Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FF95F08834911F19AFE85FECE1D38B0.roa
File: 2FF95F08834911F19AFE85FECE1D38B0.roa (raw, json)
Hash identifier: RaqHml2elaZGW9u52NDM/Kalo1aXRxMSRZVvlOnR0MA=
Subject key identifier: 77:65:B7:4D:D6:8C:65:E5:8E:85:A6:4B:E6:A9:51:8A:2F:C9:F7:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D99B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FF95F08834911F19AFE85FECE1D38B0.roa
Signing time: Sun 19 Jul 2026 08:09:39 +0000
ROA not before: Sun 19 Jul 2026 08:09:35 +0000
ROA not after: Mon 17 Aug 2026 08:09:35 +0000
asID: 153671
IP address blocks: 154.81.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121243 (0x1d99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 08:09:35 2026 GMT
Not After : Aug 17 08:09:35 2026 GMT
Subject: CN=6a5c8643-376c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:00:d3:56:f4:be:4a:23:fe:d4:ef:d1:16:
52:86:7a:ee:32:92:3d:7b:f6:fb:65:fe:e2:4a:70:
d1:94:02:ec:be:6c:28:40:0c:b5:55:14:66:9a:6e:
67:78:d9:d4:08:3f:e9:9b:da:8d:2b:57:99:25:d9:
6a:50:77:f6:dd:97:00:aa:e1:98:cb:d9:7a:8c:a4:
08:92:0f:fb:ca:31:ee:d0:37:2a:dd:e9:e1:3d:c9:
fb:13:84:4a:43:da:38:02:ca:7f:b0:eb:c0:7d:12:
34:6a:ea:8b:0c:15:1f:9c:7d:2f:44:2d:82:2e:95:
90:87:63:76:23:bd:31:25:f9:96:a5:9c:89:46:dc:
c0:14:5a:fb:e3:26:af:22:f1:1a:c2:0c:0f:33:5f:
51:58:7d:f7:c6:eb:e7:1a:01:d4:ca:fc:3e:d7:8e:
d8:fe:5b:c6:9b:41:c0:a0:98:85:5c:5a:eb:c6:ed:
88:c2:1a:05:de:c4:80:04:2c:35:40:44:fe:b4:02:
23:4e:0e:1a:09:bf:6b:87:3c:65:fb:22:4e:f8:5f:
38:da:60:16:58:ad:ae:9a:d4:1d:aa:ef:31:81:02:
c7:de:b5:0a:53:63:18:70:08:ae:35:a4:3d:fa:f1:
04:06:36:f0:34:cc:25:f4:4b:c7:23:d2:41:09:2f:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:B7:4D:D6:8C:65:E5:8E:85:A6:4B:E6:A9:51:8A:2F:C9:F7:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FF95F08834911F19AFE85FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.152.0/22
Signature Algorithm: sha256WithRSAEncryption
54:4e:dd:e8:4c:df:93:7e:6d:cf:8b:02:fe:91:24:8b:6a:96:
83:15:e2:48:d8:5a:09:73:63:3f:04:23:60:cb:96:9b:47:8f:
a9:15:96:5b:24:cc:fe:1e:3f:af:b9:4e:ae:80:a2:a4:66:11:
69:ce:ba:62:9a:cb:80:02:db:02:f1:2e:58:12:d2:48:37:58:
71:dd:af:42:b8:55:02:0e:64:0b:4d:cb:b3:04:05:cc:2d:39:
65:f4:43:2c:5f:11:47:10:d6:55:80:c3:86:94:b5:13:b2:ee:
20:15:05:08:00:7f:30:35:c1:41:7d:f1:d0:7c:67:9b:ff:18:
f1:49:ee:1a:4f:9d:50:54:c6:02:8f:d5:f6:32:8f:cc:3f:29:
0c:e1:51:28:9f:25:06:3f:45:f4:9c:e0:e5:a4:f0:09:19:a6:
ad:da:f7:5e:c5:5b:b1:f1:e5:c0:4c:1a:57:dc:d7:20:fb:b9:
58:0e:79:e9:15:78:9e:c9:2e:09:b3:db:32:2c:47:46:15:09:
93:88:e4:4c:e7:a7:f9:5a:34:5f:14:b5:d9:50:02:f8:94:ad:
65:8c:fe:67:d0:01:ef:9e:40:72:f2:c5:4b:42:15:d9:2b:33:
4b:99:b7:9b:ec:02:65:0d:f5:a9:7c:3b:58:f4:21:76:c6:9d:
db:52:6e:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdmbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE5MDgwOTM1WhcNMjYwODE3MDgwOTM1WjAYMRYw
FAYDVQQDEw02YTVjODY0My0zNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArasA01b0vkoj/tTv0RZShnruMpI9e/b7Zf7iSnDRlALsvmwoQAy1VRRm
mm5neNnUCD/pm9qNK1eZJdlqUHf23ZcAquGYy9l6jKQIkg/7yjHu0Dcq3enhPcn7
E4RKQ9o4Asp/sOvAfRI0auqLDBUfnH0vRC2CLpWQh2N2I70xJfmWpZyJRtzAFFr7
4yavIvEawgwPM19RWH33xuvnGgHUyvw+147Y/lvGm0HAoJiFXFrrxu2IwhoF3sSA
BCw1QET+tAIjTg4aCb9rhzxl+yJO+F842mAWWK2umtQdqu8xgQLH3rUKU2MYcAiu
NaQ9+vEEBjbwNMwl9EvHI9JBCS/icQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHdl
t03WjGXljoWmS+apUYovyffoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRkY5NUYwODgzNDkxMUYxOUFGRTg1RkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlGYMA0GCSqGSIb3DQEB
CwUAA4IBAQBUTt3oTN+Tfm3PiwL+kSSLapaDFeJI2FoJc2M/BCNgy5abR4+pFZZb
JMz+Hj+vuU6ugKKkZhFpzrpimsuAAtsC8S5YEtJIN1hx3a9CuFUCDmQLTcuzBAXM
LTll9EMsXxFHENZVgMOGlLUTsu4gFQUIAH8wNcFBffHQfGeb/xjxSe4aT51QVMYC
j9X2Mo/MPykM4VEonyUGP0X0nODlpPAJGaat2vdexVux8eXATBpX3Ncg+7lYDnnp
FXieyS4Js9syLEdGFQmTiORM56f5WjRfFLXZUAL4lK1ljP5n0AHvnkBy8sVLQhXZ
KzNLmbeb7AJlDfWpfDtY9CF2xp3bUm7c
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:32 2026 by rpki-client