Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/155DFC485BD111F196151BB8CE1D38B0.roa
File: 155DFC485BD111F196151BB8CE1D38B0.roa (raw, json)
Hash identifier: 8KQJTuyQFqrF1BQ3VD3hc66K17PHgKQAJ+4/BsS3QjQ=
Subject key identifier: E1:91:C8:BA:70:A3:B4:01:0B:66:DC:E3:3A:0B:4E:32:B7:D3:C8:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/155DFC485BD111F196151BB8CE1D38B0.roa
Signing time: Sat 30 May 2026 02:41:39 +0000
ROA not before: Sat 30 May 2026 02:41:34 +0000
ROA not after: Tue 07 Jul 2026 02:41:34 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118998 (0x1d0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 02:41:34 2026 GMT
Not After : Jul 7 02:41:34 2026 GMT
Subject: CN=6a1a4e63-4341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:08:81:43:54:6d:3c:cc:c0:2c:71:2f:96:
f8:8b:5f:39:5f:41:0e:66:cc:d6:7b:68:d8:73:f8:
f9:da:b3:12:d2:d6:b7:60:e1:57:c4:d5:27:e4:5a:
f4:2a:e2:e3:c3:97:ec:f9:65:3e:4e:96:8d:aa:99:
35:10:0e:31:52:a6:86:e7:5f:0a:68:db:0a:b5:cb:
33:e2:be:dd:c2:82:5e:da:89:78:8e:8f:9b:2e:5f:
a3:71:bd:50:28:78:dd:d8:54:86:2e:5f:0d:3a:66:
3f:5f:42:29:f9:af:56:59:fa:aa:cd:01:47:94:e8:
d6:24:73:7e:30:3d:bb:9b:5c:40:67:25:9c:b5:8b:
b3:54:5c:e1:d8:cb:63:19:ed:86:1e:d9:f7:e7:55:
1b:0c:07:0c:43:b6:29:ec:17:dd:6d:f2:8e:b9:e9:
01:cc:6e:73:08:fc:07:7f:25:ce:66:4c:83:5c:41:
bb:ef:c0:e8:37:76:5d:d5:9f:e9:51:19:a4:a6:f6:
b1:db:5c:90:a8:0d:67:17:dc:da:25:d3:64:7e:4f:
fa:99:84:7c:36:25:d9:80:36:9e:bb:9d:74:79:94:
8f:d1:56:d0:4d:58:6d:c6:cf:dd:12:47:5f:bb:07:
3d:36:3e:c3:6a:1c:43:05:2a:05:c8:38:6c:88:42:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:C8:BA:70:A3:B4:01:0B:66:DC:E3:3A:0B:4E:32:B7:D3:C8:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/155DFC485BD111F196151BB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0-154.209.139.255
154.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c2:80:0d:98:2e:65:71:ef:35:99:32:2d:a7:00:ef:6d:59:
1b:1c:3d:87:a6:40:73:cb:0d:b5:e5:39:03:b1:a2:3d:88:cf:
5c:9f:06:6a:30:c8:a8:58:42:cf:79:07:27:29:e9:7a:75:d1:
68:cc:d5:c0:64:d8:2d:8b:3d:97:d0:3e:0b:68:2d:69:23:79:
16:05:a9:b6:5d:ad:9f:ae:48:7b:fa:70:77:c5:b5:3a:cb:86:
73:88:3a:6d:02:16:c5:95:f1:e4:c4:43:ac:65:1c:4a:f1:97:
01:18:99:a9:82:17:86:ca:02:2b:28:db:d8:b8:75:38:1c:91:
8b:90:8a:27:e2:6c:73:f6:d4:46:82:cc:fd:ac:88:0c:45:45:
25:93:5f:45:a3:97:e9:dd:7d:dc:51:67:22:c1:10:1e:be:7e:
44:ef:a5:3a:48:5c:e5:68:c3:53:eb:e3:90:d4:c4:eb:04:2d:
9f:3b:57:7d:a2:1f:20:da:a3:03:4f:ea:4f:4d:cd:88:b2:e0:
af:40:c1:ea:e5:3a:4f:2c:a5:a2:a6:fd:f6:d8:13:55:6c:1a:
6c:82:c3:bd:62:72:8f:58:23:41:38:73:86:6a:59:73:e1:3e:
f2:cc:ee:58:1f:7f:7a:fe:5a:ff:0b:59:76:6e:86:dc:7b:1e:
4c:61:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:22 2026 by rpki-client