Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7B32164AB711F19EAC40BACE1D38B0.roa
File: 5B7B32164AB711F19EAC40BACE1D38B0.roa (raw, json)
Hash identifier: kLNlO/xSbfxZlFdB9LzIDVz857YYqMdH9Tj8d9z4w7g=
Subject key identifier: 20:94:D2:44:9A:EF:E7:BE:E5:E8:A8:2B:55:7C:BB:2A:EE:BD:73:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7B32164AB711F19EAC40BACE1D38B0.roa
Signing time: Fri 08 May 2026 08:24:40 +0000
ROA not before: Fri 08 May 2026 08:24:36 +0000
ROA not after: Wed 07 Jul 2027 08:24:36 +0000
asID: 36898
IP address blocks: 154.200.186.0/24 maxlen: 24
154.200.187.0/24 maxlen: 24
154.200.188.0/24 maxlen: 24
154.200.189.0/24 maxlen: 24
154.200.190.0/24 maxlen: 24
154.200.192.0/24 maxlen: 24
154.200.193.0/24 maxlen: 24
154.200.194.0/24 maxlen: 24
154.200.195.0/24 maxlen: 24
154.200.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117338 (0x1ca5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 08:24:36 2026 GMT
Not After : Jul 7 08:24:36 2027 GMT
Subject: CN=69fd9dc8-6ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:f1:69:75:f3:ad:96:b9:86:e8:58:05:93:
e8:b6:f6:bb:a7:81:03:2d:30:0c:8a:7d:6c:66:89:
be:91:73:57:60:e5:36:b2:c8:f4:53:f3:65:09:3e:
f6:30:be:af:e4:be:ac:31:c1:fe:f7:ef:d6:60:bc:
1e:62:d2:4f:69:9f:dc:54:d4:36:d0:e6:7a:51:d4:
a1:35:83:c2:34:74:bc:31:bd:d2:c4:59:58:ba:0f:
a8:1e:fd:ec:1d:61:17:8e:36:2f:80:3c:3b:8c:d8:
c3:4e:ff:c2:e2:65:ac:a0:16:99:f2:d0:65:e4:59:
3d:ab:dc:c7:d8:b9:52:b4:33:2c:62:95:b9:e1:e8:
33:2b:05:7b:e4:a3:b7:87:a1:e6:8b:7b:fe:77:67:
7d:44:a4:02:95:a8:4e:74:00:2a:10:ac:6a:24:2d:
74:8a:93:f7:f9:7c:92:70:fc:e8:37:80:96:27:38:
ef:45:ea:54:7d:ff:58:06:6a:d3:4a:b8:7b:2c:6b:
db:d8:83:49:d0:af:26:22:59:4b:3d:14:27:bd:e2:
31:0c:6f:ea:7b:dd:22:5d:ad:19:37:b1:3b:19:35:
19:2f:13:46:66:c1:52:cd:1f:89:c2:ff:be:11:6e:
92:32:d4:30:d3:29:45:ed:90:14:f3:cd:0b:99:13:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:94:D2:44:9A:EF:E7:BE:E5:E8:A8:2B:55:7C:BB:2A:EE:BD:73:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7B32164AB711F19EAC40BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.186.0-154.200.190.255
154.200.192.0-154.200.196.255
Signature Algorithm: sha256WithRSAEncryption
bd:41:f5:46:40:18:2f:fb:2c:fb:df:a2:af:25:5e:c4:8a:2c:
b9:c0:9a:c2:f6:63:33:f3:16:60:71:cf:a1:ac:13:2b:a1:76:
19:a5:c4:1e:6f:16:2b:eb:be:ca:26:6d:a7:e9:89:b3:61:0d:
d9:09:95:9a:69:a3:d5:7d:b5:85:50:58:8f:38:00:3f:3d:69:
ed:28:1f:0b:b6:62:da:35:ac:9f:be:54:f9:f7:51:27:de:d3:
b2:f5:0f:44:e2:d7:70:3d:79:9b:75:a4:f0:59:a3:00:9a:08:
c0:e0:68:bd:ce:53:c7:e2:c0:23:e2:10:2a:2e:a5:2c:30:09:
20:8b:a6:db:c1:69:fd:6c:70:ce:f1:05:d9:61:35:b5:20:52:
d7:81:21:58:ce:de:c0:3a:a6:d2:57:bf:08:be:f0:36:30:65:
79:51:d6:d0:46:c2:a0:7a:55:b8:b1:dd:00:49:0b:87:c6:c1:
6c:39:31:90:34:21:6c:a7:30:04:63:0c:e5:41:8e:b4:f3:14:
0f:37:fa:f9:78:a1:df:50:b2:b4:6b:3d:8b:a2:3d:a5:bf:d8:
b7:64:26:c0:95:f8:e5:5d:35:6f:66:b1:4d:a6:c5:4b:1f:41:
a1:d3:58:8d:01:42:01:ec:56:4f:a0:0e:5c:e2:a3:00:a7:2a:
09:8b:a5:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:23 2026 by rpki-client