Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339CFBCE590A11F19238C0E0CE1D38B0.roa
File: 339CFBCE590A11F19238C0E0CE1D38B0.roa (raw, json)
Hash identifier: 0xsRI7Xp8HcIUrbkJ/OQ2WpS0eg7RStPCs1Kfh+pWBY=
Subject key identifier: B6:DC:3B:28:BF:66:7F:82:B3:B7:71:00:3E:DC:7F:F6:98:83:55:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339CFBCE590A11F19238C0E0CE1D38B0.roa
Signing time: Tue 26 May 2026 13:52:58 +0000
ROA not before: Tue 26 May 2026 13:52:52 +0000
ROA not after: Fri 26 Jun 2026 13:52:52 +0000
asID: 154177
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.139.0/24 maxlen: 24
154.205.144.0/24 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.146.0/24 maxlen: 24
154.205.147.0/24 maxlen: 24
154.205.149.0/24 maxlen: 24
154.205.150.0/24 maxlen: 24
154.205.151.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118731 (0x1cfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 13:52:52 2026 GMT
Not After : Jun 26 13:52:52 2026 GMT
Subject: CN=6a15a5ba-42d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:a7:29:8a:46:64:14:3f:d9:7f:bc:4e:29:
2f:61:03:71:c5:dc:8b:94:1e:87:dd:7e:64:0a:56:
17:5e:f7:33:a1:a6:be:dc:ab:bc:fb:26:9f:09:26:
fc:18:29:70:35:42:22:74:6e:26:c8:0f:aa:a2:a6:
6f:b4:b5:c0:da:b1:dc:cf:8a:5c:3a:c2:ff:98:d8:
d4:05:8c:48:65:37:9b:80:cc:64:c6:54:69:60:8b:
c8:19:73:82:e4:f8:79:ac:52:78:5c:51:c8:62:f7:
48:c7:32:b1:af:5b:cb:26:e6:3d:0b:34:70:a1:c9:
81:d1:e1:b5:e3:2e:70:7b:15:8b:3f:71:fd:84:dc:
eb:99:ca:1b:4d:7d:49:15:e0:82:4c:1d:e5:fc:fc:
06:5b:d1:ca:27:08:64:cd:f3:78:37:4f:b1:bb:14:
c4:5a:d0:b3:36:9b:78:b4:e4:6d:43:e3:dd:de:85:
41:27:19:8d:fe:95:a2:8d:52:f4:9c:ed:5c:30:5d:
bd:65:a4:ce:7d:e4:9d:bc:6a:8f:f7:60:58:6b:83:
15:0e:e4:64:c3:36:e0:e6:ce:67:68:2e:1a:f7:be:
85:52:53:60:71:26:82:d1:14:e6:f5:2c:60:9a:cc:
1d:a4:f6:85:c1:98:7f:8e:8d:33:a1:40:f3:7f:9e:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:3B:28:BF:66:7F:82:B3:B7:71:00:3E:DC:7F:F6:98:83:55:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339CFBCE590A11F19238C0E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.130.255
154.205.133.0-154.205.134.255
154.205.136.0/23
154.205.139.0/24
154.205.144.0/22
154.205.149.0-154.205.154.255
154.205.156.0/24
154.205.158.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:82:7d:ac:2e:77:53:3b:70:50:dd:fe:31:3e:6b:ad:2f:d7:
4a:85:69:df:57:07:e9:76:03:23:ab:d9:30:2c:13:e0:93:4c:
65:42:b2:c2:ea:45:11:00:b5:33:1c:d7:ef:56:b5:61:89:b4:
f5:ea:ed:74:f8:9f:3a:68:93:66:2c:4a:ae:6a:ce:4f:07:94:
f1:19:69:35:47:fd:9f:5d:61:8e:53:62:8e:e2:e9:ff:42:7d:
67:5d:04:cc:8d:2c:4c:67:71:ef:c0:91:e1:94:74:8a:2e:4e:
e4:76:7a:04:57:79:81:3d:ce:4e:92:d3:98:bb:5d:17:31:7a:
d7:d3:9a:5e:8a:83:cc:e5:73:eb:1a:f6:66:97:dc:e1:f4:3e:
96:5f:9d:7b:5d:d8:6c:27:dd:75:07:eb:11:12:a0:23:1b:7c:
50:67:a7:7c:61:b2:3f:73:b6:6c:47:0b:89:bd:fd:95:ea:09:
4e:1c:0b:98:5c:9e:be:fc:b3:65:66:22:a8:a5:b4:e1:e4:8c:
47:23:f0:f0:49:93:1e:e8:21:4c:d5:19:66:d9:5c:9c:93:99:
70:73:c8:89:ad:ac:f4:a1:f9:d6:be:9d:ca:ba:4a:d2:cc:09:
f0:cd:08:86:98:ac:8c:a3:13:b2:63:dc:fc:e0:f7:4f:1b:27:
f7:a7:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:52 2026 by rpki-client