Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818695B2771311F186C3E3B0CE1D38B0.roa
File: 818695B2771311F186C3E3B0CE1D38B0.roa (raw, json)
Hash identifier: OZUzb1pHOcBziWKqk8Ebmj9H8c9Hx/eS+FFWahGKhTI=
Subject key identifier: 9D:3E:7B:E4:51:A7:77:AA:36:BE:96:60:2B:B6:DB:76:BB:86:00:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818695B2771311F186C3E3B0CE1D38B0.roa
Signing time: Fri 03 Jul 2026 19:15:09 +0000
ROA not before: Fri 03 Jul 2026 19:15:04 +0000
ROA not after: Wed 14 Oct 2026 19:15:04 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 11:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120548 (0x1d6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 19:15:04 2026 GMT
Not After : Oct 14 19:15:04 2026 GMT
Subject: CN=6a480a3d-83d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:a7:fe:f2:23:6b:29:bb:77:22:1e:ea:5d:
9d:ed:63:c6:d8:2e:59:d9:b8:f0:bb:65:35:db:cc:
6d:82:5a:6f:cd:a6:18:39:ed:15:b8:48:d8:83:36:
10:34:c4:18:23:8b:77:ad:15:ac:c9:68:91:aa:10:
69:55:23:8d:9e:cb:37:28:af:28:be:d2:66:96:be:
33:10:d2:d6:89:df:f3:51:4d:d1:26:ed:6f:04:00:
2e:ea:d8:9a:a5:d2:4d:86:c1:42:2f:b9:00:27:80:
b0:5f:c2:0f:a8:bc:ee:b7:56:77:0e:39:6f:76:3e:
74:62:f5:45:ff:38:a0:c6:2b:ec:a1:ee:fc:08:00:
c7:9d:30:e2:2f:14:36:71:62:10:87:82:b5:57:07:
9a:45:d6:01:9e:4b:97:2a:59:0c:bf:b8:7b:0c:c1:
31:bb:83:04:99:e5:91:c3:4d:fe:5e:65:75:06:6c:
72:f8:cd:7d:70:2a:1d:4d:78:88:e8:d4:d0:50:6e:
a6:3e:97:16:a1:cc:a5:d1:cb:52:33:34:38:a1:b3:
aa:ad:6b:54:7c:94:f2:2b:1d:2d:5c:a8:d5:e7:ab:
27:8a:b0:9e:ab:16:87:76:f0:24:a0:bb:65:a2:7f:
fc:bc:23:b6:41:0f:28:40:af:b5:4b:e6:e0:57:ca:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:7B:E4:51:A7:77:AA:36:BE:96:60:2B:B6:DB:76:BB:86:00:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818695B2771311F186C3E3B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:cb:d8:6b:e3:f3:a6:47:e0:95:15:0b:f0:3f:15:c6:25:d4:
c9:9d:a4:03:83:b5:de:a7:c3:1e:a1:44:aa:72:ed:fb:af:dc:
d5:af:c5:0a:07:3f:74:a4:43:09:06:de:71:dd:7a:49:9b:60:
2e:dd:4a:b3:6b:d8:51:eb:5f:ee:d3:db:d6:80:15:80:d5:f5:
51:c8:03:f9:1d:27:98:a6:c3:cb:a7:aa:6b:3d:40:73:37:57:
93:09:83:ca:ba:d2:d3:86:f0:ca:68:e9:68:3e:b7:d7:10:18:
df:4a:b3:78:87:36:ea:47:b9:42:72:86:7a:d9:1b:0a:91:38:
ed:a3:bf:6c:7f:cf:18:f0:8c:4a:e0:a6:2e:b5:6a:69:f7:77:
a2:d5:53:1d:6a:2d:79:a4:ad:4a:a4:5b:38:2f:11:8c:87:48:
1e:e6:97:1f:0f:2a:3a:28:e2:c6:46:a4:5a:56:14:85:70:44:
96:b1:91:8c:1a:36:31:ee:1d:f0:8e:ca:af:ef:2b:f1:36:e6:
01:a3:f4:9f:3e:65:2e:67:7a:49:22:ff:d7:e7:c2:de:16:03:
59:bd:ab:5c:fb:01:25:db:17:65:d5:6a:2b:a7:e1:2f:b0:4d:
ee:21:e6:cb:28:81:ad:12:2f:a7:be:b6:ca:04:58:f7:e3:dd:
25:7f:8a:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdbkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMTkxNTA0WhcNMjYxMDE0MTkxNTA0WjAYMRYw
FAYDVQQDEw02YTQ4MGEzZC04M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvsin/vIjaym7dyIe6l2d7WPG2C5Z2bjwu2U128xtglpvzaYYOe0VuEjY
gzYQNMQYI4t3rRWsyWiRqhBpVSONnss3KK8ovtJmlr4zENLWid/zUU3RJu1vBAAu
6tiapdJNhsFCL7kAJ4CwX8IPqLzut1Z3Djlvdj50YvVF/zigxivsoe78CADHnTDi
LxQ2cWIQh4K1VweaRdYBnkuXKlkMv7h7DMExu4MEmeWRw03+XmV1Bmxy+M19cCod
TXiI6NTQUG6mPpcWocyl0ctSMzQ4obOqrWtUfJTyKx0tXKjV56snirCeqxaHdvAk
oLtlon/8vCO2QQ8oQK+1S+bgV8oPNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ0+
e+RRp3eqNr6WYCu223a7hgAcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTg2OTVCMjc3MTMxMUYxODZDM0UzQjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVbMA0GCSqGSIb3DQEB
CwUAA4IBAQC4y9hr4/OmR+CVFQvwPxXGJdTJnaQDg7Xep8MeoUSqcu37r9zVr8UK
Bz90pEMJBt5x3XpJm2Au3Uqza9hR61/u09vWgBWA1fVRyAP5HSeYpsPLp6prPUBz
N1eTCYPKutLThvDKaOloPrfXEBjfSrN4hzbqR7lCcoZ62RsKkTjto79sf88Y8IxK
4KYutWpp93ei1VMdai15pK1KpFs4LxGMh0ge5pcfDyo6KOLGRqRaVhSFcESWsZGM
GjYx7h3wjsqv7yvxNuYBo/SfPmUuZ3pJIv/X58LeFgNZvatc+wEl2xdl1Worp+Ev
sE3uIebLKIGtEi+nvrbKBFj3490lf4oT
-----END CERTIFICATE-----
Generated at Thu Jul 9 16:53:02 2026 by rpki-client