Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05EED2E4707311F194A20CF0CE1D38B0.roa
File: 05EED2E4707311F194A20CF0CE1D38B0.roa (raw, json)
Hash identifier: pJZKb1gm56iKm7ftXbBlI4yhBzRmUp2jwoSM/m5HELA=
Subject key identifier: 13:9E:7B:55:44:A5:35:91:74:65:CB:7A:54:BC:52:B0:F3:BE:D0:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D51C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05EED2E4707311F194A20CF0CE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:51:15 +0000
ROA not before: Thu 25 Jun 2026 08:51:11 +0000
ROA not after: Sat 01 Aug 2026 08:51:11 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.225.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120092 (0x1d51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:51:11 2026 GMT
Not After : Aug 1 08:51:11 2026 GMT
Subject: CN=6a3cec03-5f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:12:7e:30:98:96:7e:c8:28:34:c6:c8:c2:
1f:46:07:56:c1:db:e0:19:bc:65:70:eb:b2:e0:23:
3d:0d:1a:b5:b8:f3:49:62:c7:74:d5:99:23:4d:e8:
3d:61:08:ac:8d:47:76:aa:58:fd:24:fb:e5:0e:34:
c8:2e:aa:c9:5d:16:e1:9c:f0:f0:b9:9f:21:6a:c6:
ac:ba:9c:2c:47:9b:a7:62:42:ce:0c:8c:70:62:b6:
3f:08:e1:60:c6:fe:a1:5e:22:27:67:de:5f:35:b0:
53:9b:77:84:46:df:d9:34:ac:4c:7d:34:96:93:90:
7e:d0:ad:0e:28:26:11:21:ea:6f:9b:5a:1a:2a:1e:
10:bb:50:be:66:76:23:6d:4f:32:1b:f2:3e:f4:af:
51:a1:3a:fb:c3:19:af:e8:37:a5:71:f6:16:70:34:
31:0c:c8:5b:f9:18:1a:b9:64:52:90:85:05:8f:f1:
ef:ec:51:7a:28:2a:27:10:4b:b9:a0:8b:7b:d6:09:
7d:0e:96:dd:37:53:f4:c9:98:f0:3e:43:27:db:9d:
d3:36:d9:1a:30:84:f9:81:17:37:be:fd:34:fe:aa:
f5:04:a4:ce:7b:e2:a1:27:c3:6f:f2:39:c6:86:17:
82:c6:0e:da:b6:b4:65:f9:83:71:a0:a2:58:fa:26:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9E:7B:55:44:A5:35:91:74:65:CB:7A:54:BC:52:B0:F3:BE:D0:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05EED2E4707311F194A20CF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.225.0/24
154.203.229.0/24
154.205.28.0/23
154.205.224.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
a2:cb:bf:2b:c8:43:99:63:e8:6c:b1:b7:dc:8f:48:8c:00:f0:
8f:8f:f7:d9:42:e0:1c:b3:8a:08:c2:70:42:e9:c8:b9:ac:cd:
8c:dd:e6:b0:28:6e:0e:cb:fe:d1:cc:ed:3f:22:b6:3a:0b:1b:
d2:55:1a:f4:ec:ff:e2:b6:d9:ad:21:9a:c9:c9:78:ee:bf:08:
74:87:cf:d4:6d:b4:46:db:4d:c8:2c:1c:19:6e:95:1e:1b:be:
bf:f2:bf:67:50:ab:5e:fd:f4:25:d7:27:e5:5f:04:27:3e:e5:
f5:ca:19:1a:98:8e:84:94:04:3f:90:ae:4b:16:b9:5e:bb:93:
38:7a:68:6a:2e:20:e8:3b:8c:80:31:7a:02:a0:65:a6:ab:0e:
1a:fc:af:fb:f6:5d:0d:5b:33:86:e7:0f:ea:bc:1d:9d:4e:cd:
0b:b0:ef:25:a2:7e:0e:c2:38:c5:78:40:d5:e7:88:36:8c:96:
5b:65:fe:b7:91:d4:58:d2:73:13:9c:c5:9a:79:f1:51:aa:d0:
42:c0:f8:5b:85:51:a3:e5:fa:2d:9c:0e:97:c0:93:26:49:9d:
8e:3a:39:c4:4a:22:61:08:2b:26:0a:74:fd:a4:67:15:54:70:
30:b4:8f:39:ea:b1:93:44:4d:e1:a8:39:36:54:11:66:16:af:
7f:16:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:46 2026 by rpki-client