Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFAC6DC909511F19FB4B416CF1D38B0.roa
File: CFFAC6DC909511F19FB4B416CF1D38B0.roa (raw, json)
Hash identifier: WVJrYfVTfIYAm6tuEW9b8qvi/VYXYUm9p//mnoHzQHY=
Subject key identifier: BE:E2:9E:43:1B:33:00:97:96:F2:40:C9:70:43:46:85:73:5D:7D:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFAC6DC909511F19FB4B416CF1D38B0.roa
Signing time: Wed 05 Aug 2026 06:20:54 +0000
ROA not before: Wed 05 Aug 2026 06:20:50 +0000
ROA not after: Sun 06 Sep 2026 06:20:50 +0000
asID: 45194
IP address blocks: 154.84.223.0/24 maxlen: 24
154.84.232.0/24 maxlen: 24
154.84.233.0/24 maxlen: 24
154.84.239.0/24 maxlen: 24
154.84.242.0/24 maxlen: 24
154.84.244.0/24 maxlen: 24
154.84.245.0/24 maxlen: 24
154.84.246.0/24 maxlen: 24
154.84.247.0/24 maxlen: 24
154.84.248.0/24 maxlen: 24
154.84.249.0/24 maxlen: 24
154.84.251.0/24 maxlen: 24
154.84.252.0/24 maxlen: 24
154.84.253.0/24 maxlen: 24
154.84.254.0/24 maxlen: 24
154.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122021 (0x1dca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 06:20:50 2026 GMT
Not After : Sep 6 06:20:50 2026 GMT
Subject: CN=6a72d646-5f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:04:7b:a2:be:29:b9:ca:7c:3b:19:59:6b:
34:45:62:43:d9:5e:4d:8b:41:a6:92:30:22:2e:e8:
1b:2f:da:9f:42:51:06:05:fa:4d:bb:b7:a9:61:2b:
c4:02:b5:e9:02:d3:8e:4a:e9:39:31:af:40:fa:c2:
6a:45:6c:c3:5d:d6:62:75:11:f3:44:bf:07:7d:59:
65:8f:7c:e3:23:93:1a:08:23:56:83:c6:32:a5:43:
ff:0e:28:1e:be:17:50:55:16:a5:ab:50:f9:1d:a6:
f4:75:14:15:70:f4:72:e5:ef:78:b9:a1:2b:2f:a2:
da:1e:7c:15:51:5e:4c:35:f8:5a:d1:31:99:e1:68:
94:67:0d:f2:1f:5a:21:bc:4d:7a:fe:2d:68:23:8e:
db:e9:cd:3d:a8:39:15:e4:31:14:af:1f:07:e4:a6:
9d:92:d0:a7:11:d3:b3:90:28:2f:52:a4:df:5a:8e:
83:73:4a:2d:bd:90:4e:e2:0d:95:14:73:f9:dc:9a:
dd:a4:15:e9:c7:8c:a4:4a:71:2b:e6:fe:70:21:b8:
16:60:18:3b:09:95:3f:4e:a1:a7:5a:e3:6d:26:24:
7d:fb:4a:67:e7:03:63:f0:a8:e2:24:db:e0:6e:b9:
32:d6:57:f3:b5:88:c1:a5:dd:4c:8d:b4:9c:5b:4f:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:9E:43:1B:33:00:97:96:F2:40:C9:70:43:46:85:73:5D:7D:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFAC6DC909511F19FB4B416CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.223.0/24
154.84.232.0/23
154.84.239.0/24
154.84.242.0/24
154.84.244.0-154.84.249.255
154.84.251.0-154.84.255.255
Signature Algorithm: sha256WithRSAEncryption
05:10:43:e9:77:e9:2f:6c:fe:ec:b3:ed:32:b5:8f:0f:e1:90:
d0:23:aa:50:1d:b6:72:9d:9f:98:f7:0e:92:da:d8:00:3e:d3:
f6:2a:9a:f7:bb:8e:62:34:20:d8:df:65:46:de:2f:0e:c1:23:
30:4d:b5:66:a6:e6:99:a8:29:ca:8a:a7:c9:02:4c:6a:0a:ae:
d5:e4:1b:64:16:d1:5d:dd:f3:0f:4d:98:e1:9a:77:0d:52:32:
49:db:b4:33:74:97:22:d2:ac:8a:5c:d3:fa:99:ab:c6:46:aa:
94:9d:1b:8e:7b:19:4e:c9:5d:d6:17:8b:cb:b7:59:8a:14:41:
46:9c:0f:b3:73:2f:93:65:1e:8d:ad:df:ef:4e:51:50:24:45:
af:0d:7a:26:df:d9:53:be:fd:5b:fe:fa:38:a8:e0:91:c6:d1:
7f:f4:4f:8d:a0:3e:60:f9:af:1c:18:cc:18:d2:9a:40:dd:a4:
a1:c0:09:f2:8a:2b:af:86:40:29:78:00:34:7b:dd:68:e1:e5:
e1:2e:aa:97:8f:b2:b7:b9:9b:10:51:4f:6c:69:4c:69:c0:94:
17:89:e7:db:d0:46:8a:66:e6:92:b5:9f:bb:b4:9f:f2:5c:c2:
eb:96:18:56:2f:c1:7e:a7:a9:49:5e:10:b8:36:f4:74:2e:da:
67:6f:36:5f
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDAdylMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA1MDYyMDUwWhcNMjYwOTA2MDYyMDUwWjAYMRYw
FAYDVQQDEw02YTcyZDY0Ni01ZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr+YEe6K+KbnKfDsZWWs0RWJD2V5Ni0GmkjAiLugbL9qfQlEGBfpNu7ep
YSvEArXpAtOOSuk5Ma9A+sJqRWzDXdZidRHzRL8HfVllj3zjI5MaCCNWg8YypUP/
DigevhdQVRalq1D5Hab0dRQVcPRy5e94uaErL6LaHnwVUV5MNfha0TGZ4WiUZw3y
H1ohvE16/i1oI47b6c09qDkV5DEUrx8H5KadktCnEdOzkCgvUqTfWo6Dc0otvZBO
4g2VFHP53JrdpBXpx4ykSnEr5v5wIbgWYBg7CZU/TqGnWuNtJiR9+0pn5wNj8Kji
JNvgbrky1lfztYjBpd1MjbScW0+uWwIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFL7i
nkMbMwCXlvJAyXBDRoVzXX38MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRkZBQzZEQzkwOTUxMUYxOUZCNEI0MTZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzAwQAmlTfAwQBmlToAwQAmlTv
AwQAmlTyMAwDBAKaVPQDBAGaVPgwCwMEAJpU+wMDAJpUMA0GCSqGSIb3DQEBCwUA
A4IBAQAFEEPpd+kvbP7ss+0ytY8P4ZDQI6pQHbZynZ+Y9w6S2tgAPtP2Kpr3u45i
NCDY32VG3i8OwSMwTbVmpuaZqCnKiqfJAkxqCq7V5BtkFtFd3fMPTZjhmncNUjJJ
27QzdJci0qyKXNP6mavGRqqUnRuOexlOyV3WF4vLt1mKFEFGnA+zcy+TZR6Nrd/v
TlFQJEWvDXom39lTvv1b/vo4qOCRxtF/9E+NoD5g+a8cGMwY0ppA3aShwAnyiiuv
hkApeAA0e91o4eXhLqqXj7K3uZsQUU9saUxpwJQXiefb0EaKZuaStZ+7tJ/yXMLr
lhhWL8F+p6lJXhC4NvR0LtpnbzZf
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:01 2026 by rpki-client