Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01143068590B11F1BB94A6E6CE1D38B0.roa
File: 01143068590B11F1BB94A6E6CE1D38B0.roa (raw, json)
Hash identifier: LtfhbjsuFdVacXWw+AdEdSaEquY2YLcj+xEjc4AIFFU=
Subject key identifier: 07:30:1F:59:E1:27:6E:0C:E3:98:C3:6D:BC:B0:B8:08:E2:A0:95:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01143068590B11F1BB94A6E6CE1D38B0.roa
Signing time: Tue 26 May 2026 13:58:42 +0000
ROA not before: Tue 26 May 2026 13:58:38 +0000
ROA not after: Fri 26 Jun 2026 13:58:38 +0000
asID: 154177
IP address blocks: 154.205.138.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.141.0/24 maxlen: 24
154.205.142.0/23 maxlen: 24
154.205.148.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118733 (0x1cfcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 13:58:38 2026 GMT
Not After : Jun 26 13:58:38 2026 GMT
Subject: CN=6a15a712-68c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:95:f6:90:38:41:5f:34:b6:9a:34:ff:2b:
59:39:31:a9:3f:6e:41:9d:f4:00:c8:5e:c4:20:0d:
0a:d7:5f:62:7f:e1:1a:15:fb:7a:e3:0c:07:d2:56:
2e:6e:a8:39:27:cf:63:18:85:72:ca:38:34:e1:85:
22:5d:38:d4:09:50:8e:cb:14:e5:36:52:1c:3d:cf:
e9:dd:01:8b:70:a3:0e:3c:96:8d:7c:07:95:23:97:
63:b5:64:29:e8:d8:19:2d:55:95:0e:92:82:30:cd:
a2:f7:b9:b8:f1:5a:fa:2b:92:4d:2a:89:72:8c:67:
be:df:77:2c:c0:fe:7a:cb:b3:0b:10:8e:7f:0b:e6:
83:78:55:e0:e3:68:42:f6:57:32:43:8f:c9:59:06:
cd:f5:68:c9:be:7f:60:eb:dd:8a:3f:34:7b:2f:02:
72:34:41:d1:09:37:9c:3b:0a:e5:19:ee:f7:30:e4:
2b:09:c3:0f:22:fd:2c:0f:2d:83:5d:df:32:b8:52:
40:4e:54:38:51:c1:d4:1e:07:3c:df:8f:8c:e5:fe:
a3:16:2d:2d:58:c3:f2:59:f1:b3:a9:d6:19:2e:ec:
cf:14:6c:aa:00:08:fd:36:87:7e:88:ae:3b:c1:37:
73:32:21:99:c4:b3:17:f1:94:e8:b4:5f:cb:5f:a8:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:1F:59:E1:27:6E:0C:E3:98:C3:6D:BC:B0:B8:08:E2:A0:95:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01143068590B11F1BB94A6E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.138.0/24
154.205.140.0/22
154.205.148.0/24
154.205.155.0/24
154.205.157.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6a:2f:37:42:ec:c7:c8:a4:59:df:ae:4d:96:f7:19:d9:c5:
cb:c4:e4:d4:ed:56:f7:f4:71:16:d1:54:75:00:b4:42:f1:0a:
70:45:94:48:b4:bd:4f:c8:06:4e:6b:0d:d7:96:22:84:be:e4:
37:a6:bc:d2:df:f4:fa:6a:2e:f9:8b:dd:4a:5f:00:03:d1:e0:
25:f4:e9:0d:5b:5f:52:d5:0e:fb:7a:25:27:d1:85:2b:03:85:
b6:60:19:f0:41:2e:fe:95:78:b8:fc:1b:68:14:72:cd:d2:c5:
7a:90:51:84:ca:24:c9:3c:6c:eb:32:a6:14:2a:eb:0e:7d:76:
b4:91:e7:af:a8:8f:9e:85:de:f8:a0:85:4f:73:87:d5:d0:9e:
5e:54:c3:cb:af:c0:81:76:16:93:06:2d:bf:14:db:0d:77:92:
0c:83:bb:81:6a:40:57:f8:7d:e4:ec:87:bd:0a:7e:6c:1c:14:
fc:a2:f3:89:68:9d:0f:8f:79:df:0b:4f:7a:ad:37:f8:99:9e:
e7:6c:95:84:c6:a3:80:66:45:be:e6:de:23:4e:ca:1d:fc:13:
44:bb:0e:1e:00:68:98:1e:29:18:0f:b0:ab:bd:2e:c0:d6:9f:
7c:f9:dd:b0:4e:56:0d:cc:3b:7e:3b:11:7d:e2:7a:77:4b:84:
a9:16:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:17 2026 by rpki-client