Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307034B654D211F1AB7EDFABCE1D38B0.roa
File: 307034B654D211F1AB7EDFABCE1D38B0.roa (raw, json)
Hash identifier: csjl+mSsZYpsxOwGPrH4laMr/JJ/j9XfoiHzRks+mDI=
Subject key identifier: 51:4C:BA:B5:CB:24:61:36:CF:25:13:55:2D:9E:95:88:B0:6C:6B:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307034B654D211F1AB7EDFABCE1D38B0.roa
Signing time: Thu 21 May 2026 05:01:56 +0000
ROA not before: Thu 21 May 2026 05:01:51 +0000
ROA not after: Wed 01 Jul 2026 05:01:51 +0000
asID: 2914
IP address blocks: 154.83.11.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 May 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118062 (0x1cd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 05:01:51 2026 GMT
Not After : Jul 1 05:01:51 2026 GMT
Subject: CN=6a0e91c4-c5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:50:bb:fd:ae:40:4c:42:89:2d:33:2e:00:
2a:33:30:10:f1:41:d3:c2:d2:8a:53:f5:64:1d:d8:
20:ab:af:a0:6d:36:a8:b6:e1:4f:ec:37:e2:c1:bd:
f6:4f:32:47:bb:35:f5:f1:39:10:6e:4a:98:df:d1:
d2:cf:4d:19:a0:3c:64:f7:64:66:cc:c5:81:d9:82:
18:c1:d4:86:35:62:1c:08:6c:e9:dd:3b:ae:2e:9a:
e9:0d:5f:26:82:5b:f9:52:fd:a5:26:b8:8a:b2:c8:
85:96:9f:c9:a9:9e:e7:29:71:77:17:7c:4d:22:ab:
f3:fa:fa:f1:a3:b3:58:e7:b1:37:f9:67:be:5e:fb:
e0:a5:7d:fd:79:69:cb:e4:bb:68:49:cc:ff:b0:4c:
aa:ed:d9:c8:57:41:d9:4a:39:8d:3a:a7:67:b8:59:
cc:32:c4:f0:24:e2:54:50:55:b4:c0:85:d7:ff:f2:
a9:8e:2d:6b:6c:07:a7:13:01:92:94:8b:6e:fd:f1:
9b:b8:77:d7:35:49:bc:9e:6e:63:9c:1c:f3:0a:1b:
90:39:bd:31:5f:7e:49:e5:de:9b:c7:a9:ac:64:38:
73:6e:68:30:89:e5:95:75:ee:80:39:cd:aa:c1:eb:
94:d3:70:e7:84:b0:3c:c4:06:ca:5e:73:21:b3:6a:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4C:BA:B5:CB:24:61:36:CF:25:13:55:2D:9E:95:88:B0:6C:6B:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307034B654D211F1AB7EDFABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
154.92.199.0/24
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:0c:15:04:db:c2:45:d9:52:e3:30:71:24:c7:ea:f0:9c:ef:
bd:6c:0d:ff:62:2e:eb:28:4d:2c:f2:ab:6b:66:3a:9f:37:dd:
9c:c3:21:f3:22:9b:78:c2:0a:4b:46:96:9b:e2:96:16:e4:1f:
9a:1c:26:8b:56:bf:77:e0:87:29:6b:2f:33:2d:d6:9a:34:75:
7e:fb:a7:6c:da:b3:96:ce:f9:47:46:71:bb:2b:df:d4:73:75:
36:7b:e3:cd:61:7a:fe:10:d9:62:76:51:e0:8e:e2:51:9d:14:
2e:d7:02:83:5b:d8:85:d2:0a:51:3f:08:01:8c:8e:34:44:30:
8c:eb:f2:61:f2:9d:e9:82:72:17:55:62:f0:0c:10:09:db:4d:
a7:ad:91:5c:6f:ec:e9:eb:a6:7f:47:32:53:54:f2:77:8a:6b:
08:05:8c:c9:38:87:e4:b4:82:86:53:d8:7b:6a:37:1c:56:e9:
92:89:bf:f1:e7:b2:3d:57:44:2c:96:7e:b6:ce:6b:a5:39:64:
4c:40:ef:45:64:50:d6:3c:75:cf:78:5f:f9:a6:26:35:6f:06:
dd:ae:85:09:70:16:78:75:e7:8d:66:d3:8b:43:43:a6:b7:cd:
67:30:43:4b:d8:e6:c2:75:b3:1e:36:5f:b8:98:2c:47:8b:7a:
9f:cc:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 17:47:32 2026 by rpki-client