Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/536EB0A8553311F189D298F5CE1D38B0.roa
File: 536EB0A8553311F189D298F5CE1D38B0.roa (raw, json)
Hash identifier: c5kaQIzjPH11DJ2TcrateVIshyfFh35kS3isfrUev+0=
Subject key identifier: A5:98:B5:23:23:B8:17:5B:B8:A5:35:0E:BB:1E:EB:2F:92:E7:4B:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/536EB0A8553311F189D298F5CE1D38B0.roa
Signing time: Thu 21 May 2026 16:37:16 +0000
ROA not before: Thu 21 May 2026 16:37:11 +0000
ROA not after: Sun 14 Jun 2026 16:37:11 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118159 (0x1cd8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 16:37:11 2026 GMT
Not After : Jun 14 16:37:11 2026 GMT
Subject: CN=6a0f34bc-9d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:08:e2:1b:28:c0:5c:2c:8d:57:9d:51:1b:
fc:32:c0:45:33:3d:a7:b7:04:7f:0d:39:98:81:eb:
e7:84:08:5d:e6:34:5c:b5:33:af:62:4b:2a:02:77:
34:63:dc:7c:5f:66:09:9a:ed:bb:1d:30:19:d0:6c:
5f:9b:c2:23:58:ed:fe:b8:56:e5:2a:d3:b5:9e:a4:
11:c4:bb:2d:51:b3:7e:d9:84:66:c1:51:b1:93:cd:
e9:3a:42:1e:b8:68:eb:2a:f7:85:02:5d:90:00:6e:
97:3e:09:cc:2b:f1:f0:11:2c:b1:7d:42:cf:cc:16:
ba:7f:52:fe:93:5f:46:c2:b6:7b:6e:41:3b:c9:7f:
b4:63:71:1a:fd:24:07:1e:05:0e:9d:32:04:c1:f3:
c9:16:e0:d0:3a:f7:cd:c0:ef:11:96:61:d4:d1:d0:
f6:cd:a7:57:5e:38:b8:ce:fa:14:67:b5:9b:18:3b:
f0:a2:26:11:5a:77:64:4e:38:05:ec:1c:54:a9:b4:
29:7a:b7:c7:48:31:d0:31:14:dc:b0:70:1a:7b:d0:
e7:97:ef:00:be:ae:b0:50:8e:49:14:30:09:2c:2c:
6e:22:cc:3e:3b:75:c0:c7:00:52:38:08:81:42:78:
9c:46:22:eb:ea:d4:60:88:18:f7:74:67:e9:80:94:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:98:B5:23:23:B8:17:5B:B8:A5:35:0E:BB:1E:EB:2F:92:E7:4B:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/536EB0A8553311F189D298F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:97:6d:06:60:84:de:75:bd:94:ca:30:53:49:3d:8a:eb:47:
72:4c:08:17:9c:69:1a:b3:a5:5a:4d:ec:ec:1a:3b:94:c1:21:
91:67:4a:c7:33:ab:34:57:45:3b:f6:db:3f:0c:1a:42:95:7b:
b4:fb:fe:67:8e:d9:6e:a6:5a:7f:2c:6e:9c:c5:99:f0:21:ca:
70:c4:e8:fb:8f:42:9c:85:b8:17:c8:a1:f0:8b:90:5c:ed:88:
05:21:0d:1d:26:06:bc:bd:26:c4:5f:11:76:b4:29:26:39:27:
72:6c:ac:77:e6:cc:6d:ce:24:52:ff:5c:ab:bb:6b:62:6f:7d:
b6:4a:01:91:d9:5e:ad:39:11:c1:a5:98:8f:e0:97:58:ee:2b:
34:42:1b:19:01:2c:30:b9:f0:c0:d0:a3:99:71:51:f7:81:ef:
63:ea:85:f2:08:5b:64:5f:56:46:e4:18:8f:4b:8c:5f:ee:24:
d3:52:c9:bf:89:11:7d:d2:c4:c9:cb:c8:ec:9d:48:f4:1c:35:
4c:cc:4f:fb:50:f9:a9:7a:f5:9d:82:7b:7d:e7:62:7b:b2:3c:
e4:1b:63:7c:40:e5:13:3e:dd:1c:ad:c0:a7:59:47:db:8c:c3:
b6:b7:52:a0:10:b6:40:ea:12:70:ea:a7:8e:50:02:03:2b:cc:
6c:21:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:57:45 2026 by rpki-client