Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/502B80785B2911F1B53F74CACE1D38B0.roa
File: 502B80785B2911F1B53F74CACE1D38B0.roa (raw, json)
Hash identifier: 0JaLytT3yFpUQZMnFAL1RvibiH1lbTExNJTyUeEmUbQ=
Subject key identifier: F0:EF:5B:B6:36:77:2D:FA:37:5D:A4:68:1B:6A:2D:9E:B6:B0:20:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D03C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/502B80785B2911F1B53F74CACE1D38B0.roa
Signing time: Fri 29 May 2026 06:40:42 +0000
ROA not before: Fri 29 May 2026 06:40:38 +0000
ROA not after: Tue 07 Jul 2026 06:40:38 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
154.218.29.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
154.219.29.0/24 maxlen: 24
154.222.40.0/24 maxlen: 24
154.222.41.0/24 maxlen: 24
154.222.42.0/24 maxlen: 24
154.222.193.0/24 maxlen: 24
154.222.194.0/24 maxlen: 24
154.222.195.0/24 maxlen: 24
154.222.196.0/24 maxlen: 24
154.222.198.0/24 maxlen: 24
154.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118844 (0x1d03c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 06:40:38 2026 GMT
Not After : Jul 7 06:40:38 2026 GMT
Subject: CN=6a1934ea-1c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:8d:71:25:7f:9c:3e:e0:bb:3f:76:9c:70:
44:8c:61:42:83:fc:fc:70:42:ed:78:3e:df:70:0b:
92:fb:14:47:8a:21:a0:99:67:62:cb:5a:16:ce:6e:
70:93:67:4c:a5:ca:53:1e:c8:4b:a2:87:dc:40:0d:
47:f1:62:8f:a9:50:cb:d5:a5:fb:b2:2d:97:18:7a:
54:ae:a2:02:72:67:2c:67:d7:8c:86:74:65:3b:26:
35:a3:ff:cd:fb:43:a7:38:dc:f5:ea:6f:48:4f:eb:
28:41:86:de:39:26:53:5f:6e:8a:09:f6:11:4e:1a:
d1:67:69:89:5f:a4:84:12:84:58:43:64:ce:6f:3b:
59:16:83:22:90:0e:e0:fb:5a:57:65:0a:11:78:05:
95:39:18:34:dc:10:08:3c:f5:33:a5:c8:8d:4c:b9:
79:6d:32:03:fd:1b:f5:86:c3:ac:20:80:0b:1e:4f:
c6:8e:b2:ae:2d:5f:89:49:78:cf:b3:b7:a1:36:b5:
58:5f:b9:de:1b:02:cc:d8:f6:67:26:32:ad:2d:46:
f5:35:00:05:91:aa:06:99:1c:15:5e:67:03:75:cb:
28:a7:81:89:89:cc:aa:91:ce:f2:15:e3:66:71:97:
da:b4:fe:63:83:7f:14:da:21:ba:cc:b7:59:8e:0c:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:5B:B6:36:77:2D:FA:37:5D:A4:68:1B:6A:2D:9E:B6:B0:20:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/502B80785B2911F1B53F74CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/23
154.219.17.0-154.219.22.255
154.219.26.0/23
154.219.29.0/24
154.222.40.0-154.222.42.255
154.222.193.0-154.222.196.255
154.222.198.0/23
Signature Algorithm: sha256WithRSAEncryption
35:8b:90:96:9d:22:64:7f:3b:a4:6a:84:93:37:e9:8d:f3:5b:
1b:5a:3f:3d:b6:43:f3:05:13:a5:d3:74:eb:ba:96:68:6b:9a:
7b:a1:98:96:6b:30:7f:31:7a:93:b2:b9:8b:7f:9c:2f:a5:0e:
00:22:df:9f:6d:c8:c0:65:ba:0b:fb:92:4e:96:8c:5e:86:bf:
bf:ca:98:b2:22:ab:5e:3a:d4:2f:00:36:bf:aa:f5:67:3f:da:
89:13:ee:ba:61:6e:a3:07:90:d3:45:69:1d:21:19:58:06:49:
05:2b:d3:e2:f4:b8:bc:0f:8e:54:89:08:01:58:99:5d:c3:9c:
31:f2:5e:98:ad:43:a8:c1:4f:b3:d0:f8:72:2e:35:f7:36:24:
39:df:d2:68:fb:8a:06:eb:bc:b0:5c:f6:65:ce:b3:85:19:00:
60:1a:c6:5a:71:43:3f:04:35:18:3c:95:30:1c:9a:23:2a:5b:
dd:7a:eb:5b:4d:8b:b0:42:ad:7b:11:da:4f:1d:6c:c7:88:0d:
3c:5a:8d:3c:a9:b9:9a:c8:d4:2f:ea:11:c7:50:97:7d:98:b2:
f0:e8:1f:2a:ae:0d:f5:ea:28:9c:f5:87:be:82:27:63:e5:ca:
45:95:d7:13:25:43:cb:14:65:21:64:b3:cf:ac:d8:44:95:70:
09:ab:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:54 2026 by rpki-client