Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/290556601AB811F1A9036ACDDAE4EC9C.roa
File: 290556601AB811F1A9036ACDDAE4EC9C.roa (raw, json)
Hash identifier: /w6e6Fkl8yXeGqCiUqsxOiDblHl+WvDd5St+KHnvvLw=
Subject key identifier: 13:C5:45:85:4C:67:6E:56:F8:32:6D:83:4C:F8:8C:08:48:97:41:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/290556601AB811F1A9036ACDDAE4EC9C.roa
Signing time: Sun 08 Mar 2026 06:29:29 +0000
ROA not before: Sun 08 Mar 2026 06:29:24 +0000
ROA not after: Thu 08 Mar 2029 06:29:24 +0000
asID: 17561
IP address blocks: 154.203.51.0/24 maxlen: 24
154.203.52.0/24 maxlen: 24
154.203.53.0/24 maxlen: 24
154.203.54.0/24 maxlen: 24
154.203.55.0/24 maxlen: 24
154.203.56.0/24 maxlen: 24
154.203.57.0/24 maxlen: 24
154.203.58.0/24 maxlen: 24
154.203.59.0/24 maxlen: 24
154.203.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114261 (0x1be55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 06:29:24 2026 GMT
Not After : Mar 8 06:29:24 2029 GMT
Subject: CN=69ad1749-d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:01:bd:f6:2e:47:04:ed:c5:ac:8b:7d:9c:
e4:3d:bb:9c:52:98:20:fd:28:10:ce:0b:ed:e3:02:
9e:e1:0a:5c:88:51:72:f3:ed:8b:25:87:48:3c:4d:
86:3b:e7:c0:fa:9d:a7:ba:4f:8c:68:ea:9f:88:f5:
f5:f3:80:21:84:40:f4:ba:57:2c:9c:ae:54:56:fe:
c0:44:ed:a4:74:65:c7:2e:20:d4:f1:da:c1:6f:83:
12:fa:65:e3:a9:18:e4:9d:2e:91:c5:5d:c6:fd:b4:
30:60:9e:0a:80:04:0f:1e:f1:39:4b:e7:a9:c0:47:
0a:1a:b0:23:41:26:a3:b3:d6:cc:24:8d:41:03:5c:
85:42:b1:a5:bb:3d:c0:25:45:2f:4e:84:64:20:12:
21:e1:11:ec:32:c4:34:17:24:f6:03:2b:3c:45:73:
3f:e5:ff:50:fb:13:7e:76:4a:9c:bc:8f:dc:2e:00:
2d:e7:16:05:dd:69:49:4b:eb:ab:1c:fe:12:34:0f:
e3:9c:d9:6d:c9:51:cb:9f:29:0d:89:b4:df:da:18:
ac:b6:db:04:12:90:81:a7:ff:d3:7e:d1:d3:b1:a2:
5f:cc:ab:67:9a:f9:41:e8:f3:99:97:81:46:41:51:
e6:dc:19:11:13:82:51:00:5e:bc:06:53:bf:21:57:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C5:45:85:4C:67:6E:56:F8:32:6D:83:4C:F8:8C:08:48:97:41:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/290556601AB811F1A9036ACDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.51.0-154.203.60.255
Signature Algorithm: sha256WithRSAEncryption
c7:8e:7b:c5:0a:26:e0:71:05:6c:42:66:a5:d6:40:ce:b0:66:
07:ea:37:f7:3c:8f:7e:7d:7f:00:9e:f3:6c:52:42:e7:2d:74:
dc:42:ee:de:4f:bb:63:85:39:e9:cd:6e:73:d9:98:4c:82:bd:
ce:26:58:5d:15:d8:7f:9d:07:19:04:95:90:f9:ae:4b:dd:1e:
75:6a:8b:4c:51:ae:4c:5a:7d:d8:33:2a:27:b8:71:10:06:4c:
67:4f:38:ce:1e:d7:85:f6:b5:81:1e:d6:e6:8e:e7:3b:d7:33:
07:47:84:b2:c6:b7:10:18:c4:25:f8:7f:87:39:b8:b4:f2:f2:
83:23:bc:fd:fe:1b:0f:0f:e9:02:4b:99:cb:6e:31:d2:88:4d:
80:3f:a3:ea:fa:6e:81:00:1b:bb:99:2b:0f:4f:9a:94:38:bf:
f8:b7:23:7f:c8:b9:42:76:6a:b3:02:1b:98:d9:37:86:b5:96:
e8:80:a4:c8:a5:16:a1:18:12:52:3c:cb:19:48:3b:2a:35:74:
e0:3e:19:b7:1c:7b:9c:62:8d:d5:ab:9d:58:f2:d7:26:2c:93:
81:38:ae:05:04:8c:7f:02:75:8c:6e:a7:67:4f:63:ce:81:d9:
36:a7:72:45:8f:0b:ef:e8:36:c3:6e:ed:50:bd:50:ab:f1:46:
d3:d0:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:44 2026 by rpki-client