Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AEE2B28B2811F1A949780BCF1D38B0.roa
File: 51AEE2B28B2811F1A949780BCF1D38B0.roa (raw, json)
Hash identifier: LFmXOGaK2zVWt1Czq6I5EZEdP80q1uJoOVSpulE9/A4=
Subject key identifier: E8:E0:2E:D4:0F:F8:88:18:92:00:28:83:77:D9:05:F6:A7:BD:AD:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AEE2B28B2811F1A949780BCF1D38B0.roa
Signing time: Wed 29 Jul 2026 08:34:31 +0000
ROA not before: Wed 29 Jul 2026 08:34:27 +0000
ROA not after: Tue 01 Sep 2026 08:34:27 +0000
asID: 202656
IP address blocks: 154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121805 (0x1dbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 08:34:27 2026 GMT
Not After : Sep 1 08:34:27 2026 GMT
Subject: CN=6a69bb17-50a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:fc:1e:bb:65:37:aa:ac:1b:16:c9:86:d7:
36:c3:72:cf:27:38:8f:6f:01:75:81:87:0b:1a:d3:
ee:46:d9:02:1f:7a:37:fb:f1:d0:3e:6c:e2:d4:af:
0f:09:50:b9:c9:be:da:5c:8d:e7:ff:07:cb:08:1f:
87:4a:22:f2:8a:74:9c:53:d1:cf:50:5d:0f:70:2b:
6e:4f:00:35:3b:c2:da:3b:ac:25:5d:62:18:2d:9c:
8e:96:1e:62:48:27:cc:8c:ca:f4:a9:e6:76:09:26:
43:cb:ff:7a:9f:68:2f:4e:a7:98:75:b5:58:05:47:
6d:3b:80:fe:ae:32:71:47:e8:09:bd:09:07:a8:d3:
68:8c:19:92:73:8f:9c:0e:8e:cf:d1:fd:99:2f:02:
1a:df:42:03:1e:d3:91:43:49:28:2f:fb:3a:fe:e5:
a6:f6:68:b8:7f:a2:a1:52:c4:c2:b3:e6:52:74:2c:
38:78:4d:e8:0b:fa:56:5d:83:cc:a4:6a:cf:b5:15:
93:33:4c:54:b6:d3:3f:ac:c9:43:e8:47:47:08:7d:
6f:f6:39:34:6d:dd:88:5d:b4:ec:fb:ea:71:e3:db:
a5:35:d5:95:e6:bd:4f:1e:88:3b:da:87:6b:0e:f1:
d5:99:6e:72:e1:e8:2c:21:54:d2:64:ca:37:79:d7:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:2E:D4:0F:F8:88:18:92:00:28:83:77:D9:05:F6:A7:BD:AD:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AEE2B28B2811F1A949780BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.230.0/23
154.203.250.0/23
Signature Algorithm: sha256WithRSAEncryption
54:5d:87:12:85:2e:a1:82:bf:04:74:0d:f1:fc:c0:ba:c5:70:
da:dd:16:0f:61:0c:92:14:4c:2b:39:cc:2a:a1:3a:c8:5d:44:
3a:1f:27:eb:55:ec:2a:b7:4f:64:80:15:dc:41:ea:42:a8:69:
a6:a8:b4:cb:7c:b4:7d:b3:6f:8f:9a:06:d9:41:4a:6e:de:00:
d3:c1:1c:bf:30:ec:05:b8:17:6b:53:d7:84:8d:18:c4:2e:1b:
8f:da:2d:fc:33:06:2e:05:bc:0e:3e:21:fc:9e:87:9f:b9:ed:
30:01:b7:3c:1a:03:bb:94:bf:e0:d7:40:02:6a:69:0f:a4:5e:
1d:33:d1:d1:bf:a3:db:42:0a:ac:33:69:a1:91:1c:cf:aa:ae:
53:99:ef:bb:ac:46:64:96:5f:00:7a:b0:eb:5a:e6:9a:9d:85:
55:ee:58:1a:67:c2:78:01:90:97:02:ed:04:2e:ce:9a:da:9f:
c6:e2:93:5b:1e:54:f5:85:2b:9b:dc:cb:70:f5:6c:36:32:3d:
f0:f1:30:b5:ca:76:e8:65:95:21:59:a4:82:b2:64:c4:fb:ff:
95:9c:cc:17:53:ec:50:16:24:53:33:ac:a1:5e:8d:65:dd:ec:
bd:35:f9:f5:34:d0:4d:60:22:d6:be:6e:7e:97:97:38:07:3a:
41:f2:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:03 2026 by rpki-client