Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9695EDD85EB611F18D181DD1CE1D38B0.roa
File: 9695EDD85EB611F18D181DD1CE1D38B0.roa (raw, json)
Hash identifier: 8TE/Z9//wdQFEB0+eDV4Mb0LUGDnmWWA78uDvk+fmTs=
Subject key identifier: 2F:61:CC:AF:ED:9F:50:0E:6D:A5:91:BF:14:F2:C7:0F:00:47:71:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D156
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9695EDD85EB611F18D181DD1CE1D38B0.roa
Signing time: Tue 02 Jun 2026 19:09:33 +0000
ROA not before: Tue 02 Jun 2026 19:09:29 +0000
ROA not after: Sat 02 Jun 2029 19:09:29 +0000
asID: 17561
IP address blocks: 154.222.118.0/24 maxlen: 24
154.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119126 (0x1d156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 19:09:29 2026 GMT
Not After : Jun 2 19:09:29 2029 GMT
Subject: CN=6a1f2a6d-fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:e8:6a:20:4e:0f:ef:88:40:52:9c:cb:1b:
07:43:ca:70:93:5d:b6:e8:9b:c9:c0:0e:87:2c:60:
e3:3a:cf:15:c0:d5:87:8a:11:dc:aa:f1:f1:77:92:
2c:ef:69:f5:c0:5f:bc:fd:b1:66:4d:94:1d:3c:01:
59:cb:d9:bc:22:9a:7f:67:fa:72:52:5c:8f:0a:8a:
c7:82:13:32:66:9c:0b:37:ed:61:29:5c:05:a7:ac:
bd:74:a6:57:c7:16:ae:77:9a:68:ac:ad:e5:38:68:
05:5b:fb:10:af:7d:93:2e:72:2f:ec:3f:c9:a1:87:
d5:db:98:34:10:97:b5:10:94:37:73:a0:a0:3b:4d:
6b:a0:d1:26:14:70:2b:87:cb:7b:b0:8d:ae:f1:80:
27:85:7d:d4:66:a3:5d:a1:0b:72:a0:13:fd:31:17:
74:58:2c:72:ae:be:ad:5f:64:d2:66:d0:6f:61:02:
7b:1a:80:a7:66:f5:2b:11:3b:ec:b6:b4:c6:fe:76:
c5:2e:18:b6:aa:ca:b5:e9:95:c0:0f:55:f9:a0:55:
2d:64:85:1a:69:23:d4:90:1d:eb:6a:bb:ef:f0:39:
cb:37:9e:7f:28:d7:ba:36:8e:2b:84:5a:50:c5:0e:
43:ec:26:23:6b:5f:7a:75:5b:98:3c:77:3a:83:71:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:CC:AF:ED:9F:50:0E:6D:A5:91:BF:14:F2:C7:0F:00:47:71:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9695EDD85EB611F18D181DD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.118.0/23
Signature Algorithm: sha256WithRSAEncryption
09:66:a8:ea:fa:d8:82:ad:98:8a:04:3f:90:55:50:a0:23:32:
f3:65:14:ed:db:3b:35:7b:4f:fa:5d:99:34:7e:05:1e:28:0b:
10:fd:b0:21:e7:fa:39:c7:33:24:aa:47:a9:2d:e6:5a:f1:41:
3b:af:da:c0:fd:08:43:b5:cb:fe:bd:be:75:0a:dc:6b:39:b8:
00:14:d5:a8:8b:ef:5d:17:81:73:54:0b:72:7e:86:d6:03:9d:
29:4c:d4:74:61:d1:44:77:29:bb:3f:22:8b:8d:4e:b0:a0:01:
65:b1:a6:97:27:a5:a5:fd:3d:6e:26:5a:d4:8d:0e:b5:7d:f9:
d9:06:5f:6e:43:1e:99:dc:de:bd:44:f1:ee:a4:76:87:c2:5d:
34:b6:5d:c9:55:5d:03:5b:35:44:33:07:9c:f9:5f:39:b1:a4:
ff:c2:c3:4b:30:43:b1:90:8c:ec:34:17:3c:2f:b5:6d:ee:1b:
92:a4:d3:7a:86:34:e6:ec:05:0e:b6:03:0b:15:cf:ae:b1:06:
5f:05:87:50:2f:de:2e:81:08:f1:72:63:c5:a4:08:be:a7:f8:
34:b9:f5:29:bf:fc:bd:4d:a0:75:99:b8:79:fb:97:7b:c9:ab:
e2:e5:b7:25:74:e1:25:20:5b:76:59:90:16:63:51:b3:b3:d6:
68:24:b7:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdFWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjAyMTkwOTI5WhcNMjkwNjAyMTkwOTI5WjAYMRYw
FAYDVQQDEw02YTFmMmE2ZC1mY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0I/oaiBOD++IQFKcyxsHQ8pwk1226JvJwA6HLGDjOs8VwNWHihHcqvHx
d5Is72n1wF+8/bFmTZQdPAFZy9m8Ipp/Z/pyUlyPCorHghMyZpwLN+1hKVwFp6y9
dKZXxxaud5porK3lOGgFW/sQr32TLnIv7D/JoYfV25g0EJe1EJQ3c6CgO01roNEm
FHArh8t7sI2u8YAnhX3UZqNdoQtyoBP9MRd0WCxyrr6tX2TSZtBvYQJ7GoCnZvUr
ETvstrTG/nbFLhi2qsq16ZXAD1X5oFUtZIUaaSPUkB3rarvv8DnLN55/KNe6No4r
hFpQxQ5D7CYja196dVuYPHc6g3GW+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC9h
zK/tn1AObaWRvxTyxw8AR3EiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Njk1RUREODVFQjYxMUYxOEQxODFERDFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt52MA0GCSqGSIb3DQEB
CwUAA4IBAQAJZqjq+tiCrZiKBD+QVVCgIzLzZRTt2zs1e0/6XZk0fgUeKAsQ/bAh
5/o5xzMkqkepLeZa8UE7r9rA/QhDtcv+vb51CtxrObgAFNWoi+9dF4FzVAtyfobW
A50pTNR0YdFEdym7PyKLjU6woAFlsaaXJ6Wl/T1uJlrUjQ61ffnZBl9uQx6Z3N69
RPHupHaHwl00tl3JVV0DWzVEMwec+V85saT/wsNLMEOxkIzsNBc8L7Vt7huSpNN6
hjTm7AUOtgMLFc+usQZfBYdQL94ugQjxcmPFpAi+p/g0ufUpv/y9TaB1mbh5+5d7
yavi5bcldOElIFt2WZAWY1Gzs9ZoJLdt
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:58 2026 by rpki-client