Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2394AD5E5BCF11F18AE255ABCE1D38B0.roa
File: 2394AD5E5BCF11F18AE255ABCE1D38B0.roa (raw, json)
Hash identifier: ap30z6/nqwge+A55nhf/Pb6AItng14SVr+kJDaVrfI8=
Subject key identifier: 69:D3:7F:8D:95:32:F7:73:DE:08:00:C3:ED:3B:3F:B3:B3:D7:39:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2394AD5E5BCF11F18AE255ABCE1D38B0.roa
Signing time: Sat 30 May 2026 02:27:44 +0000
ROA not before: Sat 30 May 2026 02:27:39 +0000
ROA not after: Tue 07 Jul 2026 02:27:39 +0000
asID: 44559
IP address blocks: 154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118994 (0x1d0d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 02:27:39 2026 GMT
Not After : Jul 7 02:27:39 2026 GMT
Subject: CN=6a1a4b20-a1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:b4:0a:14:71:5f:6e:68:58:16:ff:8e:37:
1c:20:b0:b7:94:b4:7a:84:5c:70:f0:85:f3:c6:0a:
0f:97:71:38:4f:5b:93:cb:de:5b:7a:51:19:ef:a2:
d6:ee:ae:6e:65:92:7e:ff:0a:39:ca:ef:65:c9:83:
d3:e7:bb:8f:4c:f2:73:72:58:4f:e1:86:b4:47:23:
a1:9e:dd:57:30:13:7c:d1:34:87:56:90:56:28:84:
51:52:c0:fa:b0:35:dd:17:52:2c:b2:de:8a:f5:f7:
fa:fe:e8:0d:35:ce:bc:2d:75:22:cc:c0:fb:2e:95:
5d:dc:6c:92:ff:2f:e1:9e:f8:9a:4d:6a:17:41:a0:
f3:a1:df:a6:5b:38:22:4a:35:7c:43:ec:0e:77:5f:
91:15:2f:ef:9d:3a:0c:8e:c1:21:b4:53:cb:9e:b4:
27:b8:64:b0:b9:db:c8:29:55:1e:c4:4d:50:71:e2:
0c:4b:b6:2e:c7:3e:7d:b7:58:27:f4:bf:14:0b:61:
10:d0:77:fb:23:d6:b0:2a:42:2b:36:b4:53:5d:7a:
04:56:48:2c:94:63:11:90:fb:b2:47:9e:2d:7d:8e:
73:2d:85:4f:a3:25:ae:9b:96:35:a8:d5:ad:64:3e:
af:3f:e4:35:77:51:09:6b:27:67:a1:6a:ad:e8:c7:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:7F:8D:95:32:F7:73:DE:08:00:C3:ED:3B:3F:B3:B3:D7:39:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2394AD5E5BCF11F18AE255ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.141.0-154.209.143.255
154.209.147.0/24
154.209.149.0-154.209.151.255
154.209.156.0/24
154.209.159.0/24
154.209.192.0-154.209.194.255
154.209.197.0-154.209.204.255
Signature Algorithm: sha256WithRSAEncryption
19:9c:75:af:c5:c3:5e:a1:1b:32:71:7c:c7:d2:4e:75:9a:a4:
00:45:ef:c7:1b:6f:71:4d:ad:ce:fe:53:d7:aa:ee:77:54:28:
70:6c:27:ac:16:22:ad:d2:3a:37:ce:0d:6d:bc:9f:1e:d6:89:
16:9b:d4:0c:47:05:66:51:c5:7d:10:b3:4e:12:a4:a8:af:bc:
6d:2e:05:2b:72:df:ea:f0:59:9d:19:e0:54:36:eb:b5:26:0b:
3a:58:27:c3:33:df:a7:b6:e3:9e:d3:c1:43:11:6f:e2:0b:81:
f8:0e:5b:08:c0:40:81:87:3b:eb:69:45:75:6b:d6:26:0a:e4:
6d:d8:6f:6a:42:9f:6f:53:0c:33:5c:66:57:9a:ad:ac:48:4d:
0a:ee:9d:7a:79:87:fb:aa:ab:65:2d:de:b2:42:eb:bf:7e:bc:
12:6a:b1:fd:36:86:b2:4e:b8:9d:7c:77:67:5b:9c:1b:10:42:
59:39:db:71:72:91:8a:6d:74:b8:85:46:b7:80:2a:dc:43:62:
d0:2e:a6:8c:05:5e:4a:f7:72:08:65:34:d3:b1:b1:e0:be:c6:
7d:72:bb:b1:0a:4f:82:e8:7f:81:f8:c8:9c:72:67:ad:b2:ff:
30:fa:57:63:3d:90:f2:1d:e4:13:a3:f8:68:57:06:4e:64:e1:
39:65:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:21 2026 by rpki-client