Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016E20EC555411F1A41AE9BACE1D38B0.roa
File: 016E20EC555411F1A41AE9BACE1D38B0.roa (raw, json)
Hash identifier: 8woagNBbNapOzuPa4uLqGiJ3mUAHUPZcU8O+rn2TqHE=
Subject key identifier: C1:CE:B7:6A:53:8B:1F:1C:9A:2D:CC:27:B1:90:B7:A1:DC:CD:65:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016E20EC555411F1A41AE9BACE1D38B0.roa
Signing time: Thu 21 May 2026 20:31:12 +0000
ROA not before: Thu 21 May 2026 20:31:07 +0000
ROA not after: Fri 26 Jun 2026 20:31:07 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.143.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118225 (0x1cdd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 20:31:07 2026 GMT
Not After : Jun 26 20:31:07 2026 GMT
Subject: CN=6a0f6b90-eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:a1:fe:36:3a:11:2d:09:ef:a4:42:10:c3:
8a:b6:54:2b:4d:73:ec:46:d1:67:a6:ca:16:9f:4b:
b8:33:bb:d3:02:92:57:39:4d:14:29:f3:4f:49:02:
de:d4:9d:b1:8f:6a:5b:70:98:fe:87:cf:d4:69:eb:
64:b5:9d:ca:a3:94:8c:ad:19:04:a9:a5:ed:e3:d2:
f2:2e:07:e4:a6:36:79:73:c4:f9:52:c1:1a:7d:0a:
1f:2b:bd:84:33:68:8e:56:83:d4:8b:44:e8:06:6b:
aa:4a:f2:f9:86:ad:a8:ad:29:8a:a7:25:c0:14:b7:
db:57:b0:2e:89:f8:1a:f7:ed:20:46:9f:aa:a4:dc:
88:bf:8c:09:42:26:cd:13:d4:55:ac:30:c9:dc:4a:
7a:7b:0a:77:5f:1b:cd:b2:6d:61:47:f8:85:02:7f:
28:a5:d4:4f:66:72:ae:6e:ab:a1:91:41:39:b7:90:
89:f8:81:87:bf:90:17:86:83:3f:e7:8b:31:1f:91:
a8:2e:3e:ff:e0:00:52:2d:52:86:83:43:a7:d2:62:
eb:90:c8:73:67:9b:cd:e7:77:a6:29:f7:f8:57:50:
3d:dc:65:a0:27:1d:a5:60:1e:c9:c9:95:b8:10:53:
da:9d:9a:3f:d2:8e:5d:88:e1:98:b2:fe:71:ad:2b:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CE:B7:6A:53:8B:1F:1C:9A:2D:CC:27:B1:90:B7:A1:DC:CD:65:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016E20EC555411F1A41AE9BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0-154.203.145.255
154.203.163.0-154.203.164.255
154.203.166.0/24
154.205.140.0/24
154.205.157.0-154.205.159.255
Signature Algorithm: sha256WithRSAEncryption
94:c8:1c:2c:09:bd:32:18:43:4b:d1:49:cf:0d:aa:61:fc:d7:
90:b0:5c:37:8f:37:e7:c4:1d:cc:72:f6:86:5f:6b:33:9f:cb:
36:30:47:b4:85:20:e0:7c:d9:a7:3a:17:e1:b0:50:2d:33:96:
89:69:70:33:95:30:2d:d2:a8:28:43:a6:0b:80:fa:c4:f5:8b:
21:27:4a:b8:17:27:61:d3:56:18:6d:eb:8b:c0:7e:72:a3:be:
03:71:b4:6d:fa:0b:7e:51:bb:fe:fb:09:bf:1e:bf:40:4f:56:
2b:78:d3:35:de:e8:2f:8e:02:a3:95:7e:c7:50:6a:45:44:09:
2c:93:79:3c:db:5d:0c:fa:c3:78:86:6e:60:bf:29:bb:c7:a1:
9e:0b:ca:e5:58:49:a3:e5:83:09:a4:f1:c7:84:7d:07:0c:46:
89:94:cd:c2:c0:25:d4:ff:33:7f:75:b5:c9:05:61:01:e4:43:
8d:87:bc:2e:9b:3c:7e:ce:dc:1b:f2:19:40:60:0e:13:c8:12:
6d:2d:02:7e:da:57:bd:ab:73:c2:14:ed:a6:be:f4:0a:d5:33:
81:db:d8:9f:48:53:ee:ba:fd:c3:91:fb:07:67:03:5d:f0:83:
c5:77:cc:76:00:c2:1d:40:5b:b9:bc:d1:7c:18:91:56:f2:36:
5e:e3:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:42 2026 by rpki-client