Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0537EB026C8511F18DE896BFCE1D38B0.roa
File: 0537EB026C8511F18DE896BFCE1D38B0.roa (raw, json)
Hash identifier: xU9ryfW4ffOuL2Cz0taXwY/96Jl0gVfMbjBwZnXq+Vc=
Subject key identifier: 59:39:15:14:BD:AE:3F:F1:A9:AE:8E:28:6F:FF:61:C3:CA:DA:ED:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D413
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0537EB026C8511F18DE896BFCE1D38B0.roa
Signing time: Sat 20 Jun 2026 08:50:00 +0000
ROA not before: Sat 20 Jun 2026 08:49:55 +0000
ROA not after: Mon 27 Jul 2026 08:49:55 +0000
asID: 138915
IP address blocks: 154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119827 (0x1d413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 08:49:55 2026 GMT
Not After : Jul 27 08:49:55 2026 GMT
Subject: CN=6a365438-2e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:2c:bb:3f:e6:07:30:f0:f1:c4:94:30:b8:
97:82:35:9a:d8:c9:31:c7:5a:43:67:b4:de:b2:3e:
92:4d:55:34:31:b1:84:36:1d:74:0d:a3:7e:05:bf:
e7:c6:ad:af:17:1e:66:e2:27:4d:24:25:02:44:4f:
94:a0:7c:79:50:e8:2e:1c:35:6d:44:67:f1:47:3f:
12:18:e1:26:e6:1c:4c:65:81:9d:83:41:74:ea:b4:
6b:ac:1e:09:75:bb:3e:5a:36:b0:9a:f0:78:4d:77:
32:bd:56:58:0a:2c:82:87:db:70:27:65:fd:fb:6a:
ee:3e:4f:26:d4:b3:e6:bb:c7:ef:8d:16:9b:dd:cb:
11:62:b3:83:0e:fd:ac:bd:81:63:3d:21:e3:54:25:
69:ff:41:c0:a4:cf:17:81:ed:72:4c:f6:6f:f9:cb:
9e:de:02:56:76:e4:18:8e:79:d2:36:65:24:a8:46:
ac:3e:56:3e:2e:a1:fc:0e:08:94:b7:12:7f:22:fd:
b2:36:6f:95:be:4d:a7:b9:21:17:95:da:09:11:c5:
8d:61:03:0e:1d:c1:49:82:cd:d5:65:76:9b:57:eb:
7b:a1:ed:6f:f5:34:19:1f:c9:02:07:fc:d2:d9:26:
be:07:20:c3:d6:32:48:f6:42:e8:85:41:bf:f5:25:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:15:14:BD:AE:3F:F1:A9:AE:8E:28:6F:FF:61:C3:CA:DA:ED:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0537EB026C8511F18DE896BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.149.0-154.203.159.255
Signature Algorithm: sha256WithRSAEncryption
80:66:c4:6f:28:c6:f2:4d:93:c0:2c:03:4d:8c:59:df:c4:6e:
3e:57:db:e3:a8:ad:76:bb:0e:54:e5:ef:f8:ab:75:e6:1c:27:
78:17:a5:94:57:1a:2d:99:3d:a6:ff:5c:03:41:0c:08:d6:30:
8b:84:36:4c:61:10:94:93:33:7c:23:6a:35:81:a4:1c:37:2a:
d2:1d:ad:1c:f2:ff:a9:99:66:be:a1:bc:33:0f:ff:61:d9:92:
31:3d:dd:cb:a1:2c:58:d2:c6:23:72:c0:05:b0:ec:71:df:67:
dc:54:f3:ec:e9:8d:cf:9f:56:2b:a8:f1:a7:bf:31:f1:06:54:
0e:5f:dd:38:e8:0e:77:b0:c5:27:85:13:fb:28:f3:a0:50:ef:
6a:11:35:44:63:b9:cf:7b:4e:d7:5a:d7:96:e5:0f:f3:8d:f2:
7b:c2:67:21:1e:19:b0:a6:0d:1e:94:1c:97:e5:65:d7:c7:1c:
79:52:36:c4:1d:5e:72:f6:49:81:71:4d:98:77:63:c0:1d:3b:
ff:64:05:f6:c1:a8:78:a1:ca:83:f1:1b:75:4f:ce:ff:7e:09:
b3:1e:b1:6a:94:c4:1b:4e:7b:45:cd:60:25:7c:51:8d:f5:87:
8d:3b:52:a1:6a:a0:4c:91:c7:41:4b:29:ad:75:e0:7d:b3:62:
df:af:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:29 2026 by rpki-client