Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE66F71E4A0511F1B55BE6FBCE1D38B0.roa
File: BE66F71E4A0511F1B55BE6FBCE1D38B0.roa (raw, json)
Hash identifier: 7TyYyB39OOVzoly2GAsuGcvkp5/xaq3X+m5F3CCQ2SM=
Subject key identifier: 0F:61:A7:4D:17:BD:9B:E2:E5:5E:6B:A3:14:63:4D:52:5C:F2:E8:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE66F71E4A0511F1B55BE6FBCE1D38B0.roa
Signing time: Thu 07 May 2026 11:13:16 +0000
ROA not before: Thu 07 May 2026 11:13:11 +0000
ROA not after: Fri 15 May 2026 11:13:11 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117194 (0x1c9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 11:13:11 2026 GMT
Not After : May 15 11:13:11 2026 GMT
Subject: CN=69fc73cc-f7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:9e:a6:c8:24:21:95:e0:c6:db:bd:24:62:
5e:5f:92:a2:1b:76:14:99:3b:e2:fb:65:c8:5d:a5:
c3:07:c0:f3:5a:e8:82:47:c0:f6:0c:b7:2b:9c:14:
71:85:80:d6:a8:e3:bc:85:76:20:b3:f5:7a:77:99:
be:a4:be:bf:80:00:86:da:ec:19:79:ba:37:a0:e0:
1f:9b:d5:5c:f3:61:30:af:f8:d7:f2:bb:62:67:c9:
bf:fe:ff:87:d3:cc:a7:61:a6:a3:95:05:a0:e4:1f:
35:69:5f:ce:eb:cc:8c:d4:28:70:53:5e:a5:b7:8a:
b2:53:ba:1d:10:98:14:c3:2f:8b:da:1e:a9:e3:5e:
3d:83:bd:22:56:1d:6e:64:f9:c4:22:cc:a7:32:c1:
f6:fe:f9:b8:d3:28:b7:02:87:92:f3:f1:c1:41:45:
b8:ae:55:81:8a:14:6c:3f:b1:d1:9d:15:9d:21:50:
27:8f:e5:bc:b1:2c:fe:66:86:ea:47:fb:57:31:32:
f6:09:35:ae:98:2e:61:67:cd:30:b0:d4:5b:2f:5d:
a0:cc:dc:cb:fb:6b:a3:6d:a0:ef:f6:65:c1:31:a2:
94:ab:66:38:9d:c6:9e:b1:41:77:51:25:27:95:3b:
8f:a9:d3:48:86:4a:a0:21:4c:bb:d6:f3:59:4b:3a:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:A7:4D:17:BD:9B:E2:E5:5E:6B:A3:14:63:4D:52:5C:F2:E8:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE66F71E4A0511F1B55BE6FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
61:bf:cc:1c:80:13:7c:37:4a:ce:c3:cf:fc:2c:6c:2e:59:15:
ce:df:77:85:63:30:f1:8d:a2:e8:de:2c:72:a5:75:13:5d:15:
55:7c:17:bd:c5:1e:c3:78:a3:02:96:85:a4:9c:b6:06:03:73:
2f:1a:cd:14:52:4f:4d:d0:63:d5:50:7a:cb:2a:f4:a3:f4:82:
98:4a:64:fe:87:b8:30:3c:49:d6:5c:4c:09:40:8a:b7:d3:33:
4c:64:cc:33:62:b3:35:23:93:f1:87:ae:e9:8e:af:13:fe:e1:
31:de:51:93:2f:50:68:66:08:17:5e:28:ef:36:a9:2c:6c:6f:
99:00:86:88:c8:24:74:09:97:3d:ea:c2:68:b9:7f:a3:80:32:
72:59:12:7c:2f:cd:91:37:5a:c3:0f:b0:d8:f5:c6:6a:df:d2:
12:0f:55:59:7d:52:3d:18:73:9d:ea:1e:1a:96:c2:5f:31:07:
66:17:d5:4b:3b:d7:1c:96:d8:bb:2f:84:18:14:90:96:c2:6a:
da:ee:c5:78:52:24:b8:38:6a:aa:f8:2f:4d:f6:a4:3c:ea:d5:
84:34:d5:46:0b:15:b0:b0:3b:10:bc:ba:03:f7:a6:26:83:e8:
33:ce:6e:40:86:7a:ae:48:48:93:c5:e5:21:00:55:96:c5:7b:
83:b4:5d:29
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAcnKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA3MTExMzExWhcNMjYwNTE1MTExMzExWjAYMRYw
FAYDVQQDEw02OWZjNzNjYy1mN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0QyepsgkIZXgxtu9JGJeX5KiG3YUmTvi+2XIXaXDB8DzWuiCR8D2DLcr
nBRxhYDWqOO8hXYgs/V6d5m+pL6/gACG2uwZebo3oOAfm9Vc82Ewr/jX8rtiZ8m/
/v+H08ynYaajlQWg5B81aV/O68yM1ChwU16lt4qyU7odEJgUwy+L2h6p4149g70i
Vh1uZPnEIsynMsH2/vm40yi3AoeS8/HBQUW4rlWBihRsP7HRnRWdIVAnj+W8sSz+
ZobqR/tXMTL2CTWumC5hZ80wsNRbL12gzNzL+2ujbaDv9mXBMaKUq2Y4ncaesUF3
USUnlTuPqdNIhkqgIUy71vNZSzo2BQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFA9h
p00XvZvi5V5roxRjTVJc8uhnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRTY2RjcxRTRBMDUxMUYxQjU1QkU2RkJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmt+oAwQDmt+wAwQCmt+8
MA0GCSqGSIb3DQEBCwUAA4IBAQBhv8wcgBN8N0rOw8/8LGwuWRXO33eFYzDxjaLo
3ixypXUTXRVVfBe9xR7DeKMCloWknLYGA3MvGs0UUk9N0GPVUHrLKvSj9IKYSmT+
h7gwPEnWXEwJQIq30zNMZMwzYrM1I5Pxh67pjq8T/uEx3lGTL1BoZggXXijvNqks
bG+ZAIaIyCR0CZc96sJouX+jgDJyWRJ8L82RN1rDD7DY9cZq39ISD1VZfVI9GHOd
6h4alsJfMQdmF9VLO9cclti7L4QYFJCWwmra7sV4UiS4OGqq+C9N9qQ86tWENNVG
CxWwsDsQvLoD96Ymg+gzzm5AhnquSEiTxeUhAFWWxXuDtF0p
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:46 2026 by rpki-client