Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/276B1BDC55FA11F1A3E5F4B7CE1D38B0.roa
File: 276B1BDC55FA11F1A3E5F4B7CE1D38B0.roa (raw, json)
Hash identifier: bD8lGx68GiO7ozg+Fz6eeFWdj1daewxloWWpJgnQavQ=
Subject key identifier: 6C:3C:33:BD:DF:C4:08:21:5A:57:96:02:24:2C:66:44:2D:B3:6C:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/276B1BDC55FA11F1A3E5F4B7CE1D38B0.roa
Signing time: Fri 22 May 2026 16:20:32 +0000
ROA not before: Fri 22 May 2026 16:20:27 +0000
ROA not after: Fri 26 Jun 2026 16:20:27 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.143.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118318 (0x1ce2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 16:20:27 2026 GMT
Not After : Jun 26 16:20:27 2026 GMT
Subject: CN=6a108250-fd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:cf:fc:62:8f:84:55:bb:53:80:35:61:c5:
ab:ca:ca:fd:ab:34:dc:08:a7:ef:02:9e:fc:68:ff:
46:92:a0:9f:47:6b:2e:1f:f4:3b:a0:04:94:2c:70:
9f:b2:22:b8:7d:1d:47:81:0b:b2:61:8e:b8:62:28:
a6:21:8f:2e:b9:43:3d:28:c6:54:2c:30:0a:74:27:
72:0a:32:10:42:f1:ab:4b:c7:21:99:94:be:7a:58:
69:8c:3b:9c:b5:bf:65:71:e3:a8:01:1d:f7:e0:d1:
3d:e5:16:05:d8:99:26:78:0e:8a:ba:f7:1c:97:a4:
1f:4e:13:21:ba:ab:8c:39:d3:0c:da:b2:0e:35:46:
00:97:cf:da:ed:13:40:0e:89:fa:e0:fc:8f:a4:8e:
e1:d2:a4:18:93:a1:11:14:11:c9:7e:00:1c:46:ba:
42:bc:e0:94:15:c0:e1:db:5d:af:fd:5a:97:60:b7:
f8:1a:45:f8:4c:5b:83:a4:7e:92:c8:cb:bd:eb:91:
52:9c:69:ae:65:d3:88:e9:b1:7e:36:3a:86:ca:de:
fc:ae:6f:f8:8e:9a:b1:8c:79:59:20:14:dd:06:c9:
ee:f8:fc:6f:19:a8:f4:c3:74:0e:fc:da:bb:33:e1:
ba:93:a6:ed:f9:5a:1f:da:50:91:b0:fe:33:52:d5:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:33:BD:DF:C4:08:21:5A:57:96:02:24:2C:66:44:2D:B3:6C:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/276B1BDC55FA11F1A3E5F4B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0-154.203.145.255
154.203.163.0-154.203.164.255
154.203.166.0/24
154.205.128.0-154.205.138.255
154.205.140.0/24
154.205.157.0-154.205.159.255
Signature Algorithm: sha256WithRSAEncryption
9a:52:d8:7d:03:93:a6:6c:75:2e:93:dc:48:62:fc:74:92:e7:
50:69:13:b2:99:6f:92:79:e5:6b:66:52:87:6b:d5:99:68:e7:
ce:44:76:75:5c:19:5d:f2:95:bd:8f:c4:4a:04:37:0f:8a:3e:
95:24:fb:d8:cb:9f:95:1c:ea:42:8f:64:a6:68:9b:41:67:cb:
a3:e5:e2:a2:82:08:75:83:a7:42:66:75:11:78:df:d5:c6:e4:
2e:ac:7d:47:6b:c7:48:10:d8:a0:db:f2:3c:7c:d1:d8:54:cc:
1e:56:05:18:a9:91:38:73:a6:50:b9:dc:2a:8a:5c:50:ae:5a:
6e:54:51:26:ec:b0:85:90:b1:50:79:68:35:f6:4e:ce:f2:c3:
4a:da:b4:a9:7f:fa:1e:64:98:e9:ba:59:44:6d:16:29:ce:7e:
61:7d:31:8f:e3:22:61:07:48:46:5b:90:08:52:0b:59:32:d4:
b5:ed:a6:d7:b1:57:7b:80:f5:88:9b:61:ec:35:08:51:c8:85:
c4:fb:f0:75:1b:4a:9e:2c:45:dd:a8:6f:ac:52:06:c8:48:99:
c5:db:a5:6a:57:b5:f7:84:0c:57:77:0e:6d:9c:ca:84:f3:87:
eb:a8:34:74:6b:de:9e:4c:e1:fa:a6:24:ff:1c:cb:ad:33:8f:
8d:64:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:42 2026 by rpki-client