Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/721FDE0859AE11F195E7C3CCCE1D38B0.roa
File: 721FDE0859AE11F195E7C3CCCE1D38B0.roa (raw, json)
Hash identifier: QletZ6xWD+UBB0I5e8POuJ2xs1Em46goTO6F+fmHNMo=
Subject key identifier: 98:B9:D0:0A:B5:0E:D0:3D:6C:51:7B:38:57:2C:66:BF:26:F5:CF:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/721FDE0859AE11F195E7C3CCCE1D38B0.roa
Signing time: Wed 27 May 2026 09:28:40 +0000
ROA not before: Wed 27 May 2026 09:28:35 +0000
ROA not after: Fri 04 Sep 2026 09:28:35 +0000
asID: 18229
IP address blocks: 154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118777 (0x1cff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 09:28:35 2026 GMT
Not After : Sep 4 09:28:35 2026 GMT
Subject: CN=6a16b948-9c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:62:94:ce:5e:d6:66:23:6c:bb:be:7d:c9:
9d:a7:9d:ae:16:69:43:cb:26:50:9f:5b:0b:81:87:
df:2d:9a:5e:a2:ee:ba:20:5c:56:25:91:1a:9c:fe:
43:8b:de:c8:ff:75:2b:03:17:6a:48:05:3d:2f:20:
07:ae:5d:64:3d:bd:51:1b:14:7e:9a:8c:49:48:bf:
84:6c:8d:38:c1:ba:ca:1a:4e:60:9f:01:5d:4c:47:
c0:5e:63:9a:7e:d0:70:95:52:f8:86:61:a5:8b:fd:
20:7b:7e:03:8c:79:58:85:f0:5e:68:75:b3:c7:22:
10:0d:83:16:e8:56:85:ba:f9:62:62:ca:f3:0d:2f:
5e:63:a7:41:f8:d3:58:fa:c3:f7:44:5f:78:6e:28:
4d:3a:64:9f:86:37:9c:3f:bf:61:7a:61:b2:5f:23:
f0:20:29:81:6e:2a:b8:09:2c:85:04:36:7b:3b:99:
5a:4d:26:d9:1e:81:18:f6:6f:b9:52:33:c0:f7:e8:
dc:b1:c5:c6:74:ed:ab:b5:22:d4:60:2a:0f:04:9e:
fa:6f:3e:89:6c:ba:3c:bd:87:0d:f4:db:49:2b:85:
fb:59:2f:6b:22:1a:66:08:25:ab:8c:3d:47:37:ff:
42:41:a1:15:6f:ac:4e:d7:90:7a:95:a2:0f:6b:14:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B9:D0:0A:B5:0E:D0:3D:6C:51:7B:38:57:2C:66:BF:26:F5:CF:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/721FDE0859AE11F195E7C3CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.155.0-154.210.164.255
Signature Algorithm: sha256WithRSAEncryption
04:8b:cf:7e:b9:83:3e:3b:a1:6b:2e:bd:c5:68:63:b0:36:8e:
b6:b0:87:98:91:8d:a6:41:2e:d5:75:93:24:bf:70:c4:d1:5b:
e9:33:2a:f1:b8:36:7d:a4:4a:eb:2d:f1:ab:c4:0c:65:d6:b6:
2a:6a:01:7a:0f:24:48:e1:31:c7:de:28:4e:7b:de:a9:bf:ca:
f2:18:46:2b:00:7f:89:32:14:65:15:fa:85:3c:5a:90:88:e7:
f8:f8:6e:42:d6:b5:b5:48:a6:86:e4:34:d4:a7:df:a5:37:ae:
f3:13:ba:4e:7b:ac:81:c5:cb:3b:63:53:26:83:dd:bb:46:79:
4f:8a:9e:ea:92:51:63:57:4a:09:2c:46:f7:c0:fa:e9:ac:fc:
9c:49:3b:d0:03:c7:f8:67:d9:12:06:69:73:23:36:0f:9c:7b:
c8:e6:89:7a:47:22:b2:66:81:3a:43:88:2e:9a:1b:07:dc:7e:
ef:a0:19:d5:35:72:4b:67:34:7d:b9:1a:85:7f:73:11:ce:16:
e9:f2:eb:45:0a:25:9f:81:74:a9:a1:b2:d8:d0:e8:50:a7:16:
c3:71:35:60:15:92:5d:79:a5:30:04:75:e6:a4:be:48:b6:8c:
ad:c1:59:c5:12:6a:6f:2d:f3:ca:67:44:b8:a8:92:3f:51:0e:
59:0b:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:05 2026 by rpki-client