Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8442A77E4E8B11F1902063FFCE1D38B0.roa
File: 8442A77E4E8B11F1902063FFCE1D38B0.roa (raw, json)
Hash identifier: EH8Ggez/lbi04t9wb+koblOz6s0PL8kCIPk7e/tjsus=
Subject key identifier: 65:CE:BA:A3:7F:44:A0:49:15:47:1C:9F:28:8D:B5:F7:CE:EA:51:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8442A77E4E8B11F1902063FFCE1D38B0.roa
Signing time: Wed 13 May 2026 05:20:55 +0000
ROA not before: Wed 13 May 2026 05:20:49 +0000
ROA not after: Tue 16 Jun 2026 05:20:49 +0000
asID: 22773
IP address blocks: 154.82.2.0/24 maxlen: 24
154.82.3.0/24 maxlen: 24
154.82.4.0/24 maxlen: 24
154.82.5.0/24 maxlen: 24
154.82.6.0/24 maxlen: 24
154.82.7.0/24 maxlen: 24
154.82.8.0/24 maxlen: 24
154.82.9.0/24 maxlen: 24
154.82.10.0/24 maxlen: 24
154.82.11.0/24 maxlen: 24
154.82.12.0/24 maxlen: 24
154.82.13.0/24 maxlen: 24
154.82.14.0/24 maxlen: 24
154.82.15.0/24 maxlen: 24
154.85.12.0/24 maxlen: 24
154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
154.90.7.0/24 maxlen: 24
154.90.8.0/24 maxlen: 24
154.90.9.0/24 maxlen: 24
154.90.10.0/24 maxlen: 24
154.90.11.0/24 maxlen: 24
154.90.12.0/24 maxlen: 24
154.90.13.0/24 maxlen: 24
154.90.14.0/24 maxlen: 24
154.90.15.0/24 maxlen: 24
154.90.16.0/24 maxlen: 24
154.90.17.0/24 maxlen: 24
154.90.19.0/24 maxlen: 24
154.90.20.0/24 maxlen: 24
154.90.21.0/24 maxlen: 24
154.90.22.0/24 maxlen: 24
154.90.23.0/24 maxlen: 24
154.90.24.0/24 maxlen: 24
154.90.25.0/24 maxlen: 24
154.90.26.0/24 maxlen: 24
154.90.27.0/24 maxlen: 24
154.90.132.0/24 maxlen: 24
154.90.141.0/24 maxlen: 24
154.90.144.0/24 maxlen: 24
154.90.145.0/24 maxlen: 24
154.90.146.0/24 maxlen: 24
154.90.147.0/24 maxlen: 24
154.90.148.0/24 maxlen: 24
154.90.149.0/24 maxlen: 24
154.90.150.0/24 maxlen: 24
154.90.151.0/24 maxlen: 24
154.94.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 May 2026 08:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117589 (0x1cb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 05:20:49 2026 GMT
Not After : Jun 16 05:20:49 2026 GMT
Subject: CN=6a040a37-ce10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:c0:5f:43:e1:93:0c:38:ed:16:e5:a6:a0:
ec:3b:57:d8:93:36:58:07:1a:95:d3:f5:b3:90:24:
03:60:69:b8:70:9d:2d:2a:85:d6:8c:04:d5:2e:5c:
2b:cb:a8:6d:53:1d:3a:13:a1:2f:cb:85:9f:ce:4c:
47:7f:10:8b:64:6a:3f:00:62:90:18:ca:c5:95:c0:
81:43:22:59:df:91:9e:d3:5b:2e:61:5e:3a:38:c7:
94:53:60:55:09:c0:97:70:87:31:e8:21:3b:ac:07:
b3:55:ca:85:d1:23:28:57:36:c5:1b:52:64:60:72:
03:66:96:e1:af:04:ee:70:ae:37:ce:41:b9:c2:23:
a1:2c:9b:6d:4c:44:53:76:27:71:e1:5f:f4:1d:81:
c3:95:09:54:36:32:2a:dd:db:30:57:48:2f:8f:0e:
56:e2:d8:fd:5a:75:95:17:2c:ca:d2:97:37:a0:4c:
82:a6:cb:74:a2:68:01:bf:42:90:bc:75:fa:ff:01:
8e:78:39:41:5c:06:c9:98:c2:de:aa:30:84:0c:13:
33:c1:8e:60:73:5a:31:d3:e6:ae:99:34:71:89:86:
1f:95:1b:1e:fa:39:66:2e:e4:8f:98:db:0e:db:a9:
fa:52:35:52:0d:d5:47:5e:4a:16:53:ca:81:9e:79:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:BA:A3:7F:44:A0:49:15:47:1C:9F:28:8D:B5:F7:CE:EA:51:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8442A77E4E8B11F1902063FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.2.0-154.82.15.255
154.85.12.0/24
154.85.107.0-154.85.119.255
154.90.2.0-154.90.17.255
154.90.19.0-154.90.27.255
154.90.132.0/24
154.90.141.0/24
154.90.144.0/21
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
87:57:68:f8:65:35:9a:17:44:08:b7:5e:b9:72:0b:b6:b2:52:
83:e2:e5:ba:df:82:3f:59:c2:2a:16:05:49:bb:66:16:68:7f:
51:38:3c:47:14:b8:70:c9:de:85:14:9d:38:c0:1c:37:97:1a:
18:99:6f:14:7a:2d:a7:0d:2a:4b:7e:ed:34:1e:70:38:3b:f9:
5b:f2:1c:32:c1:93:2e:34:aa:e5:7e:a3:97:f6:3e:67:23:ef:
8b:8f:2d:13:85:ac:9a:dc:01:13:38:61:5e:18:56:89:cb:dd:
8a:7e:45:0b:ad:83:f6:03:8c:4d:6a:98:2e:21:a3:19:15:d6:
11:03:3c:b0:b3:62:e4:9e:f2:04:de:ad:0f:b8:9e:9c:8a:e2:
52:84:0e:60:5c:98:ce:a8:00:38:1c:9e:6a:d1:4f:8a:37:cd:
20:8e:21:93:06:a7:7e:55:0b:d7:9e:db:e7:dd:44:f0:0e:5a:
3f:16:a4:a3:c7:36:53:3a:ba:40:bc:a5:f2:8b:a5:e2:cd:ff:
1a:70:e9:e1:9e:81:df:57:47:96:11:af:94:61:77:09:5b:86:
19:fa:3c:66:d4:ef:fe:22:78:db:3d:cf:a3:07:ed:d6:3a:09:
da:92:1c:eb:98:c4:44:bc:fb:46:ae:c0:1b:32:58:17:c9:1f:
8f:c2:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:20:03 2026 by rpki-client