Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20EC31F6577611F1B546E2C5CE1D38B0.roa
File: 20EC31F6577611F1B546E2C5CE1D38B0.roa (raw, json)
Hash identifier: 8lSWuu6lIscKeGH2QOwk68W2kbfRqviIMRaKgSS5Y7g=
Subject key identifier: 75:F3:58:52:E0:C6:D4:E3:53:5C:4C:7B:FC:2D:6A:BD:07:05:FA:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CED7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20EC31F6577611F1B546E2C5CE1D38B0.roa
Signing time: Sun 24 May 2026 13:40:30 +0000
ROA not before: Sun 24 May 2026 13:40:25 +0000
ROA not after: Thu 09 Jul 2026 13:40:25 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118487 (0x1ced7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:40:25 2026 GMT
Not After : Jul 9 13:40:25 2026 GMT
Subject: CN=6a12ffce-75b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:80:7e:3b:93:74:47:bd:28:4f:2f:b0:05:
85:5e:2d:00:95:e2:4f:08:3b:33:73:42:66:55:32:
bb:3e:05:ce:9e:90:be:9f:30:3e:43:92:41:14:62:
42:49:38:68:fa:5a:57:f0:3a:68:d4:79:63:45:29:
be:4a:63:b7:76:3a:10:dc:52:c0:e5:28:99:ea:6a:
1a:a7:2e:e1:2a:8f:01:0f:c9:2a:65:05:d8:5a:ad:
a6:de:66:65:38:2c:d9:45:42:77:eb:ad:ff:62:04:
1a:2b:f4:f3:73:7b:5b:83:be:ad:6b:45:a8:53:6a:
94:77:c0:35:ba:f8:94:cf:d1:fa:44:bf:01:7a:ea:
3d:d2:d3:19:6f:57:3b:a4:6a:df:d4:79:7f:85:df:
34:aa:eb:e5:56:60:f9:41:20:82:09:a8:6e:48:b1:
d1:41:3b:e6:78:5f:1d:e7:ae:5d:74:27:6d:b9:e7:
f0:7c:8d:3e:95:f4:4e:b9:e6:25:f2:7e:1c:cd:45:
ba:c1:2d:f3:f1:af:a7:df:0d:0a:08:cc:51:03:86:
ba:c4:27:48:b8:53:c1:3f:47:47:b1:c8:21:9c:84:
65:c0:d4:85:b2:a0:7d:a5:94:40:84:e9:27:11:a7:
cc:6c:2f:78:02:90:14:00:c7:3f:77:2e:be:e8:c3:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F3:58:52:E0:C6:D4:E3:53:5C:4C:7B:FC:2D:6A:BD:07:05:FA:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20EC31F6577611F1B546E2C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:a0:9e:e4:82:c3:df:d5:8f:37:4c:ae:a1:16:10:a5:bb:43:
2b:53:8a:41:ad:07:b5:ce:58:71:a2:5a:f6:39:fa:79:0e:0d:
e0:9d:95:3a:4c:12:a1:dd:8b:80:9c:9a:2c:a8:3c:9c:30:e0:
b9:02:a7:49:e2:ee:31:3e:d4:a8:7b:07:c3:81:10:7a:39:f8:
44:64:6f:1d:95:71:a4:3c:4c:b0:17:6e:8a:d7:5d:3a:80:91:
59:9e:e3:b5:3e:ad:53:0c:29:07:60:cb:95:39:dd:29:ac:0d:
12:36:fb:08:71:24:1a:79:a1:10:27:70:f9:05:10:c8:dd:c5:
c3:2f:d1:3a:cc:69:ba:0b:c9:9d:94:53:2b:42:09:8e:13:97:
01:4a:07:a2:75:33:7c:57:64:54:8a:49:43:1f:82:1a:96:19:
b7:fa:29:62:9a:fb:66:4e:0a:b3:3f:14:6a:02:04:70:d0:25:
32:fe:67:26:f7:55:56:8c:a3:c4:d8:4d:9e:89:f8:13:4b:83:
68:5b:24:5e:62:a7:53:8e:cc:64:90:50:ad:ec:ff:b4:2b:ee:
21:ed:2b:57:ba:76:13:d7:8c:13:f8:0f:11:51:5b:27:65:c2:
bd:f5:d6:19:01:16:82:7d:99:7c:1b:4f:0f:b2:61:0b:6f:2a:
75:22:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:39 2026 by rpki-client