Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61171DEA842111F1A0E25EA2CE1D38B0.roa
File: 61171DEA842111F1A0E25EA2CE1D38B0.roa (raw, json)
Hash identifier: fSF9a+mq7VZgxwyXERfwbLv1BsVEKXXsk254g/AyJPM=
Subject key identifier: A7:83:4E:8E:86:18:14:C4:A7:D5:81:DA:44:0E:35:8C:81:C9:C1:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61171DEA842111F1A0E25EA2CE1D38B0.roa
Signing time: Mon 20 Jul 2026 09:57:13 +0000
ROA not before: Mon 20 Jul 2026 09:57:09 +0000
ROA not after: Mon 24 Aug 2026 09:57:09 +0000
asID: 17497
IP address blocks: 154.81.159.0/24 maxlen: 24
154.82.19.0/24 maxlen: 24
154.90.138.0/23 maxlen: 24
154.90.138.0/24 maxlen: 24
154.90.139.0/24 maxlen: 24
154.94.2.0/23 maxlen: 24
154.94.2.0/24 maxlen: 24
154.94.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121322 (0x1d9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:57:09 2026 GMT
Not After : Aug 24 09:57:09 2026 GMT
Subject: CN=6a5df0f8-e52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:2d:9d:c8:ed:27:c4:4e:0a:82:e6:5e:45:
9a:1c:14:a1:ac:0f:d2:26:69:45:b5:dc:c8:b3:42:
72:83:3c:8e:b7:94:40:aa:1a:de:15:ed:20:bd:89:
8d:15:6a:b2:4b:72:12:ba:c5:93:2c:26:9a:2f:84:
04:c7:37:42:ce:a3:80:d5:d5:c3:f9:5c:b2:33:69:
ed:3c:c5:ff:3e:f5:13:91:52:71:a4:43:fd:bf:64:
32:0d:59:78:b5:5f:96:a9:5c:9a:4d:ae:9b:4b:58:
de:53:42:0f:76:05:d9:84:a4:73:8e:b0:b6:6a:4f:
dc:ae:7d:46:f0:8c:56:ef:fa:5d:e0:19:19:48:32:
45:5c:4e:e1:42:07:30:82:59:3f:f6:d6:3a:91:48:
19:1f:32:81:b9:5f:9d:cb:ce:02:eb:74:7d:27:98:
c9:cf:5f:51:75:12:a6:52:53:3b:a8:ea:c7:d2:7f:
df:11:37:db:5f:50:82:91:0f:0b:ce:61:ff:ca:d8:
7b:f6:de:ad:89:2e:cd:63:10:f2:f6:4c:6c:31:49:
dc:d8:66:9e:9d:ca:53:81:5b:a0:a8:5f:e4:9b:e3:
b7:4e:6c:0a:9b:13:f6:ea:32:ca:f1:c2:da:fc:91:
06:7b:66:4c:fd:2f:cc:00:77:27:71:01:76:a3:b0:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:4E:8E:86:18:14:C4:A7:D5:81:DA:44:0E:35:8C:81:C9:C1:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61171DEA842111F1A0E25EA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.159.0/24
154.82.19.0/24
154.90.138.0/23
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:bd:87:3f:ca:2f:98:d9:5e:70:bf:3c:39:42:7e:20:c4:80:
86:0a:bf:7c:0f:b0:fd:b3:ea:11:b8:87:eb:e1:e8:a1:49:2e:
29:6a:7d:d9:40:01:ef:37:f7:e6:e6:12:76:dc:f1:a0:38:b5:
1a:5f:27:de:fb:21:27:c4:4d:3e:76:f9:79:9f:57:82:2a:b4:
ba:f7:c6:2d:24:75:b5:c6:3e:e4:0a:27:d4:71:da:20:8a:6e:
3b:bf:d9:f1:81:a4:a0:4d:56:51:99:e6:68:96:69:3d:88:2c:
65:b9:33:ab:1c:b2:f9:41:74:41:25:a3:f5:e0:43:dd:fa:51:
92:22:be:f5:83:20:e3:4d:e4:8f:2c:2f:ee:94:ca:4c:26:d0:
dc:87:54:2c:e0:02:ea:a2:9c:27:af:5c:aa:b3:61:e6:20:74:
8c:0b:98:8e:82:de:4e:b0:e5:14:9f:be:69:e7:24:54:5c:eb:
a9:ab:0d:18:c5:98:f5:14:5f:49:9d:7a:f5:0a:85:72:f7:b0:
3a:88:9a:72:90:36:30:36:3d:d5:b5:52:f4:dc:c9:64:5b:77:
c0:7d:fd:06:fb:d2:dc:60:ab:1d:8e:99:94:93:12:68:32:77:
21:f4:af:60:aa:37:82:e0:95:ae:49:e1:ed:bc:77:88:bd:ce:
62:fc:d5:84
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAdnqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIwMDk1NzA5WhcNMjYwODI0MDk1NzA5WjAYMRYw
FAYDVQQDEw02YTVkZjBmOC1lNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzjwtncjtJ8ROCoLmXkWaHBShrA/SJmlFtdzIs0JygzyOt5RAqhreFe0g
vYmNFWqyS3ISusWTLCaaL4QExzdCzqOA1dXD+VyyM2ntPMX/PvUTkVJxpEP9v2Qy
DVl4tV+WqVyaTa6bS1jeU0IPdgXZhKRzjrC2ak/crn1G8IxW7/pd4BkZSDJFXE7h
Qgcwglk/9tY6kUgZHzKBuV+dy84C63R9J5jJz19RdRKmUlM7qOrH0n/fETfbX1CC
kQ8LzmH/yth79t6tiS7NYxDy9kxsMUnc2GaencpTgVugqF/km+O3TmwKmxP26jLK
8cLa/JEGe2ZM/S/MAHcncQF2o7D/TQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFKeD
To6GGBTEp9WB2kQONYyBycFuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTE3MURFQTg0MjExMUYxQTBFMjVFQTJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmlGfAwQAmlITAwQBmlqK
AwQBml4CMA0GCSqGSIb3DQEBCwUAA4IBAQAavYc/yi+Y2V5wvzw5Qn4gxICGCr98
D7D9s+oRuIfr4eihSS4pan3ZQAHvN/fm5hJ23PGgOLUaXyfe+yEnxE0+dvl5n1eC
KrS698YtJHW1xj7kCifUcdogim47v9nxgaSgTVZRmeZolmk9iCxluTOrHLL5QXRB
JaP14EPd+lGSIr71gyDjTeSPLC/ulMpMJtDch1Qs4ALqopwnr1yqs2HmIHSMC5iO
gt5OsOUUn75p5yRUXOupqw0YxZj1FF9JnXr1CoVy97A6iJpykDYwNj3VtVL03Mlk
W3fAff0G+9LcYKsdjpmUkxJoMnch9K9gqjeC4JWuSeHtvHeIvc5i/NWE
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:03:42 2026 by rpki-client