Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/861D815A7F5411F1805964A4CE1D38B0.roa
File: 861D815A7F5411F1805964A4CE1D38B0.roa (raw, json)
Hash identifier: uB5kJ1qGggdRDAdIsfKRzTIwIhyT7jlwEgtk7cnQr5A=
Subject key identifier: 56:06:B9:35:10:AD:C0:FD:60:B1:BB:CD:8F:22:32:B1:27:9C:B0:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/861D815A7F5411F1805964A4CE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:20:43 +0000
ROA not before: Tue 14 Jul 2026 07:20:38 +0000
ROA not after: Sun 16 Aug 2026 07:20:38 +0000
asID: 22773
IP address blocks: 154.198.20.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
154.202.69.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.73.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
154.202.110.0/24 maxlen: 24
154.202.112.0/24 maxlen: 24
154.202.113.0/24 maxlen: 24
154.202.114.0/24 maxlen: 24
154.202.116.0/24 maxlen: 24
154.202.137.0/24 maxlen: 24
154.213.192.0/24 maxlen: 24
154.213.200.0/24 maxlen: 24
154.213.201.0/24 maxlen: 24
154.213.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121032 (0x1d8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:20:38 2026 GMT
Not After : Aug 16 07:20:38 2026 GMT
Subject: CN=6a55e34b-250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:f7:0f:eb:3b:bd:7d:16:95:f0:0a:65:ae:
a4:2e:f7:29:b1:c9:10:3d:64:86:cc:a9:c3:fa:2c:
d4:76:9e:42:95:3f:c7:17:c4:d9:7d:be:af:e1:cb:
a8:92:83:52:96:d0:06:81:4b:3c:43:13:db:3a:d8:
6b:c2:83:98:e7:d5:dc:c3:bd:6b:c4:d6:c3:5d:09:
13:59:f6:23:e0:46:6b:09:67:32:93:5d:5c:97:9f:
c3:eb:fb:b9:00:bc:20:f4:36:dc:dd:56:90:5b:0e:
ba:a1:58:47:83:de:01:ac:46:fc:53:dc:dc:c4:95:
a7:bf:ca:82:b1:50:61:c1:ea:7a:86:51:a1:31:d5:
58:0e:f3:70:7a:0e:ce:82:79:11:5e:1c:8f:a7:95:
85:46:e0:40:a3:8b:7a:2f:12:20:bc:f1:d6:79:ab:
de:58:1a:82:38:59:bd:b5:93:59:ba:61:72:ba:47:
8b:10:d6:7e:37:a9:f2:58:e4:b1:ec:6a:49:1c:0f:
20:9e:d5:6e:f3:94:6a:ca:ed:09:a9:92:57:dd:16:
96:55:fc:ea:f0:a2:ed:1e:6d:af:88:fc:f7:7b:c6:
a3:b4:4e:11:9c:ca:34:fd:31:ac:f9:ee:b3:a0:32:
a1:70:ec:92:25:53:ab:72:34:97:d7:a0:df:c9:5c:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:06:B9:35:10:AD:C0:FD:60:B1:BB:CD:8F:22:32:B1:27:9C:B0:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/861D815A7F5411F1805964A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0/24
154.202.29.0-154.202.31.255
154.202.69.0/24
154.202.72.0/23
154.202.76.0/23
154.202.109.0-154.202.110.255
154.202.112.0-154.202.114.255
154.202.116.0/24
154.202.137.0/24
154.213.192.0/24
154.213.200.0/23
154.213.205.0/24
Signature Algorithm: sha256WithRSAEncryption
79:30:8c:63:8d:79:4d:48:0d:04:c5:80:63:5b:f2:d5:0c:37:
3e:a5:33:f9:c6:6c:0c:67:3d:77:9c:c3:26:d8:3e:40:06:86:
f7:44:86:b7:64:1c:a5:c7:56:f9:da:eb:1c:6c:1b:2d:14:07:
37:bd:16:e0:f6:ba:e5:54:cf:cf:99:20:90:b1:cc:3b:b0:a8:
e8:59:5d:97:56:79:2d:5b:a8:0f:48:cb:36:55:2c:3d:93:b9:
cd:21:06:73:c3:9f:b9:79:b5:3f:86:f2:95:11:1f:15:dc:7e:
75:e5:ea:95:3e:1d:f5:69:c8:cd:6e:06:da:2e:70:1a:cc:99:
9c:30:c7:49:76:56:47:23:6c:89:bd:92:cf:69:05:f9:c3:df:
41:a2:8b:54:8d:44:83:56:13:a5:a6:a2:2c:00:1d:28:39:dd:
a8:2f:dc:13:41:f4:db:de:d0:b1:b1:bb:ce:0e:6a:0c:e7:89:
04:64:27:fa:b1:2c:b5:54:3c:38:4a:48:51:12:33:dc:86:b6:
6e:72:98:22:7f:f5:6f:c6:f8:57:44:ea:f1:8f:64:d1:97:39:
e3:6d:21:cb:e5:0a:dd:54:7e:8a:19:30:e1:86:63:03:ea:92:
cf:0b:9d:1c:ba:f0:27:1e:af:41:bc:9c:77:4d:be:aa:ad:4f:
0a:a6:2d:d6
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIDAdjIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzE0MDcyMDM4WhcNMjYwODE2MDcyMDM4WjAYMRYw
FAYDVQQDEw02YTU1ZTM0Yi0yNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1mD3D+s7vX0WlfAKZa6kLvcpsckQPWSGzKnD+izUdp5ClT/HF8TZfb6v
4cuokoNSltAGgUs8QxPbOthrwoOY59Xcw71rxNbDXQkTWfYj4EZrCWcyk11cl5/D
6/u5ALwg9Dbc3VaQWw66oVhHg94BrEb8U9zcxJWnv8qCsVBhwep6hlGhMdVYDvNw
eg7OgnkRXhyPp5WFRuBAo4t6LxIgvPHWeaveWBqCOFm9tZNZumFyukeLENZ+N6ny
WOSx7GpJHA8gntVu85Rqyu0JqZJX3RaWVfzq8KLtHm2viPz3e8ajtE4RnMo0/TGs
+e6zoDKhcOySJVOrcjSX16DfyVwL+wIDAQABo4IC/zCCAvswHQYDVR0OBBYEFFYG
uTUQrcD9YLG7zY8iMrEnnLAQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjFEODE1QTdGNTQxMUYxODA1OTY0QTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAmsYUMAwDBACayh0DBAWa
ygADBACaykUDBAGaykgDBAGaykwwDAMEAJrKbQMEAJrKbjAMAwQEmspwAwQAmspy
AwQAmsp0AwQAmsqJAwQAmtXAAwQBmtXIAwQAmtXNMA0GCSqGSIb3DQEBCwUAA4IB
AQB5MIxjjXlNSA0ExYBjW/LVDDc+pTP5xmwMZz13nMMm2D5ABob3RIa3ZBylx1b5
2uscbBstFAc3vRbg9rrlVM/PmSCQscw7sKjoWV2XVnktW6gPSMs2VSw9k7nNIQZz
w5+5ebU/hvKVER8V3H515eqVPh31acjNbgbaLnAazJmcMMdJdlZHI2yJvZLPaQX5
w99BootUjUSDVhOlpqIsAB0oOd2oL9wTQfTb3tCxsbvODmoM54kEZCf6sSy1VDw4
SkhREjPchrZucpgif/VvxvhXROrxj2TRlznjbSHL5QrdVH6KGTDhhmMD6pLPC50c
uvAnHq9BvJx3Tb6qrU8Kpi3W
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:43 2026 by rpki-client