Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C25906506111F1995A25A7CE1D38B0.roa
File: F7C25906506111F1995A25A7CE1D38B0.roa (raw, json)
Hash identifier: 5d4wf1m2BLvTG5Lc2rBJ5IEY6Zh9MctX8EKhAgbwe2M=
Subject key identifier: 68:6D:39:13:53:21:FB:92:3B:BF:17:9A:17:E9:DF:2C:00:E8:83:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C25906506111F1995A25A7CE1D38B0.roa
Signing time: Fri 15 May 2026 13:28:33 +0000
ROA not before: Fri 15 May 2026 13:28:28 +0000
ROA not after: Sat 13 Jun 2026 13:28:28 +0000
asID: 17497
IP address blocks: 154.196.184.0/21 maxlen: 24
154.211.128.0/19 maxlen: 24
154.222.128.0/22 maxlen: 24
154.222.130.0/24 maxlen: 24
154.222.131.0/24 maxlen: 24
154.222.148.0/22 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117688 (0x1cbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 13:28:28 2026 GMT
Not After : Jun 13 13:28:28 2026 GMT
Subject: CN=6a071f81-54eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:2e:d8:4b:c3:ce:1d:e5:5e:84:42:a3:01:
11:a1:2e:db:6d:2d:9f:e2:60:a5:03:b2:f7:a2:2c:
81:73:10:cf:a0:fc:56:1f:5c:c4:fd:b1:82:80:47:
b6:f6:57:ef:82:ab:f2:ca:21:a8:c5:66:87:a2:4b:
e1:a1:90:af:f5:f4:a9:2b:58:d1:e8:e4:a4:6f:3a:
d9:57:e0:36:52:43:ca:73:c8:39:c6:12:98:16:29:
d6:a5:b9:91:67:60:a2:a3:a0:33:31:c1:ca:e4:cc:
c4:ca:df:1d:b9:cd:69:ee:45:bc:83:35:97:ba:57:
d0:37:50:73:3e:ab:26:3f:f5:e4:c9:ce:a3:4c:40:
ef:44:7e:18:50:4f:f9:e4:a8:f8:85:d3:68:9c:8e:
b9:8b:6b:95:f8:14:ee:7e:aa:4f:fd:4c:89:0d:d4:
dc:b9:c9:47:28:cf:ee:02:9e:1e:a4:a4:55:42:15:
da:8f:38:55:44:5a:7a:aa:94:00:c0:4f:e7:d9:dd:
96:8b:e7:23:94:08:3d:d8:a3:33:70:47:62:54:39:
11:50:3e:f7:b9:63:d0:05:3f:28:40:c6:e1:eb:ca:
b4:2c:55:1c:d1:dc:93:6f:ab:4b:93:69:b0:c5:49:
56:ec:31:48:1e:fc:7f:10:b4:e2:b2:50:a7:0f:89:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:39:13:53:21:FB:92:3B:BF:17:9A:17:E9:DF:2C:00:E8:83:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C25906506111F1995A25A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.184.0/21
154.211.128.0/19
154.222.128.0/22
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:78:76:48:e1:80:b3:70:50:c2:ec:49:5a:2a:98:0c:39:47:
34:98:ba:d8:21:2b:8c:54:25:49:e1:bd:c2:c2:af:6b:c8:cd:
c0:10:83:18:14:bc:e2:aa:cd:a2:ac:6e:b1:16:f3:76:94:7f:
49:30:d8:bb:3b:11:80:99:20:36:c0:7f:87:de:71:5a:f9:75:
6e:70:67:24:2f:6d:d0:44:f2:a4:d3:41:14:c2:63:6a:6c:3b:
c5:e1:06:ec:6d:4d:d2:a4:e1:4c:c3:4f:98:13:6e:1c:32:c8:
b0:32:26:56:1c:8c:ba:00:1e:03:21:46:26:13:cf:bb:d8:e2:
50:a3:71:89:80:12:31:69:0f:25:f0:76:c5:33:d0:ca:fd:78:
3f:9c:10:92:5d:31:da:64:b6:07:f1:2c:d8:66:57:43:b1:7e:
72:29:61:6c:fa:03:8c:48:c6:55:56:70:f5:e1:8e:3d:27:e8:
fb:00:71:7c:c1:f6:43:f3:8a:b0:99:02:57:9e:83:76:f4:c0:
bb:9e:2c:c1:af:e1:a3:d0:4b:06:68:43:01:de:8e:db:36:50:
06:6a:7b:ce:2a:f8:8c:36:db:57:cd:27:62:54:c8:0b:4f:b1:
f5:06:cb:a6:04:a1:b4:90:1b:4e:3e:d4:5c:26:e5:8e:f3:af:
94:99:96:ea
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAcu4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE1MTMyODI4WhcNMjYwNjEzMTMyODI4WjAYMRYw
FAYDVQQDEw02YTA3MWY4MS01NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxzEu2EvDzh3lXoRCowERoS7bbS2f4mClA7L3oiyBcxDPoPxWH1zE/bGC
gEe29lfvgqvyyiGoxWaHokvhoZCv9fSpK1jR6OSkbzrZV+A2UkPKc8g5xhKYFinW
pbmRZ2Cio6AzMcHK5MzEyt8duc1p7kW8gzWXulfQN1BzPqsmP/Xkyc6jTEDvRH4Y
UE/55Kj4hdNonI65i2uV+BTufqpP/UyJDdTcuclHKM/uAp4epKRVQhXajzhVRFp6
qpQAwE/n2d2Wi+cjlAg92KMzcEdiVDkRUD73uWPQBT8oQMbh68q0LFUc0dyTb6tL
k2mwxUlW7DFIHvx/ELTislCnD4kcRwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFGht
ORNTIfuSO78Xmhfp3ywA6IMZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GN0MyNTkwNjUwNjExMUYxOTk1QTI1QTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDmsS4AwQFmtOAAwQCmt6A
AwQCmt6UMA0GCSqGSIb3DQEBCwUAA4IBAQDXeHZI4YCzcFDC7ElaKpgMOUc0mLrY
ISuMVCVJ4b3Cwq9ryM3AEIMYFLziqs2irG6xFvN2lH9JMNi7OxGAmSA2wH+H3nFa
+XVucGckL23QRPKk00EUwmNqbDvF4QbsbU3SpOFMw0+YE24cMsiwMiZWHIy6AB4D
IUYmE8+72OJQo3GJgBIxaQ8l8HbFM9DK/Xg/nBCSXTHaZLYH8SzYZldDsX5yKWFs
+gOMSMZVVnD14Y49J+j7AHF8wfZD84qwmQJXnoN29MC7nizBr+Gj0EsGaEMB3o7b
NlAGanvOKviMNttXzSdiVMgLT7H1BsumBKG0kBtOPtRcJuWO86+UmZbq
-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:25 2026 by rpki-client