Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8540C186505E11F193F51A11CF1D38B0.roa
File: 8540C186505E11F193F51A11CF1D38B0.roa (raw, json)
Hash identifier: ktiW0kCGZ9NT+XlzCyPfIOb/bQHcADIv5Bf51rOozzE=
Subject key identifier: 76:89:59:19:E1:2D:F3:33:5B:D6:1C:02:29:F0:D0:DF:84:71:BC:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8540C186505E11F193F51A11CF1D38B0.roa
Signing time: Fri 15 May 2026 13:03:52 +0000
ROA not before: Fri 15 May 2026 13:03:47 +0000
ROA not after: Tue 16 Jun 2026 13:03:47 +0000
asID: 17497
IP address blocks: 154.193.8.0/21 maxlen: 24
154.193.8.0/24 maxlen: 24
154.193.9.0/24 maxlen: 24
154.193.10.0/24 maxlen: 24
154.193.11.0/24 maxlen: 24
154.193.12.0/24 maxlen: 24
154.193.13.0/24 maxlen: 24
154.193.14.0/24 maxlen: 24
154.193.15.0/24 maxlen: 24
154.196.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117680 (0x1cbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 13:03:47 2026 GMT
Not After : Jun 16 13:03:47 2026 GMT
Subject: CN=6a0719b8-a24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c8:14:cb:9a:3c:f4:4f:e5:5d:d6:6b:b0:50:
2a:aa:2b:34:a6:ec:43:34:f5:a2:e6:25:90:76:b7:
76:10:78:1f:51:98:5e:a1:2b:cd:39:7d:1a:dd:43:
bc:4d:69:48:24:fe:c5:15:2b:11:d2:34:8f:77:ac:
0a:04:39:c6:e0:64:77:3b:d5:7f:12:01:a9:72:e6:
e0:25:fc:45:96:13:5b:54:96:65:77:c4:13:56:34:
f7:d7:60:3f:03:df:cf:d7:a7:d8:b1:77:5a:f8:49:
f7:d6:c0:7b:e0:d4:5f:e7:b7:e9:eb:53:8b:ad:a5:
f5:7a:25:24:21:1d:47:1c:41:7f:16:00:56:90:9d:
2e:ba:6e:ec:9d:95:cd:fb:8b:d2:d2:b1:f6:6a:08:
ff:9c:5a:1b:3e:1d:50:44:35:fb:37:ec:b4:82:46:
ed:20:42:56:74:cc:52:99:20:f7:fe:d9:a7:a4:a7:
46:97:4a:95:d4:19:0c:29:a6:3a:9c:91:c9:9e:71:
7b:14:de:cc:fa:34:22:73:a5:bf:cf:1f:b8:87:c8:
6e:17:35:62:8b:3c:c4:c4:ad:25:4c:2c:63:ae:73:
3d:89:cb:b4:32:f4:66:2f:65:6f:f9:95:fb:c3:83:
e2:56:86:80:b4:eb:7d:59:0e:4a:8b:e6:e5:b8:e9:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:59:19:E1:2D:F3:33:5B:D6:1C:02:29:F0:D0:DF:84:71:BC:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8540C186505E11F193F51A11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.8.0/21
154.196.135.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1c:c2:9a:05:be:c4:8c:87:f8:eb:1b:db:e7:3f:e5:d4:c4:
43:a4:8a:24:c8:b8:9b:33:28:92:27:07:89:8e:1c:5f:02:fa:
f4:32:5b:e2:41:e8:f5:79:bc:f1:fc:59:06:0e:4f:3c:4f:cd:
4e:f4:99:b8:84:1a:ae:04:98:09:b3:b7:a3:de:dc:8e:5a:f8:
ed:cb:02:f6:ff:93:94:7d:04:d7:54:5f:62:99:59:f0:7d:0c:
39:28:6e:28:26:66:8e:9b:ab:2f:b1:60:a6:a9:fb:a0:86:99:
5f:33:d8:76:fb:07:02:a9:cf:ed:d0:eb:6f:5d:b1:06:7c:00:
7f:d1:03:a1:06:69:b4:1e:68:db:96:31:d8:db:fe:68:be:54:
9e:d0:af:1b:3f:30:0c:5c:51:09:d8:39:42:58:b0:5f:83:85:
a3:a8:20:f0:47:87:e5:19:8a:4c:db:3e:df:19:8c:1f:3e:f0:
cd:d1:00:16:77:82:64:40:50:64:ff:31:73:91:72:1f:e6:cb:
86:98:48:dc:c2:4b:27:de:b8:26:aa:74:31:90:6e:5f:6e:2c:
8a:fb:57:82:63:99:2e:93:f1:c2:05:32:b9:4b:54:8c:2e:8d:
ef:1b:34:0d:ee:ab:70:7d:34:51:36:b1:2c:a7:87:9b:86:32:
7b:50:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:56:37 2026 by rpki-client