Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C039C62A5B3511F18D283513CF1D38B0.roa
File: C039C62A5B3511F18D283513CF1D38B0.roa (raw, json)
Hash identifier: gBkkIz+An3ZTznEp+HPWQHV8wObnRyqx44QoFrOWR1g=
Subject key identifier: 07:4D:77:84:AC:9A:24:A1:E7:0A:7E:C6:DA:33:72:75:D8:A0:CE:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D044
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C039C62A5B3511F18D283513CF1D38B0.roa
Signing time: Fri 29 May 2026 08:09:44 +0000
ROA not before: Fri 29 May 2026 08:09:40 +0000
ROA not after: Tue 07 Jul 2026 08:09:40 +0000
asID: 48031
IP address blocks: 154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118852 (0x1d044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 08:09:40 2026 GMT
Not After : Jul 7 08:09:40 2026 GMT
Subject: CN=6a1949c8-3986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:2c:2a:31:cd:74:b9:35:c7:89:3b:7c:e9:
15:6c:89:3f:d3:60:df:ca:b3:a7:74:0b:d4:14:9a:
24:90:2b:fb:c7:0f:2d:29:d0:fa:ea:f7:db:47:59:
ac:fd:d4:f8:45:ed:b2:db:4d:f3:24:b9:4c:af:4a:
20:42:c8:20:b6:cc:06:2a:a3:0b:2b:f4:65:a6:3e:
20:21:5f:82:b8:1d:54:cd:c3:52:3f:91:84:ac:c8:
76:b9:e0:ea:00:8d:40:fa:de:21:03:ad:a3:fc:43:
3a:58:03:06:e0:18:a8:fd:ba:30:ea:11:70:d8:03:
e2:17:7b:4f:0c:1b:00:c9:ad:a9:12:56:9c:9c:74:
13:2a:9e:4c:b3:a4:a3:c4:1e:2b:61:a2:70:c4:fa:
b0:b1:ee:53:2f:64:4f:b2:90:f2:da:87:90:50:3a:
01:7d:33:a4:1f:4f:f5:a0:79:1c:d1:3b:77:93:9e:
53:28:e6:de:fa:8f:d3:ef:dd:c8:bb:65:62:79:4a:
90:20:ae:10:43:26:83:1b:40:5d:19:4b:22:91:75:
fc:16:94:01:95:d6:46:72:d8:36:15:2a:e4:d1:a5:
0c:7b:2a:c5:e2:88:1d:da:9e:28:71:9a:0e:1b:0d:
01:27:9e:87:e0:68:3b:b0:25:41:aa:35:e7:26:64:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:77:84:AC:9A:24:A1:E7:0A:7E:C6:DA:33:72:75:D8:A0:CE:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C039C62A5B3511F18D283513CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.216.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b4:a3:29:88:1d:70:79:f9:90:6f:6f:35:10:43:98:ea:8e:
40:d2:7b:a9:96:3a:bf:8a:46:02:48:50:0c:df:cf:ed:54:5a:
a0:42:88:18:25:c5:85:49:e3:1e:8a:a8:5e:bb:81:69:e2:9e:
36:dd:56:83:be:ef:fc:77:ce:31:00:91:d4:7e:4b:b3:6c:9e:
42:e3:b3:f8:a5:af:17:bc:3c:fb:c2:ce:7a:4b:74:c3:65:21:
20:13:22:66:55:47:7b:22:d5:66:e9:fe:d8:44:cb:82:92:b3:
36:91:25:2b:ea:15:22:62:86:16:0e:86:cd:5a:85:d5:9d:a1:
65:ba:d6:58:3a:37:b2:5d:58:96:e1:97:e0:ce:c1:d8:a5:19:
e4:43:1b:6f:c5:13:d8:51:bb:fe:02:ee:f1:02:49:04:fb:9c:
1a:45:9a:fd:b3:da:ef:1b:35:13:bc:e3:30:09:01:8f:b4:7d:
59:02:e4:75:2f:34:d0:b6:c6:84:2c:88:50:1f:2d:06:f1:4a:
8c:29:a2:ea:ae:6e:85:d4:b5:bc:64:28:ea:8b:42:80:37:2e:
49:14:45:df:28:21:ef:ca:9e:3a:72:e7:01:d4:f3:44:5c:37:
94:2f:5d:9e:94:7a:30:f4:48:8f:8e:dc:fd:1f:49:0d:52:8a:
be:af:42:b3
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAdBEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDgwOTQwWhcNMjYwNzA3MDgwOTQwWjAYMRYw
FAYDVQQDEw02YTE5NDljOC0zOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzagsKjHNdLk1x4k7fOkVbIk/02DfyrOndAvUFJokkCv7xw8tKdD66vfb
R1ms/dT4Re2y203zJLlMr0ogQsggtswGKqMLK/Rlpj4gIV+CuB1UzcNSP5GErMh2
ueDqAI1A+t4hA62j/EM6WAMG4Bio/bow6hFw2APiF3tPDBsAya2pElacnHQTKp5M
s6SjxB4rYaJwxPqwse5TL2RPspDy2oeQUDoBfTOkH0/1oHkc0Tt3k55TKObe+o/T
793Iu2VieUqQIK4QQyaDG0BdGUsikXX8FpQBldZGctg2FSrk0aUMeyrF4ogd2p4o
cZoOGw0BJ56H4Gg7sCVBqjXnJmRWlQIDAQABo4ICvzCCArswHQYDVR0OBBYEFAdN
d4SsmiSh5wp+xtozcnXYoM4DMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDM5QzYyQTVCMzUxMUYxOEQyODM1MTNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAOa3tgDBACa3t4DBACa
3vIDBACa3vwDBACa31EwDQYJKoZIhvcNAQELBQADggEBAES0oymIHXB5+ZBvbzUQ
Q5jqjkDSe6mWOr+KRgJIUAzfz+1UWqBCiBglxYVJ4x6KqF67gWninjbdVoO+7/x3
zjEAkdR+S7NsnkLjs/ilrxe8PPvCznpLdMNlISATImZVR3si1Wbp/thEy4KSszaR
JSvqFSJihhYOhs1ahdWdoWW61lg6N7JdWJbhl+DOwdilGeRDG2/FE9hRu/4C7vEC
SQT7nBpFmv2z2u8bNRO84zAJAY+0fVkC5HUvNNC2xoQsiFAfLQbxSowpouquboXU
tbxkKOqLQoA3LkkURd8oIe/Knjpy5wHU80RcN5QvXZ6UejD0SI+O3P0fSQ1Sir6v
QrM=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:04:20 2026 by rpki-client