Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C54D861E4DE411F19EBC4E05CF1D38B0.roa
File: C54D861E4DE411F19EBC4E05CF1D38B0.roa (raw, json)
Hash identifier: baDsV7ObbO0RV6UivFDqDybxP++GPDeyQnf89Jll31o=
Subject key identifier: F8:71:04:83:50:21:9B:AB:FF:16:72:42:CF:E9:A4:66:98:51:5D:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C54D861E4DE411F19EBC4E05CF1D38B0.roa
Signing time: Tue 12 May 2026 09:27:19 +0000
ROA not before: Tue 12 May 2026 09:27:14 +0000
ROA not after: Mon 26 Apr 2027 09:27:14 +0000
asID: 28419
IP address blocks: 154.198.186.0/23 maxlen: 24
154.201.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117567 (0x1cb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 09:27:14 2026 GMT
Not After : Apr 26 09:27:14 2027 GMT
Subject: CN=6a02f276-b9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:62:54:a4:bd:04:e8:ec:52:a8:24:f2:78:
5d:fa:0a:9a:ce:64:02:d6:3d:95:e7:f9:03:b7:13:
79:49:3f:21:e3:5b:07:52:18:a3:62:54:b3:a4:f4:
fa:7c:2a:bf:d6:83:50:da:36:56:67:22:88:f6:3a:
22:6e:f0:7b:7f:0d:b2:89:34:2a:6c:71:e6:84:26:
1b:ba:e6:8c:2a:0b:2e:2d:ac:bc:50:72:b5:9b:55:
ee:eb:3a:97:87:4c:61:33:1c:f1:d5:7d:a5:0e:a5:
bd:23:b9:e4:cc:d0:bc:71:01:3b:b8:8e:8b:24:f5:
5e:ab:b1:1b:ca:b2:fb:83:35:04:bf:c9:e3:8f:5e:
35:34:2f:7d:9b:56:ad:d9:24:04:59:44:9e:a0:48:
57:40:c3:d7:74:0a:49:91:ab:d7:e9:0c:b9:83:48:
fc:c9:eb:f5:9e:c9:40:28:99:da:3c:ce:6c:ff:7c:
20:64:36:b8:9e:fc:d9:e5:98:17:b0:4d:30:6a:87:
1c:2b:ca:cf:82:84:ea:30:7d:ad:b1:f4:18:60:48:
8d:7a:a0:5b:42:a9:f3:01:7a:5c:16:37:32:85:58:
7c:96:b3:7f:a8:49:ed:81:f1:57:23:89:06:55:93:
bc:52:33:b7:84:67:7e:fc:db:a8:9d:bb:2a:6d:04:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:04:83:50:21:9B:AB:FF:16:72:42:CF:E9:A4:66:98:51:5D:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C54D861E4DE411F19EBC4E05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.186.0/23
154.201.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:d6:c8:e2:f7:cc:71:dd:16:a0:bc:9b:d9:86:10:71:11:90:
30:fe:dd:08:71:9c:d7:fb:4d:7a:36:28:0c:da:39:75:64:a2:
bc:02:ad:67:5e:40:48:62:26:dd:2d:ed:26:07:98:af:76:5a:
40:ea:3d:12:f8:d2:70:d6:1c:fa:94:fb:ca:46:2a:48:22:b4:
7e:4e:22:51:e8:23:dd:23:6b:59:07:30:e4:2c:15:b7:77:f4:
9b:3f:59:27:72:51:f5:1a:a5:3a:5f:a3:d1:9a:28:c4:8b:6e:
8d:f0:7f:5e:ed:c0:dd:f7:28:4c:08:48:4b:a8:41:68:ad:be:
f5:5a:b8:f0:4f:39:2a:eb:b0:9c:ea:ce:38:af:f7:a9:d7:d9:
e7:33:a7:6c:b2:cd:a0:87:66:9b:5b:44:5e:79:ad:8b:12:37:
e5:d7:c3:fc:7a:f1:4a:4e:31:49:25:be:ea:ad:30:3e:f9:69:
dc:9e:91:6a:a8:2d:2d:27:52:7e:87:69:5e:05:5e:97:15:0d:
8b:0a:9a:6c:74:87:cd:f2:e0:0f:25:fe:ea:49:00:66:49:be:
83:80:3e:b6:da:5c:d2:11:83:ba:1c:a2:6b:69:dd:8d:cd:9b:
c9:28:12:13:10:fa:a4:e7:b7:81:e4:d5:8d:5f:f7:a0:fd:48:
f4:fb:5a:7d
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcs/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTEyMDkyNzE0WhcNMjcwNDI2MDkyNzE0WjAYMRYw
FAYDVQQDEw02YTAyZjI3Ni1iOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwkhiVKS9BOjsUqgk8nhd+gqazmQC1j2V5/kDtxN5ST8h41sHUhijYlSz
pPT6fCq/1oNQ2jZWZyKI9joibvB7fw2yiTQqbHHmhCYbuuaMKgsuLay8UHK1m1Xu
6zqXh0xhMxzx1X2lDqW9I7nkzNC8cQE7uI6LJPVeq7EbyrL7gzUEv8njj141NC99
m1at2SQEWUSeoEhXQMPXdApJkavX6Qy5g0j8yev1nslAKJnaPM5s/3wgZDa4nvzZ
5ZgXsE0waoccK8rPgoTqMH2tsfQYYEiNeqBbQqnzAXpcFjcyhVh8lrN/qEntgfFX
I4kGVZO8UjO3hGd+/NuonbsqbQRb5wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPhx
BINQIZur/xZyQs/ppGaYUV0kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTREODYxRTRERTQxMUYxOUVCQzRFMDVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmsa6AwQBmskQMA0GCSqG
SIb3DQEBCwUAA4IBAQCo1sji98xx3RagvJvZhhBxEZAw/t0IcZzX+016NigM2jl1
ZKK8Aq1nXkBIYibdLe0mB5ivdlpA6j0S+NJw1hz6lPvKRipIIrR+TiJR6CPdI2tZ
BzDkLBW3d/SbP1knclH1GqU6X6PRmijEi26N8H9e7cDd9yhMCEhLqEForb71Wrjw
Tzkq67Cc6s44r/ep19nnM6dsss2gh2abW0Reea2LEjfl18P8evFKTjFJJb7qrTA+
+WncnpFqqC0tJ1J+h2leBV6XFQ2LCppsdIfN8uAPJf7qSQBmSb6DgD622lzSEYO6
HKJrad2NzZvJKBITEPqk57eB5NWNX/eg/Uj0+1p9
-----END CERTIFICATE-----
Generated at Wed May 13 14:10:35 2026 by rpki-client