Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3441A5B45BFA11F1AAFF66C0CE1D38B0.roa
File: 3441A5B45BFA11F1AAFF66C0CE1D38B0.roa (raw, json)
Hash identifier: BXN6NMYMTVVGX9YAjWZ4Cf2pifvGUkiuUIDWagFXUxo=
Subject key identifier: 9E:4D:B3:07:98:C4:64:E6:0D:DC:56:2D:2F:5E:3D:35:47:50:CB:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3441A5B45BFA11F1AAFF66C0CE1D38B0.roa
Signing time: Sat 30 May 2026 07:36:00 +0000
ROA not before: Sat 30 May 2026 07:35:56 +0000
ROA not after: Tue 07 Jul 2026 07:35:56 +0000
asID: 202656
IP address blocks: 154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119014 (0x1d0e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 07:35:56 2026 GMT
Not After : Jul 7 07:35:56 2026 GMT
Subject: CN=6a1a9360-7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:f0:ba:4a:7c:29:b9:b9:41:4d:bb:77:fd:
6c:7e:45:ea:27:e3:07:ee:0e:53:3a:15:5b:a9:d0:
b0:ac:11:93:39:d2:cb:95:16:1d:d1:81:df:9c:12:
79:5f:46:58:d7:cd:e1:ff:7b:d9:09:48:c1:f3:b0:
da:45:85:03:8a:fc:96:7e:af:9d:f9:1a:de:be:bd:
c1:e3:c8:57:b6:37:a7:bf:8a:c4:95:da:36:b9:c6:
b1:26:12:d9:6b:14:51:65:6f:f9:da:d3:5f:38:4c:
78:3e:4f:d0:8b:62:47:1b:e5:66:11:b1:76:07:95:
f2:6a:8e:64:46:d3:ba:e7:24:8b:bc:e4:f1:6b:e7:
4f:56:75:7a:82:eb:3d:8e:16:e5:0d:7f:ba:04:70:
0b:dd:d9:84:49:76:c8:c3:c9:fc:25:d2:88:2f:8e:
96:a3:37:e8:1b:da:cc:f5:f9:aa:b9:60:52:2e:b4:
74:99:35:8c:67:03:52:b0:de:91:0b:03:2a:1a:a7:
8e:f1:3b:e3:d0:17:0e:34:0d:2b:ee:d6:9c:aa:49:
24:9b:84:cd:fa:06:a3:47:6a:3a:86:68:fa:fb:94:
86:47:fd:32:f0:c5:f9:ff:2f:d4:77:98:92:df:49:
31:9f:05:4b:5c:dc:6b:bf:3f:a6:9e:7e:93:c9:60:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:B3:07:98:C4:64:E6:0D:DC:56:2D:2F:5E:3D:35:47:50:CB:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3441A5B45BFA11F1AAFF66C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.228.0/23
154.219.231.0/24
154.219.233.0-154.219.239.255
Signature Algorithm: sha256WithRSAEncryption
96:34:ed:e7:ef:aa:e5:ed:b6:d7:65:a6:0b:05:d3:0c:86:5d:
66:bd:6c:bb:9a:46:09:b7:c9:27:90:85:18:c4:fb:ad:32:5f:
c9:0d:a6:ea:1c:08:29:1f:80:e4:df:00:61:09:a3:c0:bf:b6:
74:d7:ef:e9:ec:59:e4:ef:b5:7e:47:df:82:27:8a:7f:3c:59:
03:62:48:69:a9:77:17:b7:27:ac:64:3e:25:3a:7f:6b:59:17:
51:9b:e4:7e:7d:22:d5:92:e9:9f:32:63:0c:0a:cd:54:75:c1:
e4:92:d0:9c:32:10:0e:d4:10:49:e3:a8:c6:0b:d6:7e:c8:ab:
b9:51:fa:78:b7:42:a8:6a:a0:67:19:91:20:48:d2:78:14:33:
c7:32:37:c7:b6:3a:33:64:af:93:f1:d9:8c:53:00:dc:46:2f:
af:de:44:de:b6:80:72:48:d4:ed:1c:16:ed:f7:e3:76:28:10:
f6:d7:f2:76:65:20:2d:38:d7:e5:ae:02:d3:db:40:61:cc:16:
7e:36:d3:85:d1:39:80:20:08:0b:c7:43:18:07:83:2f:4f:39:
81:3e:70:70:ec:1a:c2:f4:ec:07:5e:ad:08:00:dc:40:37:4a:
91:a8:aa:0a:35:bb:78:cd:85:c8:63:e7:86:9c:ae:40:3d:60:
4f:21:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:30 2026 by rpki-client