Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FAA26458EC11F185418DB2CE1D38B0.roa
File: D4FAA26458EC11F185418DB2CE1D38B0.roa (raw, json)
Hash identifier: ARpLVKoM8z3scdufKc17n3/FYkCmYpMjzdFa1iaaZMw=
Subject key identifier: 6A:18:6A:35:E4:1C:53:00:2C:85:55:D4:AC:31:FE:A3:2C:80:2B:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FAA26458EC11F185418DB2CE1D38B0.roa
Signing time: Tue 26 May 2026 10:22:44 +0000
ROA not before: Tue 26 May 2026 10:22:39 +0000
ROA not after: Fri 07 May 2027 10:22:39 +0000
asID: 9304
IP address blocks: 154.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118703 (0x1cfaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 10:22:39 2026 GMT
Not After : May 7 10:22:39 2027 GMT
Subject: CN=6a157474-6897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:a2:56:6f:05:e8:15:1b:f8:88:41:6d:00:
c6:34:31:62:1b:d7:59:e2:f2:f9:5f:01:06:76:57:
95:28:5b:a7:04:cf:fc:2d:44:ac:e2:89:29:4a:5d:
91:71:a9:66:06:1c:8a:ba:78:5f:26:1a:03:69:32:
2d:08:77:98:7a:0e:72:0b:5b:db:ab:48:05:36:f4:
fe:ff:53:2e:f2:e0:75:b7:fd:f4:0e:8b:3b:b2:71:
1c:ad:b2:50:40:d0:12:0e:07:84:97:e7:09:cd:27:
71:50:63:4e:40:c8:a9:c9:8c:db:e2:a5:53:d9:db:
71:a2:23:73:e1:63:c7:0d:34:8a:60:5d:46:f5:33:
7e:f9:33:74:c3:7c:af:b1:4e:8a:8d:19:4f:3b:b4:
a6:3f:c7:c8:79:c9:e6:4c:43:5a:bb:f1:ab:56:60:
91:b4:c4:40:fa:c3:f7:9d:5b:14:b6:25:42:a7:73:
13:dd:d9:d6:10:c1:9c:a9:e1:87:cb:f9:5b:1e:b0:
37:72:bb:f1:71:0f:c2:58:83:5d:30:3f:6c:4d:31:
c7:74:1a:31:11:7b:a0:53:3f:cb:cb:8d:b3:14:34:
c0:b5:44:af:ff:50:39:8e:27:e3:cf:c3:07:18:b6:
37:62:0b:33:90:5c:31:76:ab:f9:2d:1d:8b:18:a1:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:18:6A:35:E4:1C:53:00:2C:85:55:D4:AC:31:FE:A3:2C:80:2B:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FAA26458EC11F185418DB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.5.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:76:46:f1:ca:98:d9:a8:80:0a:02:8e:e3:3e:e7:93:8e:46:
2a:90:79:65:fe:78:70:f2:3c:ce:cc:28:36:1b:70:ca:77:13:
d7:88:3e:b4:f5:4c:25:3c:b9:88:dc:76:19:7d:bf:e6:4e:57:
b3:fc:52:92:9b:2e:42:0e:de:1f:c3:80:d3:a1:46:cd:a4:3c:
f8:4c:9a:47:80:28:42:d4:9d:c9:5e:62:58:04:fa:0f:ad:2e:
2b:eb:7c:1e:25:59:fc:f3:8b:41:11:ab:16:9a:b7:e4:44:c7:
04:74:97:61:41:73:60:36:96:5f:ef:c2:bd:e6:d8:e5:dc:0e:
0f:22:68:96:7a:9a:b5:24:b0:12:e1:a5:c6:71:08:11:42:3c:
08:d1:90:53:1b:18:76:d6:de:98:1d:08:45:7f:b6:35:35:b9:
a1:0b:0e:ae:20:87:3f:42:4b:a8:6b:a9:d8:ce:69:e9:4e:d7:
cb:9e:10:8c:3b:14:ba:04:56:6a:b7:fb:f7:57:8f:89:ee:ac:
08:8d:6d:25:44:a8:4f:3b:fb:7b:02:9c:d5:e5:8b:a8:fe:7c:
69:57:7b:bb:85:67:a1:7b:aa:f4:b4:08:c7:75:76:3d:94:13:
bd:13:71:f3:9e:20:3e:fc:b3:da:b2:02:9a:d5:98:5a:5a:1f:
82:dc:43:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc+vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI2MTAyMjM5WhcNMjcwNTA3MTAyMjM5WjAYMRYw
FAYDVQQDEw02YTE1NzQ3NC02ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3HyiVm8F6BUb+IhBbQDGNDFiG9dZ4vL5XwEGdleVKFunBM/8LUSs4okp
Sl2RcalmBhyKunhfJhoDaTItCHeYeg5yC1vbq0gFNvT+/1Mu8uB1t/30Dos7snEc
rbJQQNASDgeEl+cJzSdxUGNOQMipyYzb4qVT2dtxoiNz4WPHDTSKYF1G9TN++TN0
w3yvsU6KjRlPO7SmP8fIecnmTENau/GrVmCRtMRA+sP3nVsUtiVCp3MT3dnWEMGc
qeGHy/lbHrA3crvxcQ/CWINdMD9sTTHHdBoxEXugUz/Ly42zFDTAtUSv/1A5jifj
z8MHGLY3YgszkFwxdqv5LR2LGKGzLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGoY
ajXkHFMALIVV1Kwx/qMsgCvxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENEZBQTI2NDU4RUMxMUYxODU0MThEQjJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8FMA0GCSqGSIb3DQEB
CwUAA4IBAQCqdkbxypjZqIAKAo7jPueTjkYqkHll/nhw8jzOzCg2G3DKdxPXiD60
9UwlPLmI3HYZfb/mTlez/FKSmy5CDt4fw4DToUbNpDz4TJpHgChC1J3JXmJYBPoP
rS4r63weJVn884tBEasWmrfkRMcEdJdhQXNgNpZf78K95tjl3A4PImiWepq1JLAS
4aXGcQgRQjwI0ZBTGxh21t6YHQhFf7Y1NbmhCw6uIIc/Qkuoa6nYzmnpTtfLnhCM
OxS6BFZqt/v3V4+J7qwIjW0lRKhPO/t7ApzV5Yuo/nxpV3u7hWehe6r0tAjHdXY9
lBO9E3HzniA+/LPasgKa1ZhaWh+C3EPF
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:35 2026 by rpki-client