Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/805631F2575111F19F3E72EDCE1D38B0.roa
File: 805631F2575111F19F3E72EDCE1D38B0.roa (raw, json)
Hash identifier: MzgQNDZLj5DPo08zGW7Zp8NbjC8uuN5rpwaCulsHBHM=
Subject key identifier: 90:5D:34:86:53:26:CE:3F:08:37:4D:6E:16:36:D0:92:5B:E2:FC:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/805631F2575111F19F3E72EDCE1D38B0.roa
Signing time: Sun 24 May 2026 09:18:19 +0000
ROA not before: Sun 24 May 2026 09:18:13 +0000
ROA not after: Tue 30 Jun 2026 09:18:13 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Jun 2026 16:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118463 (0x1cebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 09:18:13 2026 GMT
Not After : Jun 30 09:18:13 2026 GMT
Subject: CN=6a12c25a-f8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:3f:c7:41:f0:1d:39:1e:70:99:0b:9d:3a:
ca:b4:be:60:6d:bc:60:f9:7e:48:de:5c:74:bf:3a:
e5:a2:b8:83:e8:3e:61:67:d7:79:f1:03:b6:40:c5:
f0:49:ca:34:77:7b:97:f6:52:70:d4:9b:35:b8:4a:
1b:c9:bc:c2:1d:f9:20:f1:9e:a7:44:c3:79:37:cd:
8e:14:b9:97:84:de:b8:6e:0d:cd:30:db:64:97:17:
f0:c7:a4:38:e7:0f:78:9f:62:70:48:73:8d:6b:b4:
e9:b7:e7:c3:d0:95:46:b0:19:0c:2a:f2:36:3e:91:
e9:5b:8a:22:3e:d1:04:cc:66:e6:9d:72:fd:07:48:
e7:04:59:0a:a2:37:ad:c4:c1:b9:93:85:96:07:4c:
98:40:5e:9b:af:3e:6d:87:bb:66:9d:9b:d6:7e:fb:
db:c8:78:d9:3d:6c:1d:f2:75:8c:bd:b7:97:dd:ef:
49:7a:b3:f4:6c:44:9c:48:ae:aa:52:cf:72:aa:f8:
2a:7b:61:15:ac:05:58:23:d5:ca:61:c9:e5:e8:9c:
c9:1e:77:85:72:e0:50:25:84:7d:ee:15:c3:eb:3b:
df:d5:f0:89:6f:2a:5a:0e:7b:98:81:4b:cc:b9:df:
77:93:02:b8:e9:63:52:1a:3c:c3:d2:39:30:9e:fe:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:34:86:53:26:CE:3F:08:37:4D:6E:16:36:D0:92:5B:E2:FC:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/805631F2575111F19F3E72EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.129.0/24
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.157.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e3:15:cc:42:8b:fc:ff:9a:08:48:58:8a:e6:ff:b8:80:7e:
96:23:43:97:85:5a:57:26:30:2b:58:3a:d8:98:b6:80:96:c6:
88:10:e1:91:57:d3:92:e0:5f:c2:b5:aa:22:ec:20:52:35:bd:
e9:de:8f:65:c1:44:6d:f1:73:bf:f5:dc:40:38:b0:54:7b:5c:
63:39:54:bb:51:ca:d3:d6:41:2e:f9:2f:00:ba:2e:fb:34:fb:
9b:46:02:93:1c:66:6d:62:8a:dc:14:13:b7:1e:71:ff:6a:63:
de:56:df:72:4c:10:d7:8a:4b:b1:a3:35:97:74:a0:43:40:4b:
a8:71:f4:68:47:13:2d:e6:8c:ed:65:24:02:e7:5f:66:21:07:
36:1d:f2:5c:d4:d0:fa:0e:06:24:be:02:a2:15:40:35:98:c6:
24:ce:40:57:83:cf:1e:33:2c:e7:1d:68:32:f9:1f:76:b9:55:
10:17:f3:75:b1:fd:ef:33:7b:38:a0:bc:ed:94:c9:a3:0e:20:
ad:00:44:14:30:8f:f6:79:d1:ae:58:02:65:83:0b:ad:ca:65:
60:f5:37:24:c7:42:32:ac:00:23:7f:37:21:b3:db:d8:1c:d6:
8e:c3:a8:e2:12:aa:23:8e:99:d5:6b:0a:5e:14:d3:72:33:b0:
4d:ec:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:33 2026 by rpki-client