Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F6C524E56C911F1AFA0A0A8CE1D38B0.roa
File: 8F6C524E56C911F1AFA0A0A8CE1D38B0.roa (raw, json)
Hash identifier: NjWbgMn7HcqxOQl1OIkP/Iadk7l6DINMMMps9PGUceg=
Subject key identifier: 63:C2:42:69:7E:45:71:22:55:48:7A:F9:AA:48:48:4B:37:D3:EF:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F6C524E56C911F1AFA0A0A8CE1D38B0.roa
Signing time: Sat 23 May 2026 17:05:12 +0000
ROA not before: Sat 23 May 2026 17:05:07 +0000
ROA not after: Fri 26 Jun 2026 17:05:07 +0000
asID: 63139
IP address blocks: 154.203.172.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.179.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
154.203.182.0/24 maxlen: 24
154.203.183.0/24 maxlen: 24
154.203.184.0/24 maxlen: 24
154.203.185.0/24 maxlen: 24
154.203.186.0/24 maxlen: 24
154.203.187.0/24 maxlen: 24
154.203.188.0/24 maxlen: 24
154.203.189.0/24 maxlen: 24
154.203.190.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118408 (0x1ce88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:05:07 2026 GMT
Not After : Jun 26 17:05:07 2026 GMT
Subject: CN=6a11de48-5698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:91:d3:d9:54:dd:2e:10:5a:20:b5:df:ab:
2f:25:eb:02:7f:b0:c3:08:8e:16:39:ce:05:f8:1e:
ec:47:d3:f6:7c:d8:27:5b:d5:6f:23:50:3a:25:db:
a0:87:00:4c:b8:34:cd:58:86:a2:e6:f9:bd:a3:d4:
0d:84:44:ce:d5:16:01:b5:65:ef:2a:95:ec:ed:c3:
aa:69:ee:f8:40:cc:bf:6b:9b:b4:d6:a9:2b:62:3b:
12:f5:e3:e6:13:d6:f6:d2:a5:5b:94:d8:c5:9a:5c:
5c:20:2c:68:f8:21:fd:02:ad:42:e3:e3:00:22:a4:
08:77:a6:e4:ea:c9:2d:24:2b:a0:ef:a8:15:0c:ce:
d5:05:c5:d0:0f:36:34:ca:e0:cd:00:0c:44:dd:71:
81:c4:a8:23:b9:a9:38:07:84:1f:a0:97:63:01:4c:
f6:70:6a:f0:6f:60:4b:da:78:77:fa:c8:7d:91:83:
5a:9d:2a:30:4c:b4:95:fc:a3:c4:f9:99:2a:a0:99:
33:cc:48:7d:4a:14:71:bf:83:cf:1a:0f:73:1d:f9:
75:7c:4c:c3:70:1b:68:9e:dc:80:d0:a8:46:c4:cd:
0e:34:d1:e6:ce:ae:c6:1e:17:74:75:50:ea:c6:82:
cf:fa:e3:31:7b:96:60:bc:b5:20:03:0d:31:b4:da:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C2:42:69:7E:45:71:22:55:48:7A:F9:AA:48:48:4B:37:D3:EF:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F6C524E56C911F1AFA0A0A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.172.0-154.203.191.255
Signature Algorithm: sha256WithRSAEncryption
65:29:8c:d7:ed:aa:2c:58:64:09:19:10:1d:88:dc:b6:99:85:
b7:5f:53:b0:11:de:9f:34:f6:fb:e7:6b:59:f8:fa:37:45:b4:
77:96:a9:49:65:4c:23:0b:86:d1:66:45:c4:fe:2c:59:de:b7:
73:c3:98:95:03:5c:70:2e:96:20:53:4f:2f:da:3c:4c:92:89:
dc:a1:5a:78:f1:7b:da:a5:ed:ad:e1:b0:56:fa:10:e0:19:e2:
9c:27:71:a6:3e:fb:08:14:8b:ab:6a:a8:b2:1f:da:9d:d8:f2:
46:3d:ca:23:15:00:af:f4:49:d9:17:b9:c5:b2:dc:29:1a:3e:
cc:98:8d:c1:07:7a:d6:23:c1:85:50:d5:e6:b6:87:35:4e:cd:
2f:64:cb:f8:70:d6:11:80:e3:a6:72:f7:9e:bf:ab:0e:c0:03:
6c:71:77:4f:90:13:93:09:5a:e6:cf:28:19:b0:cf:ff:08:e2:
3c:aa:30:83:46:0c:5b:24:b2:aa:cf:94:27:49:af:5b:78:7b:
fa:c8:53:09:c8:c8:1d:df:66:af:e5:f3:29:4c:87:1f:81:70:
58:4d:fd:6a:84:b9:a6:21:b8:00:a6:49:f9:d3:9e:da:bb:7e:
01:b2:ce:20:02:d5:0d:59:4c:20:69:c6:44:9e:2a:f2:37:59:
17:e0:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:54 2026 by rpki-client