Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/420711AC5B2811F1AE4B82C4CE1D38B0.roa
File: 420711AC5B2811F1AE4B82C4CE1D38B0.roa (raw, json)
Hash identifier: DdayvVtpMBG6n+oNOp78mdFYY21zRkPFoHWahNw0alU=
Subject key identifier: 32:DF:F6:51:F2:66:31:CD:9D:EF:55:A4:C9:A3:3B:8B:19:0F:D2:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D038
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/420711AC5B2811F1AE4B82C4CE1D38B0.roa
Signing time: Fri 29 May 2026 06:33:09 +0000
ROA not before: Fri 29 May 2026 06:33:05 +0000
ROA not after: Tue 07 Jul 2026 06:33:05 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
154.219.246.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118840 (0x1d038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 06:33:05 2026 GMT
Not After : Jul 7 06:33:05 2026 GMT
Subject: CN=6a193325-a7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:6d:75:30:4b:2d:92:80:77:d8:10:8a:1e:
28:30:bc:86:53:23:93:4f:cf:e1:db:b2:db:3d:a5:
8b:f2:da:db:ec:6e:2f:c3:6d:c1:77:ef:08:07:7b:
9b:a5:df:06:7a:77:f8:06:25:05:70:f0:a5:82:bd:
49:3f:2e:f3:cb:24:99:8f:0e:01:e9:c5:71:a6:c9:
3a:ed:7a:f9:25:de:68:a9:99:ac:b5:47:b4:4a:ef:
a0:4a:01:a7:f6:0a:0b:43:77:bc:17:b8:7f:65:a4:
06:e8:1a:bd:71:31:9b:af:0b:a9:de:90:c0:30:8e:
12:05:54:cc:d6:a4:67:cb:64:07:12:2e:4c:69:bf:
a7:46:18:bc:d4:5a:3f:50:76:d0:77:27:b6:5d:c4:
10:56:74:ee:cd:5f:a8:9b:1a:77:04:b9:7b:a8:d2:
72:8b:f4:02:93:90:52:06:47:81:0d:a4:a8:74:e6:
8a:05:87:f2:8e:d0:db:5a:da:77:7d:1b:f6:78:47:
5d:43:06:1a:11:52:07:92:6c:4b:a0:ff:47:51:f8:
e4:bc:1d:e6:f1:a2:87:5e:07:d1:f6:78:d7:64:8e:
84:db:ee:1f:4c:00:71:e7:a9:9f:2a:e7:e8:6c:d6:
0e:af:1a:f9:7f:20:e8:33:aa:57:28:99:22:33:8f:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:F6:51:F2:66:31:CD:9D:EF:55:A4:C9:A3:3B:8B:19:0F:D2:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/420711AC5B2811F1AE4B82C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.24.0/24
154.219.28.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0-154.219.247.255
154.219.250.0-154.219.255.255
154.221.60.0/24
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3d:26:64:80:f1:4d:82:38:29:e1:f4:86:e1:41:8f:da:47:
a6:af:5a:d9:51:f9:c0:43:fd:df:5d:cf:a7:2c:b0:7c:dd:61:
f3:d6:d3:44:07:f8:7b:bf:59:92:de:b1:75:0d:5b:06:8a:f8:
44:4f:66:ff:cc:ac:35:e5:e6:6d:fa:4b:d6:66:45:3f:8d:2a:
e6:eb:d1:ad:5e:60:9c:2e:c6:60:aa:36:70:72:ef:f5:02:94:
28:8e:21:43:eb:54:2e:33:6c:96:49:76:5c:0c:db:f4:a8:dd:
0a:b9:65:89:f4:62:7d:cd:c8:8d:30:a6:29:12:05:02:8a:3f:
5a:69:07:2e:de:84:2d:56:cd:39:43:e6:46:91:50:b4:a6:bd:
41:4c:43:b4:d0:c7:a8:b5:74:40:e4:54:18:fc:90:55:e5:80:
7a:50:f8:b4:52:35:ec:59:b3:cd:2a:a2:e0:9e:1b:c1:87:d7:
f7:88:76:92:40:5c:1f:83:09:d5:e1:db:4f:0a:45:31:7d:03:
6d:53:9d:13:8d:19:ba:63:d2:e2:6d:fd:4a:c6:e7:aa:59:b5:
23:a8:d1:f5:71:d6:c1:b5:51:0e:e4:50:36:73:97:98:ad:71:
ed:96:69:c3:84:fc:05:f0:7f:ff:8a:8e:ca:1c:90:40:8e:a3:
65:9b:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:38 2026 by rpki-client