Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602C7060457911F1A02620CDCE1D38B0.roa
File: 602C7060457911F1A02620CDCE1D38B0.roa (raw, json)
Hash identifier: 04KbIK4MubwJgLfFbUxvlGctqtIgiSNEZkcgpZaKSwM=
Subject key identifier: A5:E7:E3:E7:00:EA:AE:BA:C1:4D:F8:19:0E:B1:5D:1E:10:D7:39:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602C7060457911F1A02620CDCE1D38B0.roa
Signing time: Fri 01 May 2026 16:18:24 +0000
ROA not before: Fri 01 May 2026 16:18:19 +0000
ROA not after: Fri 05 Jun 2026 16:18:19 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116919 (0x1c8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:18:19 2026 GMT
Not After : Jun 5 16:18:19 2026 GMT
Subject: CN=69f4d24f-eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:86:a7:0d:cf:f5:be:9e:21:37:92:ed:a3:
b6:b3:9b:ee:34:8c:56:3b:ee:5a:ef:7c:05:e5:33:
95:98:e2:9f:2d:01:06:fd:65:16:d3:ad:48:29:bb:
43:61:9f:f0:0e:8f:4e:9f:d1:de:77:c3:b5:b7:32:
43:9c:42:13:10:1e:3f:a8:6c:d7:71:bc:1c:5b:b3:
d0:b9:44:cd:4b:93:43:55:21:c2:be:45:54:71:09:
68:77:30:93:36:99:7c:e1:ca:b0:8d:a8:27:0e:ee:
da:a6:92:f2:c8:35:62:8f:72:29:9e:b3:93:d5:69:
c4:98:9a:51:fe:53:b9:d6:c5:28:82:85:e2:65:85:
f1:40:c4:7e:dc:af:61:38:8a:c2:db:dc:99:6f:7d:
f1:aa:e7:a9:e6:3b:8e:4c:5b:0b:ab:35:8c:17:03:
66:85:61:30:99:d3:a7:16:2c:4c:16:9a:cb:25:24:
9c:1b:85:67:92:b6:08:b4:62:e4:41:f1:4c:de:33:
a5:91:27:f6:a8:17:de:0c:fd:a7:d4:6d:6b:16:d5:
c7:30:c1:5e:5d:32:a2:67:24:9e:72:09:1d:55:8a:
9d:07:b3:9d:26:10:0c:50:54:2e:14:74:df:bf:33:
0c:b2:68:8a:b7:fd:2b:e6:e2:1f:37:0b:ec:48:f1:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:E3:E7:00:EA:AE:BA:C1:4D:F8:19:0E:B1:5D:1E:10:D7:39:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602C7060457911F1A02620CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0-154.209.139.255
154.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8e:c7:ca:11:0e:e2:af:6f:c4:e9:fb:be:5e:89:17:e0:4c:
9d:b4:9f:e8:c7:b9:05:9c:45:43:f9:1d:c5:63:fd:9b:fc:5d:
82:a7:da:6c:ec:a9:77:18:ae:95:46:11:12:48:c2:42:5b:9f:
b0:b3:94:c8:26:cd:99:ab:0a:3c:5e:39:80:22:27:91:44:9a:
10:08:87:3b:ea:a4:d0:fb:c8:22:cf:f4:fb:ab:29:f8:e6:d9:
8f:af:20:60:53:fe:f3:aa:fd:4a:89:25:69:a5:91:e6:a4:9b:
7c:b2:26:e7:8a:3a:cb:e0:4b:a7:04:00:3b:12:98:81:8e:26:
61:65:e3:c4:87:91:b6:6c:ca:6f:ff:8c:2c:78:8f:23:d8:76:
5b:be:e7:73:4c:51:19:5e:bf:d5:09:d7:15:16:18:1b:a5:be:
6f:8b:94:4e:88:dd:be:7b:53:b7:47:75:1e:2e:12:43:88:26:
20:8c:6e:ac:e1:5b:bb:31:b7:26:70:37:d9:53:c0:5a:bd:55:
8f:0d:87:21:1b:8a:80:e8:db:5d:3b:74:be:25:bc:93:47:aa:
25:c2:9d:c7:f0:25:5e:7c:d4:54:13:97:29:57:d6:4a:d8:df:
2f:b8:9f:0e:5a:b9:f8:5f:d3:93:06:dd:e4:7c:d2:65:41:cb:
8d:f3:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:57 2026 by rpki-client