWLSpBpEu70=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:54 2026 by rpki-client