Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/821151AC42ED11F199BEB9D5CE1D38B0.roa
File: 821151AC42ED11F199BEB9D5CE1D38B0.roa (raw, json)
Hash identifier: F38KhaFHcq1M0O9uSf0N7UBwjg+PeiBYuTNEqDjSapM=
Subject key identifier: A4:21:60:32:20:A4:34:E0:26:27:50:02:52:D4:3B:91:02:0C:2A:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/821151AC42ED11F199BEB9D5CE1D38B0.roa
Signing time: Tue 28 Apr 2026 10:32:08 +0000
ROA not before: Tue 28 Apr 2026 10:32:04 +0000
ROA not after: Sun 26 Jul 2026 10:32:04 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116659 (0x1c7b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:32:04 2026 GMT
Not After : Jul 26 10:32:04 2026 GMT
Subject: CN=69f08ca8-4c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:f1:8d:4d:4f:04:02:9c:25:dd:18:9b:9e:
77:cc:aa:d6:21:46:ed:7c:e5:41:d3:35:d3:6a:58:
01:2d:98:35:92:00:35:63:23:d8:70:57:7d:9a:7c:
81:22:a0:94:4d:4a:f0:a1:9a:55:53:64:b3:ec:0b:
63:af:d3:7e:21:dd:b5:c5:ed:08:60:11:61:83:2c:
05:e3:c3:84:d1:ee:04:3a:0c:88:18:97:13:3f:bf:
fd:5f:e5:75:d4:b5:03:3e:51:4e:9d:ef:42:f7:6f:
29:fa:36:a7:b5:09:f2:14:8d:23:52:b2:90:8c:25:
1c:b8:af:6a:6f:47:04:25:7e:d2:0a:aa:62:6d:8b:
80:75:53:b1:26:3f:b0:bf:0e:e1:f2:1b:0f:9c:3f:
79:1b:42:cd:5e:04:bb:78:ce:66:33:b1:d9:87:11:
ec:e2:fc:75:77:ed:82:c1:e1:1d:1b:90:a6:5a:12:
2e:f1:3c:8b:21:bc:d6:4c:ef:c4:54:d7:9c:eb:28:
ee:f2:2c:7b:66:4b:1b:a8:46:f9:70:02:e2:b2:ef:
d7:19:76:26:ba:18:1c:9d:f5:b2:0e:d6:09:df:bc:
25:4d:de:e5:c4:c5:e1:30:2b:7e:7f:4d:e7:d7:4f:
bc:b5:47:d5:cc:3e:7c:c6:0f:96:18:0b:14:ae:26:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:60:32:20:A4:34:E0:26:27:50:02:52:D4:3B:91:02:0C:2A:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/821151AC42ED11F199BEB9D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:23:9d:78:e4:cf:49:b3:c5:8e:9c:96:19:b8:12:70:aa:14:
0c:9e:66:b6:25:a0:6a:bb:3e:b0:3a:b7:c3:a6:a8:3f:50:13:
dc:c7:3d:7c:69:79:c5:ad:b1:10:08:56:e9:0b:23:15:62:9c:
c7:c1:52:2c:80:d4:c0:ab:1f:1c:1e:65:7e:67:59:19:d8:f5:
1b:9f:4a:0a:10:1c:60:8c:4b:44:77:c4:0b:8f:c3:e9:bc:07:
32:10:c2:34:e2:8b:b7:58:2c:01:c7:d5:67:0b:49:60:b2:3e:
6a:dc:2a:7d:93:b5:70:39:39:c9:89:ef:d2:0d:87:6b:c1:76:
e1:01:b8:b6:bc:16:54:e3:66:68:58:63:0a:54:f5:8d:38:9f:
d6:fd:fc:38:5e:0c:7f:29:b8:69:1d:2a:09:d6:2d:96:cd:f9:
53:7d:d7:60:bf:5d:42:5e:89:e9:3c:28:be:96:fb:0f:a9:12:
db:4d:a0:c5:22:a3:d8:8b:55:96:58:9c:7f:88:b7:ef:13:d9:
48:35:b8:20:c2:aa:3c:09:7c:11:9f:0f:d2:07:7a:d0:f6:c5:
16:00:27:fc:3e:65:f1:2d:7c:da:65:04:b5:80:8d:d3:41:8d:
ba:81:50:c2:0f:0a:00:a8:c8:0d:06:af:fa:cc:b5:b5:88:e3:
22:83:dd:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcezMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI4MTAzMjA0WhcNMjYwNzI2MTAzMjA0WjAYMRYw
FAYDVQQDEw02OWYwOGNhOC00YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvPbxjU1PBAKcJd0Ym553zKrWIUbtfOVB0zXTalgBLZg1kgA1YyPYcFd9
mnyBIqCUTUrwoZpVU2Sz7Atjr9N+Id21xe0IYBFhgywF48OE0e4EOgyIGJcTP7/9
X+V11LUDPlFOne9C928p+jantQnyFI0jUrKQjCUcuK9qb0cEJX7SCqpibYuAdVOx
Jj+wvw7h8hsPnD95G0LNXgS7eM5mM7HZhxHs4vx1d+2CweEdG5CmWhIu8TyLIbzW
TO/EVNec6yju8ix7ZksbqEb5cALisu/XGXYmuhgcnfWyDtYJ37wlTd7lxMXhMCt+
f03n10+8tUfVzD58xg+WGAsUriYrkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKQh
YDIgpDTgJidQAlLUO5ECDCrUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MjExNTFBQzQyRUQxMUYxOTlCRUI5RDVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI6MA0GCSqGSIb3DQEB
CwUAA4IBAQCyI5145M9Js8WOnJYZuBJwqhQMnma2JaBquz6wOrfDpqg/UBPcxz18
aXnFrbEQCFbpCyMVYpzHwVIsgNTAqx8cHmV+Z1kZ2PUbn0oKEBxgjEtEd8QLj8Pp
vAcyEMI04ou3WCwBx9VnC0lgsj5q3Cp9k7VwOTnJie/SDYdrwXbhAbi2vBZU42Zo
WGMKVPWNOJ/W/fw4Xgx/KbhpHSoJ1i2WzflTfddgv11CXonpPCi+lvsPqRLbTaDF
IqPYi1WWWJx/iLfvE9lINbggwqo8CXwRnw/SB3rQ9sUWACf8PmXxLXzaZQS1gI3T
QY26gVDCDwoAqMgNBq/6zLW1iOMig90N
-----END CERTIFICATE-----
Generated at Wed May 6 16:43:46 2026 by rpki-client