Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253F20B8841911F1B79A05EFCE1D38B0.roa
File: 253F20B8841911F1B79A05EFCE1D38B0.roa (raw, json)
Hash identifier: GXyn4hmc6GellOSbJdWUz7/A8I2UqXXPoA+LjT5/jSA=
Subject key identifier: 5A:D5:0F:F4:19:85:D4:CB:CE:72:DE:62:21:96:C2:9C:35:C1:6F:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253F20B8841911F1B79A05EFCE1D38B0.roa
Signing time: Mon 20 Jul 2026 08:58:16 +0000
ROA not before: Mon 20 Jul 2026 08:58:12 +0000
ROA not after: Thu 27 Aug 2026 08:58:12 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121292 (0x1d9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 08:58:12 2026 GMT
Not After : Aug 27 08:58:12 2026 GMT
Subject: CN=6a5de328-8006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:4c:47:2c:2a:bf:5a:8d:7a:02:62:c5:85:
f1:ec:0c:8b:a3:87:91:cb:50:ef:11:a8:32:e1:e9:
24:15:89:b1:ab:d6:03:20:55:15:84:8c:5c:13:f4:
84:75:3a:a6:d7:0d:05:13:5b:95:80:a9:08:e4:1a:
81:e9:e3:f2:5e:6d:5b:e9:0e:e8:30:ad:0f:d5:93:
70:e3:7d:73:53:57:70:3c:d2:8c:29:aa:f1:02:8b:
60:ce:21:45:ce:ba:f2:ce:72:4c:16:a0:64:5f:9e:
bb:97:ab:f6:8b:4b:48:c1:43:27:66:b8:1a:cc:bf:
87:c0:ac:7c:8d:24:1c:8a:13:cf:cd:73:c5:89:e1:
cf:f3:79:57:c6:6d:4e:56:7e:e2:05:73:af:d8:31:
00:7c:02:c9:d5:9d:9b:4e:60:67:d9:43:c0:db:47:
33:77:30:a7:78:44:24:de:b5:0e:b5:c3:95:78:f0:
9f:17:0b:23:e5:42:0b:5b:e3:f0:4a:c6:44:c0:90:
e0:81:5c:02:b9:61:77:ed:2f:ef:65:f8:c6:14:7e:
33:f6:05:1c:2c:11:0c:72:b1:1d:46:09:d8:19:57:
fd:a1:52:35:69:98:8d:7c:ff:92:80:26:e6:ec:3c:
ed:df:5c:3e:48:72:59:65:06:28:7c:87:02:a0:da:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:0F:F4:19:85:D4:CB:CE:72:DE:62:21:96:C2:9C:35:C1:6F:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253F20B8841911F1B79A05EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
154.203.137.0-154.203.141.255
154.203.146.0-154.203.148.255
154.203.169.0/24
154.205.128.0-154.205.138.255
Signature Algorithm: sha256WithRSAEncryption
28:08:25:03:41:dc:8b:9f:8c:3f:7f:84:25:23:0a:7e:e6:d8:
11:ac:61:e6:2b:9a:e1:c2:09:8a:fc:6c:56:ce:a5:e8:88:6e:
5a:74:42:45:25:22:ba:39:99:c3:fc:e7:64:48:b7:8e:db:b5:
94:27:57:65:60:9e:79:de:27:ee:5b:db:c0:bb:5d:ef:ea:25:
74:84:a9:27:a7:b2:3d:d2:05:f3:85:d4:9d:12:12:f2:4d:ac:
b1:54:5a:4a:18:c5:9e:5f:b7:de:a1:2f:cd:2e:10:55:20:84:
d1:89:6e:e5:51:dc:15:22:57:d7:78:01:7e:d3:2e:54:80:64:
b2:bd:61:4e:b7:61:10:71:5b:0b:37:7e:b8:6b:ea:2e:e4:07:
b2:88:33:7b:ea:19:da:de:7d:28:14:c1:d6:98:7f:8f:b2:33:
a0:02:68:b4:e3:90:c5:59:c2:53:a0:c5:9e:bc:75:8a:6b:00:
59:b2:fc:81:e9:b6:e3:fe:cb:49:3a:fc:c2:2e:b5:d3:e2:75:
64:77:ad:84:8f:8e:7b:6f:04:da:01:3d:68:a9:3d:80:6b:a7:
a4:c3:e5:08:dd:48:45:10:d0:c4:83:e7:4c:0c:1b:88:ee:f2:
89:d0:6a:50:c6:b4:03:c6:cb:2d:06:13:4b:58:0e:9b:4a:6e:
4c:65:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:10 2026 by rpki-client