Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/323F4FD0527E11F1A9AFD601CF1D38B0.roa
File: 323F4FD0527E11F1A9AFD601CF1D38B0.roa (raw, json)
Hash identifier: mKdsHw6lRUgHWFxm2fNobT9PVJP7w4FoSoG6gCk8YME=
Subject key identifier: 51:32:25:75:99:28:AB:06:74:29:E0:B0:54:C2:48:69:D3:61:70:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/323F4FD0527E11F1A9AFD601CF1D38B0.roa
Signing time: Mon 18 May 2026 05:55:39 +0000
ROA not before: Mon 18 May 2026 05:55:34 +0000
ROA not after: Sat 08 Aug 2026 05:55:34 +0000
asID: 149014
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.170.0/24 maxlen: 24
154.223.171.0/24 maxlen: 24
154.223.176.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.181.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
154.223.190.0/24 maxlen: 24
154.223.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 08:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117827 (0x1cc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 18 05:55:34 2026 GMT
Not After : Aug 8 05:55:34 2026 GMT
Subject: CN=6a0aa9db-8113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:7a:27:c0:3d:6a:a5:20:eb:b2:a0:76:31:
5b:d5:32:38:66:fe:33:9b:0e:a1:d2:26:69:6b:e0:
6a:88:a0:12:a5:4f:42:ed:be:a4:81:c8:d1:17:e1:
38:14:63:ba:ff:37:d4:cb:33:c1:cf:8d:f9:2d:b9:
f7:e1:b0:00:be:e0:45:a0:99:ea:c3:b9:1c:4c:ab:
3e:44:2c:5b:45:5c:56:29:83:13:b2:78:27:f1:cc:
78:82:86:e1:bb:6c:17:bb:c9:e6:68:a6:33:61:45:
31:87:cb:19:7a:83:52:fb:d5:1f:ef:dc:4b:2a:78:
50:ae:8e:b0:c3:b9:66:81:19:8b:fc:e8:41:ef:93:
ba:d8:4a:f8:27:96:73:80:26:8c:31:29:cb:e8:15:
a8:7a:65:d0:af:ca:32:a4:ed:d2:38:94:a2:9b:e7:
2e:20:9e:aa:c1:41:cb:82:35:91:09:54:a1:f3:df:
73:16:46:c8:0d:5f:9e:3a:36:88:e8:03:df:8c:62:
16:65:40:ca:ad:a0:6a:28:1e:96:2b:0a:b8:e5:81:
0f:e4:3f:af:1c:16:c1:d8:59:30:bd:6c:68:90:a9:
06:0e:c5:63:44:ca:64:0e:db:aa:e1:5e:18:e6:87:
b1:d4:60:16:ec:58:c4:0e:de:f8:08:d8:7a:03:31:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:25:75:99:28:AB:06:74:29:E0:B0:54:C2:48:69:D3:61:70:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/323F4FD0527E11F1A9AFD601CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:68:a3:f2:cf:50:97:9a:56:0c:3e:9a:30:e8:e3:f8:fb:c8:
e8:21:ab:28:18:03:86:fa:68:30:77:c4:43:b6:fd:c3:05:db:
44:aa:39:8a:a0:57:87:26:67:f1:2f:5a:39:a2:60:79:3a:b9:
2f:6a:ad:31:05:ad:d2:50:7c:88:8a:39:20:fe:0c:83:52:35:
dc:ff:39:bf:64:a2:62:74:10:7b:c4:07:ef:74:39:5f:5e:81:
39:f5:c3:19:22:65:5e:9e:e6:f6:bf:d4:47:5a:c6:90:77:3f:
9b:15:14:c0:b6:32:de:7b:e4:dd:0b:5f:11:f3:38:d6:df:7b:
fb:04:d4:44:85:e3:5e:1f:dc:f2:88:96:72:e3:ce:c0:ce:6b:
26:27:a8:dd:95:bd:9d:50:04:9e:a8:e7:cd:17:f9:25:8f:c8:
5f:47:92:ef:d1:87:43:eb:b0:d7:82:74:b9:94:bb:be:8f:99:
35:2d:8f:a8:16:f4:12:f9:41:29:3b:5d:18:4e:db:2f:04:5c:
10:13:62:1b:96:d5:96:d8:af:62:40:f8:12:0d:f7:0f:12:dc:
8e:b5:51:4e:53:d9:fa:95:27:fc:6e:4e:55:7e:8d:6e:c7:04:
4d:30:38:4e:f5:da:cc:da:dd:d2:c3:3f:96:e3:c4:23:c4:90:
08:cd:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:52 2026 by rpki-client