Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E2BDEC6D4E11F18B8BE7D7CE1D38B0.roa
File: B4E2BDEC6D4E11F18B8BE7D7CE1D38B0.roa (raw, json)
Hash identifier: UejQQ79FuAabrzR+4yAdbzXFEifgvcL4PAbgs7hrez8=
Subject key identifier: 5E:B9:6C:1F:CD:FB:8B:70:A9:86:C6:D3:5F:8C:F6:4E:DE:CB:96:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D445
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E2BDEC6D4E11F18B8BE7D7CE1D38B0.roa
Signing time: Sun 21 Jun 2026 08:53:44 +0000
ROA not before: Sun 21 Jun 2026 08:53:38 +0000
ROA not after: Thu 02 Jul 2026 08:53:38 +0000
asID: 214238
IP address blocks: 154.81.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119877 (0x1d445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 08:53:38 2026 GMT
Not After : Jul 2 08:53:38 2026 GMT
Subject: CN=6a37a698-c378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ac:19:d9:6f:a0:cf:30:20:00:d7:34:de:8a:
05:21:d9:5e:15:fd:8d:c6:43:30:68:5a:3a:fa:e4:
97:ef:64:d5:f5:3f:bc:ef:80:5d:9a:d9:f5:ea:86:
aa:8b:1f:fa:9e:80:e1:01:e2:5f:66:ce:80:ef:d4:
5b:fc:9e:5d:67:cf:59:c4:31:2d:ff:44:f7:f9:fb:
83:90:e6:a5:73:7e:da:51:97:60:8b:91:68:15:2e:
d1:32:74:bd:8a:1b:07:95:8e:b0:1c:c1:f5:1a:78:
a7:31:af:9c:ad:96:fc:b2:a4:20:9b:bf:7b:87:a1:
ad:04:68:b1:b8:8e:1b:39:e9:ce:0e:b0:b9:df:e6:
5e:0b:71:f6:e5:54:8a:57:e6:c7:08:0a:6f:66:af:
83:66:6f:d5:c9:5e:5e:09:26:02:43:16:e3:3f:3e:
47:8b:80:fb:10:f3:44:51:26:b1:0a:40:f5:63:97:
d9:ea:f5:25:fd:01:d9:26:30:17:9d:33:e8:18:bd:
dd:96:f5:ca:e5:fe:b9:69:f7:4b:8b:7d:a0:bd:d2:
5a:42:49:ee:67:ef:2f:ed:9b:0e:42:8c:15:46:78:
5f:e2:2a:2c:7f:3d:35:f8:dc:ab:b7:91:4c:00:ad:
fb:09:27:5f:e4:60:ec:b5:82:27:ff:d1:0a:f2:43:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:6C:1F:CD:FB:8B:70:A9:86:C6:D3:5F:8C:F6:4E:DE:CB:96:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E2BDEC6D4E11F18B8BE7D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:8f:40:00:f1:3d:50:22:b9:85:2a:90:65:4e:38:70:c4:ed:
ee:08:0d:78:87:f8:a7:3a:3b:61:a3:2f:13:52:b2:de:fb:a3:
6e:a3:53:0d:ce:e7:aa:bb:fa:44:be:b1:3c:80:1c:b1:2e:c7:
62:6c:27:ac:7c:f5:f7:14:cf:0b:bb:cd:6b:56:b2:2b:41:cc:
3e:18:e4:57:b3:6b:81:a2:fd:68:27:78:95:22:36:33:1f:f5:
bf:71:94:ca:ba:94:d4:83:67:b6:e9:00:9a:b9:e3:99:56:a4:
b8:8c:fd:8a:b5:fd:d5:32:86:1c:b4:9b:c6:80:f8:c0:54:1f:
95:1b:1a:67:b4:99:d2:da:78:6c:54:5d:ca:bc:f3:12:6d:39:
b4:66:be:92:cd:2a:b6:a4:6c:27:b7:b7:88:a3:76:a6:41:5c:
97:95:05:b4:0a:fb:1b:ac:19:1d:be:eb:53:6c:32:ba:cc:56:
f1:28:20:05:cf:87:e8:bb:5a:67:c6:51:c9:25:85:74:20:1f:
16:2a:8d:22:fd:bc:76:6c:3a:2c:4e:33:ed:e0:a6:e1:a4:1e:
10:e8:71:7c:2d:90:54:3f:7e:09:04:f1:6f:dd:cb:db:b7:5a:
ab:16:8b:c2:a1:fd:45:61:a5:7d:9d:05:52:5d:f9:7b:bb:e8:
0e:e4:d9:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdRFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIxMDg1MzM4WhcNMjYwNzAyMDg1MzM4WjAYMRYw
FAYDVQQDEw02YTM3YTY5OC1jMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+qwZ2W+gzzAgANc03ooFIdleFf2NxkMwaFo6+uSX72TV9T+874Bdmtn1
6oaqix/6noDhAeJfZs6A79Rb/J5dZ89ZxDEt/0T3+fuDkOalc37aUZdgi5FoFS7R
MnS9ihsHlY6wHMH1GninMa+crZb8sqQgm797h6GtBGixuI4bOenODrC53+ZeC3H2
5VSKV+bHCApvZq+DZm/VyV5eCSYCQxbjPz5Hi4D7EPNEUSaxCkD1Y5fZ6vUl/QHZ
JjAXnTPoGL3dlvXK5f65afdLi32gvdJaQknuZ+8v7ZsOQowVRnhf4iosfz01+Nyr
t5FMAK37CSdf5GDstYIn/9EK8kPdWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF65
bB/N+4twqYbG01+M9k7ey5b/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNEUyQkRFQzZENEUxMUYxOEI4QkU3RDdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlHBMA0GCSqGSIb3DQEB
CwUAA4IBAQC5j0AA8T1QIrmFKpBlTjhwxO3uCA14h/inOjthoy8TUrLe+6Nuo1MN
zuequ/pEvrE8gByxLsdibCesfPX3FM8Lu81rVrIrQcw+GORXs2uBov1oJ3iVIjYz
H/W/cZTKupTUg2e26QCaueOZVqS4jP2Ktf3VMoYctJvGgPjAVB+VGxpntJnS2nhs
VF3KvPMSbTm0Zr6SzSq2pGwnt7eIo3amQVyXlQW0CvsbrBkdvutTbDK6zFbxKCAF
z4fou1pnxlHJJYV0IB8WKo0i/bx2bDosTjPt4KbhpB4Q6HF8LZBUP34JBPFv3cvb
t1qrFovCof1FYaV9nQVSXfl7u+gO5Nn1
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:05 2026 by rpki-client