Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235A41243EEB11F1B39F71E1CE1D38B0.roa
File: 235A41243EEB11F1B39F71E1CE1D38B0.roa (raw, json)
Hash identifier: FuRIzODJVjDiUDQX/N1pITbptiLs1qzRTdEzdp4lvsI=
Subject key identifier: 35:C8:D6:60:FF:6B:6E:62:4D:B8:14:0B:A2:23:7D:2D:1C:48:DF:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235A41243EEB11F1B39F71E1CE1D38B0.roa
Signing time: Thu 23 Apr 2026 08:05:06 +0000
ROA not before: Thu 23 Apr 2026 08:05:01 +0000
ROA not after: Thu 29 Apr 2027 08:05:01 +0000
asID: 28458
IP address blocks: 154.212.5.0/24 maxlen: 24
154.212.6.0/24 maxlen: 24
154.212.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116427 (0x1c6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:05:01 2026 GMT
Not After : Apr 29 08:05:01 2027 GMT
Subject: CN=69e9d2b2-da32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:78:70:89:51:29:89:e2:c2:ad:7e:93:96:
28:73:ab:c7:ef:2c:e5:58:1d:6b:80:ea:21:97:ee:
f2:48:27:6d:3b:d0:40:c0:b2:7d:eb:f2:9f:2d:ec:
3e:1c:90:b7:17:75:a9:a0:b0:b9:18:fb:c7:e2:61:
3e:1e:31:9d:97:7c:15:12:80:86:ae:92:64:b4:41:
8f:ba:a1:e1:bf:b1:20:52:51:56:ed:28:ef:fe:c8:
4d:39:af:a0:b8:c8:b1:50:57:02:7f:21:ce:c3:b7:
ef:81:90:63:96:69:63:a8:29:04:6c:60:36:a7:22:
c4:1b:13:d7:cb:eb:d3:a5:55:47:98:0c:5b:7b:74:
42:2c:d6:80:86:c6:11:5c:47:22:28:95:09:74:76:
c0:3a:d7:89:33:2f:a2:63:e3:1c:ad:31:23:0a:5e:
56:ba:d0:ab:32:db:3f:c6:d2:78:05:c9:2a:a4:33:
09:51:f0:af:8d:fb:cc:35:1e:1f:2e:10:6c:83:0d:
9c:89:b0:c4:30:24:6e:a6:ab:3b:f4:b9:b8:49:22:
82:eb:81:2d:71:70:3a:82:ae:3f:0d:11:ad:77:5a:
89:2b:e6:4a:c7:97:b1:93:8a:72:60:92:84:9a:6c:
ee:df:e8:e2:9e:7b:38:98:11:f4:68:58:67:06:8d:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:D6:60:FF:6B:6E:62:4D:B8:14:0B:A2:23:7D:2D:1C:48:DF:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235A41243EEB11F1B39F71E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.5.0-154.212.7.255
Signature Algorithm: sha256WithRSAEncryption
63:ae:79:6d:fd:09:54:b7:d1:19:e5:02:93:7a:95:2c:bd:67:
e0:66:41:45:95:31:f3:a0:de:d0:a6:26:b7:e8:2b:03:9c:18:
57:0e:96:a8:17:8a:0d:be:05:38:e9:ac:c1:db:3b:84:2b:a7:
fa:11:b0:00:56:6e:43:f0:a5:19:9e:83:93:8b:4d:94:e8:5a:
cd:79:9e:92:79:f4:43:a8:30:34:78:d0:13:74:d4:eb:75:c4:
3a:0c:f4:08:d4:cd:38:77:8d:ba:b9:b3:03:f7:75:d1:15:5b:
f0:00:0f:ad:3e:4d:fc:40:0d:f6:5e:a0:00:b2:2a:94:f4:67:
09:95:99:64:3a:6a:50:8e:ab:c6:2a:67:aa:8e:df:3d:44:03:
2a:16:76:97:6f:c9:e8:db:f0:1c:7e:41:3f:b6:ba:88:5f:4d:
d3:e6:74:55:8d:4f:39:86:24:f4:14:3d:ac:ae:f2:13:fa:4c:
cc:26:9e:ad:9f:0e:37:f9:35:46:be:fd:1a:2b:1f:ce:03:d3:
2d:0f:d7:b0:af:0a:4b:29:f5:2a:63:0c:e7:a1:62:c3:c1:c7:
d0:82:81:3d:2c:81:14:9a:f7:de:dd:ba:18:36:23:b0:6a:97:
ca:7c:4e:45:c4:de:8f:48:a0:57:1c:ab:f4:31:8a:87:97:d9:
d7:ae:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:43 2026 by rpki-client