Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0DAA4F6237111F1AB68157CDAE4EC9C.roa
File: C0DAA4F6237111F1AB68157CDAE4EC9C.roa (raw, json)
Hash identifier: YBAhNX4AeKO3Xuk4NmGqF7Ui//4Rdk1JlzASVvOWAx0=
Subject key identifier: E6:7A:12:A6:96:29:93:46:E3:4D:14:FD:D7:FA:B8:47:BD:50:28:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0DAA4F6237111F1AB68157CDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 08:58:10 +0000
ROA not before: Thu 19 Mar 2026 08:58:05 +0000
ROA not after: Fri 24 Apr 2026 08:58:05 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114629 (0x1bfc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 08:58:05 2026 GMT
Not After : Apr 24 08:58:05 2026 GMT
Subject: CN=69bbbaa2-9776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:b9:2c:e8:53:3b:da:b3:cc:4d:39:1b:d8:
70:16:78:01:07:1c:a8:ba:0e:0c:dd:1d:59:10:86:
91:db:67:05:6d:a4:fc:4a:9d:1e:34:67:7d:7c:3a:
11:b9:8e:84:fb:86:ef:3b:20:90:c8:f7:c1:5e:e2:
85:29:53:97:02:55:3b:ef:b8:c0:ad:16:ee:7e:58:
b2:cf:bf:42:9f:a0:ca:e1:d6:70:0e:ca:c8:42:39:
d2:00:6c:99:bd:48:d7:5c:f1:eb:50:84:1e:3c:fa:
f8:9e:64:e8:5d:83:cb:47:86:56:94:6a:a4:27:2e:
a9:18:2b:d5:f8:9a:79:b9:b5:52:c7:46:10:d8:42:
62:bf:83:ad:06:eb:74:17:e8:eb:30:35:34:3f:8f:
81:73:ab:48:cb:8b:1e:58:72:e3:c5:e2:b0:16:b5:
5f:1f:65:80:54:15:6d:99:d2:99:68:f0:0d:eb:15:
30:8e:86:3d:4f:11:0d:0b:03:f8:53:ac:c4:a1:7c:
f0:f8:35:22:c6:99:f9:e3:0f:23:85:c8:11:8e:0f:
e1:98:b2:d1:ab:19:6d:6f:0f:cb:fd:93:4d:df:a7:
2a:97:dc:0c:c9:34:43:64:4e:a2:cb:fd:fd:bf:6c:
88:c4:67:5e:9c:2c:20:7e:ba:27:ae:7e:3e:b6:8c:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7A:12:A6:96:29:93:46:E3:4D:14:FD:D7:FA:B8:47:BD:50:28:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0DAA4F6237111F1AB68157CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f9:d0:92:55:a5:f8:1c:bb:ff:6c:70:3f:4a:eb:d6:42:3e:
e7:88:5a:53:aa:9a:20:5f:c7:da:ff:a0:57:52:c3:9a:c5:dc:
86:68:0a:cd:bd:66:c8:17:ed:8f:c6:6f:58:18:27:4a:f9:cf:
64:04:0a:21:00:b6:cb:ba:4e:38:37:76:33:96:db:70:a0:43:
51:ff:08:b5:e6:7b:05:53:72:6d:bf:8e:33:52:87:7b:81:35:
df:2f:9c:e6:55:34:a2:d8:ea:14:13:67:f7:48:66:bd:13:c0:
2d:be:da:7f:a9:2f:a0:53:20:e0:29:cb:e6:b2:35:f6:99:09:
30:41:45:76:e4:49:69:c4:3e:c3:3b:b8:df:f1:c3:a5:57:5b:
19:f7:74:fb:14:5f:1e:3f:22:6e:0a:86:d2:94:ad:e8:7c:03:
73:db:e8:6e:ab:91:c9:a4:d1:37:7e:7f:5a:16:67:5a:8d:8a:
7a:0e:2f:33:56:5c:70:2c:36:39:7e:4e:21:d4:f6:96:77:b8:
07:e2:d2:a2:c8:4a:78:a4:98:95:ea:2f:4f:b0:c0:97:a5:d3:
1b:88:97:35:e3:7c:fd:57:45:31:61:9b:3d:a9:5e:fb:6b:e1:
26:9d:fe:af:f2:d1:69:42:2c:54:07:c3:b0:4e:01:93:e4:d8:
0b:b0:54:bd
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAb/FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE5MDg1ODA1WhcNMjYwNDI0MDg1ODA1WjAYMRYw
FAYDVQQDEw02OWJiYmFhMi05Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyxW5LOhTO9qzzE05G9hwFngBBxyoug4M3R1ZEIaR22cFbaT8Sp0eNGd9
fDoRuY6E+4bvOyCQyPfBXuKFKVOXAlU777jArRbufliyz79Cn6DK4dZwDsrIQjnS
AGyZvUjXXPHrUIQePPr4nmToXYPLR4ZWlGqkJy6pGCvV+Jp5ubVSx0YQ2EJiv4Ot
But0F+jrMDU0P4+Bc6tIy4seWHLjxeKwFrVfH2WAVBVtmdKZaPAN6xUwjoY9TxEN
CwP4U6zEoXzw+DUixpn54w8jhcgRjg/hmLLRqxltbw/L/ZNN36cql9wMyTRDZE6i
y/39v2yIxGdenCwgfronrn4+towgCwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOZ6
EqaWKZNG400U/df6uEe9UCh6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMERBQTRGNjIzNzExMUYxQUI2ODE1N0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBASaWcADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBAA750JJVpfgcu/9scD9K69ZCPueIWlOqmiBf
x9r/oFdSw5rF3IZoCs29ZsgX7Y/Gb1gYJ0r5z2QECiEAtsu6Tjg3djOW23CgQ1H/
CLXmewVTcm2/jjNSh3uBNd8vnOZVNKLY6hQTZ/dIZr0TwC2+2n+pL6BTIOApy+ay
NfaZCTBBRXbkSWnEPsM7uN/xw6VXWxn3dPsUXx4/Im4KhtKUreh8A3Pb6G6rkcmk
0Td+f1oWZ1qNinoOLzNWXHAsNjl+TiHU9pZ3uAfi0qLISnikmJXqL0+wwJel0xuI
lzXjfP1XRTFhmz2pXvtr4Sad/q/y0WlCLFQHw7BOAZPk2AuwVL0=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:17 2026 by rpki-client