Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257DE3A87CC511F1909F1BFECE1D38B0.roa
File: 257DE3A87CC511F1909F1BFECE1D38B0.roa (raw, json)
Hash identifier: 12YuD1g9iW1r0Q79agDFO8baJZifodadPEgd/gZ2uYY=
Subject key identifier: F7:1B:6D:BC:47:6C:FA:06:5E:AB:9F:6D:64:23:3E:D0:11:3A:0B:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D815
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257DE3A87CC511F1909F1BFECE1D38B0.roa
Signing time: Sat 11 Jul 2026 01:09:21 +0000
ROA not before: Sat 11 Jul 2026 01:09:15 +0000
ROA not after: Tue 10 Jul 2029 01:09:15 +0000
asID: 17561
IP address blocks: 154.198.212.0/24 maxlen: 24
154.198.213.0/24 maxlen: 24
154.198.214.0/24 maxlen: 24
154.198.215.0/24 maxlen: 24
154.198.216.0/24 maxlen: 24
154.198.217.0/24 maxlen: 24
154.198.218.0/24 maxlen: 24
154.198.219.0/24 maxlen: 24
154.198.220.0/24 maxlen: 24
154.198.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120853 (0x1d815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 01:09:15 2026 GMT
Not After : Jul 10 01:09:15 2029 GMT
Subject: CN=6a5197c1-9006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:e5:4a:7b:da:92:b9:aa:83:12:56:4b:0d:
79:70:09:f4:c0:96:4d:98:78:e1:a8:4e:34:65:9b:
24:d4:9a:1b:6b:94:b4:ef:be:81:79:f8:bf:c7:51:
49:e3:f4:b0:ac:2b:bb:99:25:17:1d:c4:22:2e:43:
9f:63:cd:73:0b:bd:48:06:27:6b:e6:b8:64:9f:d1:
70:86:a2:bf:b6:9e:91:62:18:7a:71:ae:02:a8:64:
0a:aa:a2:0b:db:8e:39:06:fb:23:68:af:ca:86:68:
d5:dc:a8:2d:21:90:22:ca:fa:f3:31:aa:31:7a:49:
d5:c7:d4:21:31:a6:f7:13:c7:ce:02:af:16:fd:0e:
33:39:dc:e1:54:da:10:cd:c6:f6:f4:ae:71:35:13:
1c:b1:ce:f1:dc:d9:3f:65:44:9c:03:2d:00:e5:a3:
ff:0d:d2:a8:b0:07:60:1f:a6:9c:62:15:1e:7b:63:
07:46:b9:59:b4:b4:01:b0:46:55:97:1d:ce:31:69:
14:8e:2a:8e:9e:3b:4f:f3:72:24:7a:fb:18:dd:96:
64:56:e6:68:52:4f:a1:a1:07:d1:08:74:e7:17:ab:
a3:fb:c7:e1:87:2b:bd:86:52:81:a1:43:cc:87:1c:
e6:9c:28:a9:e6:d5:dd:e5:d4:e8:10:bb:1e:18:e4:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:6D:BC:47:6C:FA:06:5E:AB:9F:6D:64:23:3E:D0:11:3A:0B:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257DE3A87CC511F1909F1BFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.212.0-154.198.221.255
Signature Algorithm: sha256WithRSAEncryption
44:2b:45:90:aa:38:fa:26:c0:b1:d6:97:e3:40:a9:ff:43:ab:
81:63:4a:d4:e6:f5:f0:de:52:86:58:4b:37:59:b1:1e:fd:ce:
78:a0:6e:5e:1d:a4:f7:77:46:e2:5e:76:1c:a3:33:06:73:5f:
35:d9:a2:13:b0:c1:7c:1a:55:1f:63:09:71:21:9d:da:c2:b7:
a6:98:77:d6:4b:90:21:43:16:85:55:b6:f4:60:8a:4c:c9:11:
9f:f4:ab:e8:61:cb:61:01:29:69:83:53:cb:50:5c:9e:de:40:
bb:ff:ee:66:c3:76:63:d5:ff:d0:ab:a1:0e:64:8f:00:16:ca:
4a:a8:49:eb:3e:d4:4e:46:11:54:49:0d:43:07:22:c5:07:f3:
64:c7:37:44:cd:58:47:bf:79:3c:4c:49:8b:58:44:fc:3f:d3:
24:de:b3:25:6e:1e:af:39:8e:af:c2:86:84:69:a1:06:37:5d:
3f:63:e0:00:29:ec:9b:e0:98:90:b3:4f:ab:a3:5c:ff:af:15:
8b:32:f8:01:56:bd:a1:1f:c6:b0:95:0d:01:a6:03:64:20:b7:
70:0f:53:ca:b9:4a:56:3f:d9:e9:29:aa:60:b6:78:f6:dc:26:
61:b6:97:cb:33:65:09:c8:4c:47:ba:7e:9b:5d:e7:e6:1c:4b:
21:c2:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client