Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C13F700449C11F18A134D0BCF1D38B0.roa
File: 1C13F700449C11F18A134D0BCF1D38B0.roa (raw, json)
Hash identifier: NJYpTXRgjcYdI+azjTc3roGHZ1HURyayuvgYbtGDYIw=
Subject key identifier: E8:75:74:26:E3:EE:07:08:7A:74:61:59:C2:CA:F3:C3:15:BD:41:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C853
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C13F700449C11F18A134D0BCF1D38B0.roa
Signing time: Thu 30 Apr 2026 13:54:30 +0000
ROA not before: Thu 30 Apr 2026 13:54:25 +0000
ROA not after: Fri 05 Jun 2026 13:54:25 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116819 (0x1c853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:54:25 2026 GMT
Not After : Jun 5 13:54:25 2026 GMT
Subject: CN=69f35f16-8cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:d0:98:26:b8:ff:c7:44:8c:1e:45:52:fe:
10:f1:a1:6c:20:72:ee:01:19:36:2d:90:f5:be:40:
1b:a6:09:3d:4e:2d:7d:83:d2:84:74:ee:4b:db:0b:
49:29:41:51:8f:57:5a:52:bb:13:ab:b4:af:e3:cf:
00:22:58:93:57:22:3f:7b:88:45:91:3d:c2:1b:4e:
5f:be:5c:88:61:65:14:ec:c7:7e:96:01:1d:ec:b0:
11:7b:39:71:7b:e0:40:ec:ca:27:41:9f:e1:1b:f3:
98:6e:24:3e:46:74:c9:66:66:85:b5:04:af:21:e4:
4a:8c:e1:6e:d1:63:1a:11:c6:36:94:07:41:93:7b:
cf:18:3a:90:d8:6d:0b:29:da:c9:71:48:15:83:aa:
93:99:38:e7:fc:62:54:78:5b:50:46:cb:ad:69:e4:
3b:f3:3a:59:8f:82:15:bc:00:f8:f0:cd:dc:5c:92:
ec:72:a8:8b:ed:4c:6c:9a:ad:4b:18:2d:d5:4a:7d:
58:e1:41:be:84:0b:76:54:48:07:7b:0c:1c:7f:35:
27:35:9c:98:d0:ca:25:d4:06:29:cf:26:fd:d9:5c:
4c:11:2d:74:b1:d3:da:1a:ce:02:0d:73:3b:3e:05:
85:22:d8:bd:9d:ee:fd:37:7e:71:2f:5d:e2:72:fe:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:75:74:26:E3:EE:07:08:7A:74:61:59:C2:CA:F3:C3:15:BD:41:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C13F700449C11F18A134D0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.248.0/22
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f9:44:df:7f:7d:b5:b1:93:c0:b4:31:ac:18:c4:f8:b1:ba:
e8:4b:c1:5a:14:f5:6b:34:63:26:f9:59:fa:94:a4:c2:d1:45:
c8:b8:e5:7d:22:3c:7a:f7:03:fa:c5:53:42:67:f5:b7:3c:b4:
b9:08:e3:6d:f9:1b:8e:1b:ed:fd:1c:79:32:06:83:8d:4a:63:
b7:b8:1a:39:47:6e:d3:56:7a:e5:a0:db:db:73:e2:90:4f:33:
1f:7d:a9:53:51:cc:4d:a2:90:04:ae:25:e8:16:33:14:00:d1:
a5:b1:af:1c:bf:74:06:45:c3:5f:a9:ac:bc:1c:82:53:5a:99:
ae:11:02:c8:5f:36:d6:45:0a:b9:6b:b8:00:b7:2c:be:6a:ea:
90:22:17:a7:81:6a:ec:1e:13:39:ae:d6:d1:8a:6f:9c:f0:54:
29:2a:12:e3:c6:b3:fe:1f:ef:72:35:dc:b8:ba:41:17:3e:f1:
2f:2a:ad:e9:da:15:6e:d8:7f:a1:2e:25:cd:3c:95:0b:36:c6:
b6:8b:0e:1a:af:19:97:9d:cc:e2:bb:78:85:2c:de:bd:86:02:
87:7b:cf:6b:89:8d:79:82:b0:14:63:63:60:11:f2:b1:2e:37:
83:8c:dc:b3:60:de:f6:6b:aa:9e:20:4a:e0:fc:6f:60:45:fd:
f1:f1:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:05 2026 by rpki-client