Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C0C2B25BD011F1B12657B2CE1D38B0.roa
File: 37C0C2B25BD011F1B12657B2CE1D38B0.roa (raw, json)
Hash identifier: oZDrv7P4xr4ad9MQPtphBjmOJ0CMDRFZqKXURswfOyM=
Subject key identifier: D2:77:A8:87:2C:C1:14:FA:26:18:6B:FD:12:95:11:16:67:46:6A:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C0C2B25BD011F1B12657B2CE1D38B0.roa
Signing time: Sat 30 May 2026 02:35:27 +0000
ROA not before: Sat 30 May 2026 02:35:23 +0000
ROA not after: Tue 07 Jul 2026 02:35:23 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118996 (0x1d0d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 02:35:23 2026 GMT
Not After : Jul 7 02:35:23 2026 GMT
Subject: CN=6a1a4cef-7565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:a2:8d:49:1b:65:df:43:7c:22:1b:57:85:
a8:6c:6d:2e:1f:64:a8:7b:73:25:61:ea:54:dc:7c:
d8:0b:f4:84:86:43:52:01:39:9c:39:92:1c:17:be:
8d:66:d5:8d:6e:4f:cb:d2:bc:90:02:df:8f:73:07:
e8:d3:48:68:0f:aa:e4:88:6e:d5:ba:be:00:3d:ce:
28:24:7f:c9:a2:2b:6d:c8:e8:f9:1c:68:84:53:fd:
ee:04:46:27:ae:3f:9c:52:e7:47:fc:9d:37:34:07:
f6:08:bf:39:41:ff:76:cc:ac:90:86:19:46:ff:17:
3a:d0:6a:54:4b:6e:17:ef:2b:89:14:dc:69:8c:ab:
51:a1:77:62:7a:af:e2:1d:f0:dc:9a:6f:8c:ce:9a:
55:d8:4b:68:56:0a:c8:4a:cf:05:f0:b0:00:02:56:
01:6d:19:3a:80:eb:6e:0e:54:d4:f2:6f:92:a1:9b:
0c:f5:5f:59:a6:ec:20:fd:50:08:8c:83:ce:d5:5a:
01:0e:20:2b:73:ea:66:c5:e9:a8:98:d7:f5:e3:bf:
ba:82:44:e7:ad:af:ed:10:87:5c:a4:4e:f1:02:e6:
16:f7:74:23:bf:77:fa:be:9e:48:f1:81:66:23:a1:
03:9c:e7:d4:29:9a:7b:34:05:c0:8f:e6:77:90:15:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:A8:87:2C:C1:14:FA:26:18:6B:FD:12:95:11:16:67:46:6A:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C0C2B25BD011F1B12657B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
154.209.205.0/24
154.209.207.0/24
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0-154.219.206.255
Signature Algorithm: sha256WithRSAEncryption
41:51:6a:6d:3a:cc:6b:c5:03:60:25:f9:fc:42:f0:b4:db:d6:
6f:ca:6f:33:4b:23:60:78:26:55:14:06:c6:e5:0e:33:b7:8c:
47:c7:95:01:fb:5b:42:37:56:10:86:0c:b9:7c:88:fa:7e:78:
16:a2:c1:04:6a:88:82:7d:b4:b4:a1:1d:db:33:5e:e5:12:55:
fa:63:c7:40:60:03:11:42:ea:b2:b2:65:bf:4f:8d:a1:16:d2:
87:22:20:f0:80:55:6d:11:30:f9:f9:fc:60:d5:f7:7b:16:c8:
80:8c:d1:68:09:12:4a:5d:83:fe:1f:b1:cc:23:00:cd:cd:2b:
2b:63:4c:c4:f1:42:e4:af:79:e4:3b:6f:40:7c:3a:a3:37:2a:
cf:52:ad:ad:57:8d:8f:b1:8e:ac:0f:e5:46:9e:04:05:68:f3:
a7:a3:dd:90:9d:e4:4f:80:a6:db:04:e4:3b:3a:b9:cc:54:73:
e9:dd:3b:e0:56:c2:f6:6a:f2:30:69:6f:e5:20:a9:d9:63:a3:
77:d6:a7:22:a3:35:91:13:d4:59:46:8f:62:27:2c:49:9f:31:
db:40:62:0a:48:20:68:5a:b6:2b:8d:54:66:15:ff:1b:33:9d:
c8:76:2c:cf:e8:a9:0a:62:15:6b:70:b5:6e:44:43:7e:dc:28:
e8:e4:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:32:56 2026 by rpki-client