Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B65D7ECC18B811F19B6136F2DAE4EC9C.roa
File: B65D7ECC18B811F19B6136F2DAE4EC9C.roa (raw, json)
Hash identifier: LO9juqdgI8I28JATs6p1L59m/B3Phbx2ks4xO7O6rqM=
Subject key identifier: 4F:A5:BD:BE:21:5C:DD:CF:66:53:00:F6:85:72:BE:24:C8:B2:9C:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B65D7ECC18B811F19B6136F2DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 17:28:24 +0000
ROA not before: Thu 05 Mar 2026 17:28:20 +0000
ROA not after: Thu 16 Apr 2026 17:28:20 +0000
asID: 40779
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114133 (0x1bdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 17:28:20 2026 GMT
Not After : Apr 16 17:28:20 2026 GMT
Subject: CN=69a9bd38-7074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:a1:a4:73:54:54:17:47:19:09:e8:cb:8e:
48:ee:8b:f7:11:83:f1:15:e9:5a:8e:2e:55:e4:bf:
00:72:aa:1a:d0:40:d2:d1:14:16:d1:ec:a7:42:29:
0b:43:21:dd:7a:7a:c7:f2:1e:fe:0b:17:d7:75:c8:
81:c2:04:be:a6:b9:d0:5f:11:70:aa:cb:c5:99:d4:
0d:92:23:18:09:d5:09:d5:ed:82:f9:78:06:56:90:
08:59:b6:77:37:2f:19:22:33:ad:65:cf:7c:d8:24:
12:a7:f8:62:07:5c:91:71:34:29:3f:91:90:01:83:
c6:0e:66:66:fe:6b:8a:d2:fe:1f:05:9f:5f:ff:e9:
54:a2:23:4a:0d:06:f5:11:41:fb:71:19:30:ad:2c:
9c:41:01:a1:68:bf:0f:e2:80:15:59:36:a6:ed:83:
9e:ca:31:aa:99:cb:9d:be:c5:59:d0:81:47:a9:e6:
b4:6e:28:e2:a7:fa:cc:a8:e6:be:97:6d:84:98:12:
0a:ff:4a:02:86:ea:52:44:1c:94:95:2f:4e:1e:1a:
1a:32:f1:e8:eb:cd:e5:a5:46:91:2c:5c:4a:b1:f0:
79:bd:e4:c6:87:81:bc:2d:f5:f4:aa:1e:0e:45:8b:
59:80:a0:20:cf:0c:b0:23:cd:a4:b0:be:8c:8a:44:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:BD:BE:21:5C:DD:CF:66:53:00:F6:85:72:BE:24:C8:B2:9C:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B65D7ECC18B811F19B6136F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:92:0c:30:83:66:a6:d4:49:56:91:17:a4:27:fc:52:36:ec:
d4:ce:0e:aa:0b:e2:95:73:71:d1:a4:8a:dd:be:80:f9:74:03:
4f:25:75:1a:76:c5:2b:ef:98:11:71:82:b7:46:84:75:06:23:
23:e0:a6:6d:d0:35:86:6e:52:46:52:21:50:c2:83:fc:2f:22:
78:93:bf:f1:45:86:6b:4c:a4:b8:27:96:3a:a1:b3:62:0b:08:
f3:66:e1:7d:1d:c1:6e:82:b7:f3:5e:fd:b7:1a:d8:61:da:9c:
cc:24:40:2c:10:31:23:b6:f6:7d:90:7f:9a:3c:30:0c:30:df:
67:69:3e:6a:53:96:10:8e:d2:8c:1e:3c:92:f7:b4:58:f3:46:
32:21:9f:19:27:87:83:37:ff:ab:dd:96:57:55:58:d5:68:29:
7a:d2:1c:9e:49:84:59:57:dd:a7:06:3b:37:c6:79:f7:d6:07:
24:f2:86:8a:e5:2b:a0:cb:20:31:46:3b:e0:a3:01:2d:36:ff:
55:fb:07:84:e9:91:a5:70:f7:9a:01:9d:0a:a2:35:cd:b2:d9:
47:26:8c:6a:60:bd:d7:3e:4c:a8:c2:6e:d3:d2:2e:75:62:cd:
6d:6e:b7:eb:aa:a4:8f:ae:7a:3c:e3:f0:51:9c:c6:62:4d:31:
8b:15:8f:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb3VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA1MTcyODIwWhcNMjYwNDE2MTcyODIwWjAYMRYw
FAYDVQQDEw02OWE5YmQzOC03MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqVShpHNUVBdHGQnoy45I7ov3EYPxFelaji5V5L8Acqoa0EDS0RQW0eyn
QikLQyHdenrH8h7+CxfXdciBwgS+prnQXxFwqsvFmdQNkiMYCdUJ1e2C+XgGVpAI
WbZ3Ny8ZIjOtZc982CQSp/hiB1yRcTQpP5GQAYPGDmZm/muK0v4fBZ9f/+lUoiNK
DQb1EUH7cRkwrSycQQGhaL8P4oAVWTam7YOeyjGqmcudvsVZ0IFHqea0bijip/rM
qOa+l22EmBIK/0oChupSRByUlS9OHhoaMvHo683lpUaRLFxKsfB5veTGh4G8LfX0
qh4ORYtZgKAgzwywI82ksL6MikR3XQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE+l
vb4hXN3PZlMA9oVyviTIspwAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNjVEN0VDQzE4QjgxMUYxOUI2MTM2RjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQBPkgwwg2am1ElWkRekJ/xSNuzUzg6qC+KVc3HRpIrdvoD5dANPJXUa
dsUr75gRcYK3RoR1BiMj4KZt0DWGblJGUiFQwoP8LyJ4k7/xRYZrTKS4J5Y6obNi
CwjzZuF9HcFugrfzXv23Gthh2pzMJEAsEDEjtvZ9kH+aPDAMMN9naT5qU5YQjtKM
HjyS97RY80YyIZ8ZJ4eDN/+r3ZZXVVjVaCl60hyeSYRZV92nBjs3xnn31gck8oaK
5SugyyAxRjvgowEtNv9V+weE6ZGlcPeaAZ0KojXNstlHJoxqYL3XPkyowm7T0i51
Ys1tbrfrqqSPrno84/BRnMZiTTGLFY9R
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:18 2026 by rpki-client