Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25FE1778699F11F1B1D04BA2CE1D38B0.roa
File: 25FE1778699F11F1B1D04BA2CE1D38B0.roa (raw, json)
Hash identifier: ro5FND0U9OPrytCK+P8symjqOSaFX3L2E2h+5yGoyhM=
Subject key identifier: C5:84:04:4E:EB:C4:43:97:D3:0C:75:C4:19:F4:7F:18:C7:CC:7C:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D365
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25FE1778699F11F1B1D04BA2CE1D38B0.roa
Signing time: Tue 16 Jun 2026 16:19:29 +0000
ROA not before: Tue 16 Jun 2026 16:19:24 +0000
ROA not after: Sun 02 Aug 2026 16:19:24 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
154.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119653 (0x1d365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 16:19:24 2026 GMT
Not After : Aug 2 16:19:24 2026 GMT
Subject: CN=6a317790-e64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:91:03:ce:92:9f:b3:0d:01:2e:78:8b:05:
84:7b:55:25:24:e4:3b:70:69:e8:d8:3b:6c:f5:9c:
f6:ad:0d:4f:d1:96:ad:98:96:1e:99:a7:d2:45:60:
33:9d:33:b6:4e:ee:46:e4:e4:60:74:67:e2:7c:b9:
55:63:1a:c3:b1:8b:6d:0a:12:66:bb:75:d0:21:34:
f6:d0:b4:c7:1d:fc:67:72:49:1b:b1:4f:6f:da:62:
b5:e7:38:48:14:60:ea:e0:ce:50:d8:36:0c:be:bc:
bd:d2:d0:e6:db:41:fc:f4:75:e6:f5:b2:6a:86:54:
c0:22:53:0e:2f:5e:93:81:f6:01:e4:ef:61:6c:cb:
8e:a0:ea:f3:27:03:ef:f6:74:a9:ce:20:b4:c0:86:
0e:47:46:6d:d9:e1:e1:0d:b3:c6:34:a3:2d:8c:be:
65:c6:d9:e2:7a:22:c7:6e:07:ad:44:5e:40:c7:aa:
6d:ce:12:39:9d:6e:31:0c:00:b0:ef:68:ee:89:d8:
f4:06:c2:21:ee:d7:97:1a:8e:6b:27:54:99:ee:4c:
89:3c:29:05:bf:ea:19:b3:3c:60:a7:4a:bc:72:4f:
c7:2f:29:83:94:5a:2f:45:27:54:62:00:c3:60:fe:
7c:43:68:6e:91:f7:38:43:bc:3c:1f:fb:98:6b:ca:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:84:04:4E:EB:C4:43:97:D3:0C:75:C4:19:F4:7F:18:C7:CC:7C:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25FE1778699F11F1B1D04BA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
154.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:33:61:d7:20:db:dd:eb:ea:33:73:bb:99:7d:83:73:43:eb:
00:14:1d:05:ee:c3:9b:92:f9:fd:f3:cf:c1:34:66:f7:c3:56:
a2:72:8f:49:9c:a3:7f:63:9d:69:f4:8f:a3:02:ac:f0:9a:b0:
2e:1f:79:24:1f:3e:6c:d3:a1:f5:71:79:4f:78:2d:79:36:cd:
2c:66:4a:ee:4d:26:fc:de:59:a7:e6:31:4a:65:3f:3e:4f:c4:
a2:3d:25:c2:f1:11:31:21:74:a1:1d:83:d4:d7:05:8f:ca:0f:
a8:a9:e4:c7:24:27:c6:aa:b8:32:6a:09:8e:96:d3:ac:cc:6d:
bf:0a:42:d2:fa:ab:aa:71:39:18:06:da:cc:4e:25:b6:b6:59:
f4:f7:05:d2:b9:59:04:e0:fa:82:41:2c:60:f1:c6:fd:a6:0a:
92:05:e8:fb:1b:37:2f:d7:9f:d9:1b:d2:5e:ef:ba:e2:fc:90:
9d:3f:4f:ba:7a:63:cd:1d:1e:5e:90:83:07:b0:fc:b4:68:90:
08:b0:d7:c3:2e:f7:d0:69:dd:a8:21:df:f7:3c:88:bc:22:91:
b8:bb:39:27:4e:44:c7:e2:97:9a:99:0b:93:68:73:1b:4d:32:
05:42:bf:2c:b6:7d:8e:c0:19:c8:7b:1c:f1:01:12:31:b4:09:
d0:40:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:23 2026 by rpki-client