Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57001592866411F1883091F3CE1D38B0.roa
File: 57001592866411F1883091F3CE1D38B0.roa (raw, json)
Hash identifier: Z5Qg8gZytQ3bsXMNkBbVk1FPiBibFjKicXwA2I2YQQ8=
Subject key identifier: 95:F7:C0:7A:19:A1:72:29:5C:30:96:E8:B9:41:30:96:99:06:02:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57001592866411F1883091F3CE1D38B0.roa
Signing time: Thu 23 Jul 2026 07:01:34 +0000
ROA not before: Thu 23 Jul 2026 07:01:29 +0000
ROA not after: Sun 30 Aug 2026 07:01:29 +0000
asID: 401701
IP address blocks: 154.201.64.0/19 maxlen: 24
154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121603 (0x1db03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:01:29 2026 GMT
Not After : Aug 30 07:01:29 2026 GMT
Subject: CN=6a61bc4e-e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:b4:2c:3d:e2:72:91:f5:f9:fe:40:01:65:
ca:cf:50:ae:bd:4c:15:2a:a0:9f:1c:15:ee:be:72:
95:4a:3a:f1:09:d6:1a:00:62:d5:38:e4:3e:a5:6a:
df:07:1c:37:18:81:01:17:dc:79:b4:a4:a7:15:bf:
aa:da:2b:18:a2:56:9e:b2:a6:cb:43:25:f8:19:59:
ab:47:6e:71:57:f5:bc:9e:71:c9:b0:08:b6:35:60:
f5:6e:41:52:39:d8:5f:9b:0a:94:a6:26:a2:6f:cb:
b8:4b:60:80:55:30:9c:7f:39:4f:41:8e:66:ce:51:
e9:fb:1c:bc:81:8a:aa:cb:1a:f3:cd:c2:d1:42:de:
86:d7:7f:6f:e4:c2:ec:33:d0:4a:32:fe:46:1c:04:
fe:b1:80:01:ce:73:b6:b0:b4:94:85:05:4d:87:79:
ea:3c:ae:f4:67:0f:44:35:ad:27:20:74:d4:0c:75:
17:c6:aa:4e:5c:55:ff:ab:e0:e8:a5:3f:f1:f4:79:
55:64:82:03:42:24:20:aa:28:d7:47:7d:6c:58:9b:
44:83:4a:95:81:41:54:1d:08:3c:e7:5a:93:25:13:
08:df:61:5a:ae:d3:7f:f5:ce:bf:16:7f:d4:7e:43:
86:8f:83:f8:01:ac:28:ad:d1:3f:20:09:ae:97:34:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F7:C0:7A:19:A1:72:29:5C:30:96:E8:B9:41:30:96:99:06:02:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57001592866411F1883091F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
10:45:f2:e8:bf:f8:84:e1:64:ff:04:99:f8:ef:84:38:b5:11:
6a:e8:03:32:1d:3d:cf:c7:86:f3:ff:8a:33:5f:67:99:5d:21:
09:e2:18:7b:71:a3:95:75:ff:2b:e1:d3:60:a1:53:98:b0:24:
58:ad:ec:ca:64:af:46:07:00:47:02:36:7a:52:06:1b:3d:6a:
72:21:1f:d9:29:46:5a:e3:52:5e:b4:c6:52:4b:77:75:df:99:
b3:41:98:53:64:5a:b8:e1:0c:b0:66:45:ff:b4:fe:b7:8c:c7:
db:3c:c3:61:9c:0f:b8:f5:53:a9:e2:3d:d0:d2:f8:fe:17:a6:
d4:7b:f8:de:ae:c2:db:ee:62:a2:18:94:61:57:88:cc:ba:79:
47:6b:03:0a:b8:ec:e2:1e:21:87:d9:71:73:79:c3:a6:53:2a:
2c:46:b3:bb:21:23:6e:3b:6e:90:2a:d3:40:0a:95:54:5c:be:
29:bd:f5:ab:89:ea:a2:4f:0c:12:74:3c:97:ee:59:23:79:e5:
e3:1e:88:6f:a0:b7:9f:d9:83:bc:4f:35:45:ef:65:28:55:04:
18:d5:b2:9d:dd:4f:38:0e:c0:83:f6:07:a3:b8:d0:af:19:50:
34:36:d1:1d:17:30:8e:43:20:30:d2:e3:41:f7:f1:84:a7:34:
9e:fa:d3:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdsDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIzMDcwMTI5WhcNMjYwODMwMDcwMTI5WjAYMRYw
FAYDVQQDEw02YTYxYmM0ZS1lOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzOW0LD3icpH1+f5AAWXKz1CuvUwVKqCfHBXuvnKVSjrxCdYaAGLVOOQ+
pWrfBxw3GIEBF9x5tKSnFb+q2isYolaesqbLQyX4GVmrR25xV/W8nnHJsAi2NWD1
bkFSOdhfmwqUpiaib8u4S2CAVTCcfzlPQY5mzlHp+xy8gYqqyxrzzcLRQt6G139v
5MLsM9BKMv5GHAT+sYABznO2sLSUhQVNh3nqPK70Zw9ENa0nIHTUDHUXxqpOXFX/
q+DopT/x9HlVZIIDQiQgqijXR31sWJtEg0qVgUFUHQg851qTJRMI32FartN/9c6/
Fn/UfkOGj4P4AawordE/IAmulzSMrQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJX3
wHoZoXIpXDCW6LlBMJaZBgK8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NzAwMTU5Mjg2NjQxMUYxODgzMDkxRjNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQRfLov/iE4WT/BJn474Q4tRFq6AMyHT3Px4bz/4ozX2eZXSEJ4hh7
caOVdf8r4dNgoVOYsCRYrezKZK9GBwBHAjZ6UgYbPWpyIR/ZKUZa41JetMZSS3d1
35mzQZhTZFq44QywZkX/tP63jMfbPMNhnA+49VOp4j3Q0vj+F6bUe/jersLb7mKi
GJRhV4jMunlHawMKuOziHiGH2XFzecOmUyosRrO7ISNuO26QKtNACpVUXL4pvfWr
ieqiTwwSdDyX7lkjeeXjHohvoLef2YO8TzVF72UoVQQY1bKd3U84DsCD9gejuNCv
GVA0NtEdFzCOQyAw0uNB9/GEpzSe+tMg
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:30 2026 by rpki-client