Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78F6DB9E7F5311F1AC003C1ECF1D38B0.roa
File: 78F6DB9E7F5311F1AC003C1ECF1D38B0.roa (raw, json)
Hash identifier: XwXZY29hrMEIP31Sxr/WwgYr8xwgCq/cpGNxh713Qc8=
Subject key identifier: 0C:61:90:1F:32:6A:93:41:BD:08:83:99:CD:37:27:DB:72:85:CB:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78F6DB9E7F5311F1AC003C1ECF1D38B0.roa
Signing time: Tue 14 Jul 2026 07:13:12 +0000
ROA not before: Tue 14 Jul 2026 07:13:07 +0000
ROA not after: Sun 16 Aug 2026 07:13:07 +0000
asID: 22773
IP address blocks: 154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
154.90.18.0/24 maxlen: 24
154.90.149.0/24 maxlen: 24
154.90.150.0/24 maxlen: 24
154.90.151.0/24 maxlen: 24
154.90.152.0/24 maxlen: 24
154.90.153.0/24 maxlen: 24
154.90.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121028 (0x1d8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:13:07 2026 GMT
Not After : Aug 16 07:13:07 2026 GMT
Subject: CN=6a55e188-ffe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:e6:8b:d6:ce:af:bc:20:6a:2f:1e:7b:ab:
c8:5f:1c:af:cc:55:bf:6a:43:0f:7d:37:59:f9:e6:
ea:b0:d1:6d:80:2b:94:39:79:eb:13:16:42:7a:23:
b4:a2:38:ad:b3:2d:27:28:46:5e:3c:01:74:86:f6:
7d:b5:e7:51:0b:e8:d2:30:75:16:e8:2d:60:cb:37:
8f:eb:83:c0:7c:7f:10:c5:ce:8c:ab:29:61:90:17:
0c:7a:2a:bf:89:b4:95:61:28:77:02:11:6d:3c:8d:
2d:1f:18:07:91:4d:cf:34:88:92:de:48:bf:4a:6f:
d0:4e:47:ec:7b:9c:1d:f8:e6:0d:37:aa:83:d7:ad:
e1:fd:ef:55:a1:56:79:a1:e2:8a:28:b7:79:96:8e:
2e:b7:83:d1:56:92:0e:14:cf:ee:2f:63:0c:c9:e4:
39:a5:af:b2:30:2e:4d:26:40:22:89:d1:7e:56:6c:
b4:4d:97:b5:bb:38:f0:67:6d:12:2c:97:76:35:45:
80:a0:8a:c4:c1:b6:ca:68:44:fb:86:25:64:5b:4c:
df:17:97:38:f2:10:0f:dc:6a:cd:1f:c3:ae:62:6c:
eb:25:0d:de:ba:2a:50:fe:79:4e:7e:9f:2a:ef:7d:
61:8e:dc:c1:19:ab:b4:52:4c:e1:51:d2:61:80:29:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:90:1F:32:6A:93:41:BD:08:83:99:CD:37:27:DB:72:85:CB:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78F6DB9E7F5311F1AC003C1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.22.0/23
154.85.104.0-154.85.106.255
154.90.18.0/24
154.90.149.0-154.90.154.255
Signature Algorithm: sha256WithRSAEncryption
8b:0a:30:b7:ea:19:af:f6:fc:60:9b:7b:88:e5:10:ef:45:b7:
c2:22:77:86:0c:a1:97:3b:f8:21:a9:eb:be:5a:3e:16:1d:34:
34:43:61:13:46:e4:d9:1e:b0:f4:6c:1e:e4:2b:65:b4:a8:3a:
4f:0b:d1:07:3a:98:08:6f:00:4d:81:62:e9:05:37:38:1f:fc:
49:16:e4:0e:10:ab:3c:00:a8:b2:30:63:75:e8:f5:fa:7f:f6:
63:72:97:bf:5e:8f:4c:52:82:f3:f2:ab:3e:bf:a9:9d:72:b2:
95:ca:81:46:d2:53:9a:77:15:cc:ca:12:5f:85:89:59:8f:3a:
b9:7e:57:c9:7e:64:71:60:b2:93:67:eb:c9:d4:54:11:ab:97:
15:42:1a:55:2a:28:75:4d:e1:68:ec:f1:a8:c3:79:70:ca:27:
15:83:94:00:7a:11:29:dc:78:55:66:ba:c9:b6:81:32:40:2a:
2b:8a:eb:f4:45:fe:96:b4:61:34:7f:c5:89:36:ae:12:97:98:
89:b0:7e:6a:90:bb:39:a4:f5:03:7f:e0:44:f5:0b:5b:8d:c3:
d1:15:bf:61:9e:80:1b:03:2d:ff:56:d4:04:40:51:be:4d:43:
ca:ad:a1:34:b7:ee:40:9d:fe:1e:61:92:68:98:ac:64:23:47:
fc:40:eb:06
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAdjEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDcxMzA3WhcNMjYwODE2MDcxMzA3WjAYMRYw
FAYDVQQDEw02YTU1ZTE4OC1mZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzevmi9bOr7wgai8ee6vIXxyvzFW/akMPfTdZ+ebqsNFtgCuUOXnrExZC
eiO0ojitsy0nKEZePAF0hvZ9tedRC+jSMHUW6C1gyzeP64PAfH8Qxc6MqylhkBcM
eiq/ibSVYSh3AhFtPI0tHxgHkU3PNIiS3ki/Sm/QTkfse5wd+OYNN6qD163h/e9V
oVZ5oeKKKLd5lo4ut4PRVpIOFM/uL2MMyeQ5pa+yMC5NJkAiidF+Vmy0TZe1uzjw
Z20SLJd2NUWAoIrEwbbKaET7hiVkW0zfF5c48hAP3GrNH8OuYmzrJQ3euipQ/nlO
fp8q731hjtzBGau0UkzhUdJhgCmyWwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFAxh
kB8yapNBvQiDmc03J9tyhcsQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OEY2REI5RTdGNTMxMUYxQUMwMDNDMUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBmlUWMAwDBAOaVWgDBACa
VWoDBACaWhIwDAMEAJpalQMEAJpamjANBgkqhkiG9w0BAQsFAAOCAQEAiwowt+oZ
r/b8YJt7iOUQ70W3wiJ3hgyhlzv4Ianrvlo+Fh00NENhE0bk2R6w9Gwe5CtltKg6
TwvRBzqYCG8ATYFi6QU3OB/8SRbkDhCrPACosjBjdej1+n/2Y3KXv16PTFKC8/Kr
Pr+pnXKylcqBRtJTmncVzMoSX4WJWY86uX5XyX5kcWCyk2frydRUEauXFUIaVSoo
dU3haOzxqMN5cMonFYOUAHoRKdx4VWa6ybaBMkAqK4rr9EX+lrRhNH/FiTauEpeY
ibB+apC7OaT1A3/gRPULW43D0RW/YZ6AGwMt/1bUBEBRvk1Dyq2hNLfuQJ3+HmGS
aJisZCNH/EDrBg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:27:14 2026 by rpki-client