Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/325EFBFC568211F1A5079900CF1D38B0.roa
File: 325EFBFC568211F1A5079900CF1D38B0.roa (raw, json)
Hash identifier: VMh5rVDurCJwjtkYgITvx5oP9llOqNbuV04TDFd+4KA=
Subject key identifier: D3:BE:C4:16:B1:8A:51:8A:76:85:4F:A7:DB:B4:ED:4E:BE:54:85:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/325EFBFC568211F1A5079900CF1D38B0.roa
Signing time: Sat 23 May 2026 08:34:22 +0000
ROA not before: Sat 23 May 2026 08:34:17 +0000
ROA not after: Fri 10 Jul 2026 08:34:17 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118385 (0x1ce71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 08:34:17 2026 GMT
Not After : Jul 10 08:34:17 2026 GMT
Subject: CN=6a11668e-c20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:f8:4b:75:63:a6:21:4c:1e:ab:3a:93:a9:
ba:55:1f:56:b1:f9:dc:a8:e4:4e:3d:a2:7e:d0:f7:
78:8b:21:3e:4d:45:2b:a0:93:82:de:d0:7f:56:56:
d2:81:20:9b:f3:93:71:3e:96:65:6c:ab:fc:38:58:
de:37:16:77:2f:3b:4f:92:50:f4:bf:1a:e2:0f:18:
eb:aa:b6:31:50:8f:32:65:75:1e:3b:b1:51:4f:a7:
19:06:2c:d4:60:fd:09:5e:83:28:e1:77:75:d2:dd:
f9:78:2b:a8:07:df:11:0f:5c:18:84:e6:ef:c2:89:
32:be:80:db:d6:f5:b6:a6:b5:e7:02:45:1a:38:c6:
b5:0b:9f:3d:ce:a7:c1:ae:0e:44:77:98:17:5b:31:
78:74:bf:06:ab:9e:01:4b:d6:fe:35:44:96:a9:fb:
ad:24:e4:36:ed:57:6e:db:ed:0b:80:ad:89:ab:ab:
60:2c:2b:3e:41:81:5f:72:19:0a:4c:7b:9c:a4:ee:
1a:bf:5a:c5:8b:f6:00:df:49:6a:2f:0e:f3:90:cd:
9b:8d:04:53:23:97:4b:93:31:d3:93:32:dc:df:cb:
71:66:bc:43:6b:55:f0:48:c4:dd:af:5e:b2:52:01:
b2:fd:f9:85:81:5d:ad:53:3b:5f:71:5f:d4:c5:06:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:C4:16:B1:8A:51:8A:76:85:4F:A7:DB:B4:ED:4E:BE:54:85:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/325EFBFC568211F1A5079900CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.197.60.0/23
154.197.86.0/23
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:9c:94:90:a3:e6:42:c2:0b:e7:05:63:a2:d1:c2:1d:08:1e:
f2:24:de:cb:ad:f3:b7:a9:73:70:14:0f:c8:b9:f4:20:77:64:
5f:80:78:11:04:8f:45:e3:b9:29:59:0e:b4:3e:96:ea:e2:e2:
ec:76:03:02:1a:f5:6f:61:ff:fc:fa:7c:a0:48:b1:60:e7:3d:
b9:1d:5f:a6:e8:26:54:2a:9b:8a:48:83:f2:d1:24:ad:1a:4e:
ad:60:4f:1b:0c:b5:91:b1:2f:3f:dc:75:9a:7d:57:77:5b:c3:
20:85:b3:39:f0:9d:58:e5:d2:3a:f9:8e:1d:1c:d3:f1:d9:7d:
34:30:af:b0:db:7a:b3:a6:5e:98:96:53:9d:8b:3a:2a:1b:a8:
f5:f3:16:02:b1:a1:09:9d:49:c1:60:d9:64:b2:e5:84:1e:5f:
20:82:76:49:80:09:91:d4:99:8f:d6:70:00:84:0f:dc:1b:09:
7f:24:f6:d4:83:d4:b4:3f:3b:54:8d:cf:63:bb:45:32:a3:1c:
57:a2:ab:ae:3b:ea:50:b6:34:43:dd:fb:fb:54:2c:01:5e:c8:
fa:9c:ca:98:63:73:a6:96:1f:36:88:de:63:cb:e8:65:74:91:
c3:2d:d9:02:e3:75:92:9f:22:b8:25:40:00:9c:df:9a:b8:4f:
f9:cf:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:08:26 2026 by rpki-client