Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3823CA7F5311F19F609A1ACF1D38B0.roa
File: 1E3823CA7F5311F19F609A1ACF1D38B0.roa (raw, json)
Hash identifier: cZdyEVqNQLEP7a1vNm8cLyBZ9KD9fSiR5q5N9Dsml+E=
Subject key identifier: 4F:51:2C:04:13:13:45:9E:46:D0:63:16:93:66:96:C9:FF:38:B9:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3823CA7F5311F19F609A1ACF1D38B0.roa
Signing time: Tue 14 Jul 2026 07:10:39 +0000
ROA not before: Tue 14 Jul 2026 07:10:35 +0000
ROA not after: Sun 16 Aug 2026 07:10:35 +0000
asID: 22773
IP address blocks: 154.90.159.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121026 (0x1d8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:10:35 2026 GMT
Not After : Aug 16 07:10:35 2026 GMT
Subject: CN=6a55e0ef-49e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:5a:07:6f:94:ae:98:37:a3:33:20:cc:25:
90:9c:3f:d6:c0:99:5d:af:52:03:09:5a:d3:01:d6:
21:fe:47:67:46:24:29:40:a9:5e:4a:e3:6f:2f:6f:
a1:d4:84:35:9a:9e:90:1a:a8:60:fb:f7:fd:67:50:
42:85:a5:73:2a:8e:be:bf:c1:a7:66:8a:9a:50:89:
06:ad:be:97:cf:7e:c5:ec:51:a4:6b:52:09:0f:a6:
70:85:d2:21:ea:7c:9c:75:90:3e:1e:77:47:22:57:
e9:79:77:29:1b:0a:79:eb:e5:00:1d:62:3e:2e:d4:
74:76:2f:d1:ee:e2:86:fe:12:8f:08:fc:73:53:39:
e3:97:18:5e:d6:0d:56:6a:b5:ba:79:4a:9f:ae:87:
a6:10:9c:66:72:30:49:63:84:9d:47:c8:dd:64:50:
bf:d6:64:ce:07:99:b8:12:6a:14:43:79:01:80:7f:
72:93:3d:6a:41:5d:f5:ff:0c:dd:0b:3d:92:d3:4d:
66:db:1c:35:b4:e8:4e:5f:0a:43:23:7c:c7:0c:a5:
15:8e:63:37:fe:db:98:8e:2d:24:80:d6:7d:e4:53:
e2:c8:32:a7:65:47:17:e1:33:ab:68:7a:0b:a6:c7:
e5:12:8f:6a:42:8c:99:5e:df:e5:fd:13:5f:36:a2:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:51:2C:04:13:13:45:9E:46:D0:63:16:93:66:96:C9:FF:38:B9:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3823CA7F5311F19F609A1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.159.0/24
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:17:d7:a9:a7:0d:17:ae:aa:38:0b:61:03:1b:1d:c5:ef:6e:
9c:6a:35:fe:02:cd:ce:23:f2:3a:ea:2a:a0:6a:41:6b:5a:8c:
8a:2a:20:34:a3:8d:8b:92:77:d1:33:61:53:6c:0c:53:aa:7a:
cb:ff:cd:a9:56:2b:a2:e2:9e:7d:da:d2:be:d6:cc:ba:93:ad:
8c:c6:f2:92:c8:a0:e7:7a:ac:bf:03:8c:1c:97:cc:2a:24:1d:
45:47:34:ba:f0:37:e6:2a:b5:a1:59:84:18:29:73:4c:29:99:
b6:75:9e:d9:5b:37:96:e1:eb:bd:ae:c1:02:b8:3a:5d:ee:f8:
dd:4a:c0:c6:d8:1f:db:b9:4f:5d:7a:c0:71:14:60:19:a1:ba:
5b:07:b0:12:18:93:34:46:0e:8f:18:2a:70:4a:84:c1:2f:3e:
85:42:30:b8:c6:d8:fc:18:01:60:ed:ec:98:af:1f:10:f7:9c:
9d:63:a7:04:64:d7:e5:09:5f:07:33:95:08:4c:11:07:a0:2d:
bd:ae:4d:9a:8f:4e:3a:25:11:8d:63:56:ef:d4:43:14:3e:b8:
c7:a6:b3:da:86:b7:d3:d6:6c:76:f8:7c:0a:e0:68:ca:5d:3c:
f5:01:b0:51:c0:d4:4f:d9:f8:e3:8c:49:b2:4f:ec:24:cc:6b:
e9:e1:6b:ea
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAdjCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDcxMDM1WhcNMjYwODE2MDcxMDM1WjAYMRYw
FAYDVQQDEw02YTU1ZTBlZi00OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxcZaB2+Urpg3ozMgzCWQnD/WwJldr1IDCVrTAdYh/kdnRiQpQKleSuNv
L2+h1IQ1mp6QGqhg+/f9Z1BChaVzKo6+v8GnZoqaUIkGrb6Xz37F7FGka1IJD6Zw
hdIh6nycdZA+HndHIlfpeXcpGwp56+UAHWI+LtR0di/R7uKG/hKPCPxzUznjlxhe
1g1WarW6eUqfroemEJxmcjBJY4SdR8jdZFC/1mTOB5m4EmoUQ3kBgH9ykz1qQV31
/wzdCz2S001m2xw1tOhOXwpDI3zHDKUVjmM3/tuYji0kgNZ95FPiyDKnZUcX4TOr
aHoLpsflEo9qQoyZXt/l/RNfNqLNFQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFE9R
LAQTE0WeRtBjFpNmlsn/OLluMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTM4MjNDQTdGNTMxMUYxOUY2MDlBMUFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlqfAwQAml4/MA0GCSqG
SIb3DQEBCwUAA4IBAQAfF9eppw0Xrqo4C2EDGx3F726cajX+As3OI/I66iqgakFr
WoyKKiA0o42LknfRM2FTbAxTqnrL/82pViui4p592tK+1sy6k62MxvKSyKDneqy/
A4wcl8wqJB1FRzS68DfmKrWhWYQYKXNMKZm2dZ7ZWzeW4eu9rsECuDpd7vjdSsDG
2B/buU9desBxFGAZobpbB7ASGJM0Rg6PGCpwSoTBLz6FQjC4xtj8GAFg7eyYrx8Q
95ydY6cEZNflCV8HM5UITBEHoC29rk2aj046JRGNY1bv1EMUPrjHprPahrfT1mx2
+HwK4GjKXTz1AbBRwNRP2fjjjEmyT+wkzGvp4Wvq
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:50 2026 by rpki-client