Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136532426C8B11F186D5E7E3CE1D38B0.roa
File: 136532426C8B11F186D5E7E3CE1D38B0.roa (raw, json)
Hash identifier: TuWfBsRMgi3dXriCOBSS6vyordsOFWOlmeg3GzWPT2s=
Subject key identifier: 0C:FA:CA:70:60:DF:71:A8:0D:CC:89:88:0D:87:32:72:7C:62:4B:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D421
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136532426C8B11F186D5E7E3CE1D38B0.roa
Signing time: Sat 20 Jun 2026 09:33:21 +0000
ROA not before: Sat 20 Jun 2026 09:33:16 +0000
ROA not after: Mon 27 Jul 2026 09:33:16 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.151.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119841 (0x1d421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 09:33:16 2026 GMT
Not After : Jul 27 09:33:16 2026 GMT
Subject: CN=6a365e61-9eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:0d:35:39:4d:d7:c2:b9:a9:a1:aa:ba:d9:
35:af:a0:be:e8:66:f2:3b:70:b9:ec:c4:f0:7c:d1:
ea:a5:b3:db:c8:bc:93:7e:bc:4d:34:36:26:2e:05:
7b:95:d2:58:69:26:f6:29:e9:d7:9e:2b:ac:48:77:
15:a8:81:2b:63:13:1a:b3:b8:26:04:4e:0d:7a:1d:
b6:ac:fe:3a:bf:7f:fc:4b:72:76:cc:a5:9a:44:c6:
20:b3:2b:11:4a:88:59:69:66:2c:58:cf:07:bd:c9:
0f:35:fd:96:d0:83:bb:66:75:cc:31:13:af:13:53:
91:eb:b0:a6:ce:6b:60:bb:4c:f5:4a:be:f4:a8:be:
31:61:df:79:f1:f1:bb:ec:8d:ce:2d:78:04:f4:95:
79:d0:28:64:ea:91:06:96:8c:df:8a:43:f5:44:94:
83:99:13:36:e6:c8:9c:df:10:2d:2c:a6:ab:0b:af:
47:28:62:0d:84:21:e4:e0:41:40:94:18:66:7c:26:
fd:c8:f8:b6:3c:24:96:62:b4:91:a5:86:a2:53:71:
4f:21:b8:6b:da:03:ce:c9:f5:0c:08:47:40:e6:73:
ed:a5:d1:fe:c8:33:d1:af:d8:5f:c1:c7:c3:24:76:
3e:67:96:a9:3d:b3:64:9e:29:ea:a3:ca:b9:b0:af:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:CA:70:60:DF:71:A8:0D:CC:89:88:0D:87:32:72:7C:62:4B:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136532426C8B11F186D5E7E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/24
154.203.164.0/24
154.203.166.0/24
154.205.145.0/24
154.205.151.0-154.205.156.255
Signature Algorithm: sha256WithRSAEncryption
19:7e:ce:26:4d:dc:79:be:bf:14:ed:03:61:e8:a4:ab:6f:9f:
71:a6:67:d4:dd:03:1f:65:c3:cb:4f:37:1f:0e:82:10:67:4a:
9b:7a:7f:71:bc:e6:36:d6:bd:38:33:9f:a2:06:e0:c8:53:41:
7a:95:d6:33:b8:01:18:8b:eb:c3:2f:a0:e6:05:20:ae:dc:d9:
c9:14:61:73:2a:c7:e4:e0:c7:1f:a1:e1:3a:cb:d8:07:80:11:
04:5a:50:f6:67:99:2e:f3:7d:60:2c:50:6b:8f:dd:7a:19:01:
64:e1:b8:1a:64:09:92:af:95:7a:46:b4:d1:d8:1a:17:e1:c3:
83:2b:52:4d:4f:ce:11:ff:1d:fa:32:be:a2:0c:c5:b9:70:d2:
a8:db:f2:6b:e3:ac:d5:e4:b0:58:52:bc:96:08:95:94:93:33:
25:73:1c:24:9c:f6:49:23:ee:75:9b:65:66:c5:bc:d7:9e:5a:
13:18:15:bb:dd:99:e2:7d:98:83:c3:a2:1f:9f:15:ae:bd:af:
e8:3c:70:11:08:c2:51:00:43:6b:54:62:8b:51:63:9a:8f:01:
89:a5:70:ce:b6:c1:d3:6f:38:e1:25:07:bc:63:88:08:ba:f4:
d4:7a:f6:f7:a6:9a:0d:b9:b5:3f:4d:63:97:69:4f:14:7f:69:
1c:52:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:01 2026 by rpki-client