Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40905AA45BF511F1B34775A2CE1D38B0.roa
File: 40905AA45BF511F1B34775A2CE1D38B0.roa (raw, json)
Hash identifier: 23mnoWmlpnYvI05kuYISQV5v1oUTJXB9jf7qc0KThLg=
Subject key identifier: 3D:BB:E7:56:76:BD:1B:9B:35:6B:C5:C4:B0:2E:63:50:E5:71:75:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40905AA45BF511F1B34775A2CE1D38B0.roa
Signing time: Sat 30 May 2026 07:00:34 +0000
ROA not before: Sat 30 May 2026 07:00:29 +0000
ROA not after: Tue 07 Jul 2026 07:00:29 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119010 (0x1d0e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 07:00:29 2026 GMT
Not After : Jul 7 07:00:29 2026 GMT
Subject: CN=6a1a8b11-87c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:d2:d5:83:65:be:93:d5:99:a9:be:71:90:
3f:dd:bc:1d:30:ca:74:c7:5b:d8:08:2b:ae:b7:ed:
36:f2:2a:f9:89:6e:fe:b1:a6:8c:32:84:ea:da:05:
ac:a0:bb:89:5a:52:d0:a4:93:a8:7d:22:21:0e:23:
6b:c7:83:a3:98:76:0f:43:fc:8a:8c:9a:8d:00:f4:
8f:8a:7a:73:26:4e:6e:8f:30:f3:e2:ef:b6:4b:68:
7b:e4:ca:9b:3f:15:e9:56:f7:1a:5d:f7:15:af:00:
9e:b7:6d:e3:53:23:05:12:0b:d5:e7:dc:5f:ef:30:
1b:ff:f8:48:a3:8b:ca:43:9f:8d:a0:2e:23:a8:83:
49:5f:b6:84:31:7a:23:6a:3b:96:9f:fb:ef:d7:25:
a2:c1:03:5a:0b:e5:74:b1:d2:d9:00:74:eb:c5:c6:
1c:c9:01:ef:30:1b:c1:e6:c1:06:6c:79:38:90:b7:
9e:ee:41:a2:cf:52:00:5c:18:8f:c5:bc:b8:55:f3:
c4:e8:a6:f0:e6:7e:4d:f6:5e:83:4b:e6:ca:2e:73:
27:14:68:18:98:eb:da:3e:71:fa:03:a3:3d:33:73:
08:f7:1b:86:e3:b6:93:14:0c:31:e2:45:24:54:ff:
00:ed:83:a0:71:5c:6d:0a:67:93:0f:c7:34:89:6e:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:E7:56:76:BD:1B:9B:35:6B:C5:C4:B0:2E:63:50:E5:71:75:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40905AA45BF511F1B34775A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.218.31.0/24
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
09:32:82:12:91:52:86:6e:1f:69:f7:db:ea:fa:b6:98:9a:f5:
3f:62:92:95:fe:08:4f:c1:83:28:28:ea:af:eb:07:2f:82:09:
5f:9d:11:b6:a2:49:77:b4:86:80:25:99:8b:7b:c9:b4:42:83:
dc:06:37:c9:62:56:96:f1:0e:c8:c9:72:b1:7d:0c:29:9e:5c:
fc:7d:bb:8f:f8:2a:a6:3f:00:33:90:02:ae:fe:54:c5:32:1a:
cd:e2:6a:3c:56:db:c3:62:d7:68:d5:a3:0e:b9:8d:d2:72:f4:
89:bf:23:f6:99:f5:a4:c4:8c:7a:86:47:d7:05:f4:06:9e:57:
e0:ee:6c:03:45:70:dd:ad:3f:09:fa:96:44:0c:4b:73:ac:e3:
26:06:5d:86:99:63:c9:54:11:a0:1a:00:93:3a:48:8d:98:8f:
00:01:ca:c9:13:dd:3e:90:9c:8f:93:c2:32:32:76:6c:79:da:
94:6f:60:8f:e0:69:83:c4:32:91:93:3b:04:60:61:49:c8:c1:
0d:c2:4d:13:46:30:46:6d:4b:35:67:e7:6a:f6:71:df:46:bf:
62:b9:aa:95:ef:bf:33:01:1e:4e:7a:20:f3:58:15:12:e6:ad:
54:d8:b7:f6:67:a7:2d:92:79:81:3b:1d:30:c9:a9:9c:1f:ae:
8a:5c:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:43 2026 by rpki-client