Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/984FF700574911F19F5259BDCE1D38B0.roa
File: 984FF700574911F19F5259BDCE1D38B0.roa (raw, json)
Hash identifier: 15zyGVp3vaxIB6LewT12Y8EedhROXyIPQCizpAIAvWA=
Subject key identifier: 25:0F:9D:9F:CA:33:CE:6A:7B:D0:30:7B:5D:4F:28:C8:EB:FF:3A:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/984FF700574911F19F5259BDCE1D38B0.roa
Signing time: Sun 24 May 2026 08:21:43 +0000
ROA not before: Sun 24 May 2026 08:21:38 +0000
ROA not after: Tue 30 Jun 2026 08:21:38 +0000
asID: 9304
IP address blocks: 154.200.37.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118455 (0x1ceb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 08:21:38 2026 GMT
Not After : Jun 30 08:21:38 2026 GMT
Subject: CN=6a12b517-6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:a3:4b:a6:29:89:ef:74:ca:7c:27:58:bf:
88:59:60:f1:1f:aa:73:bc:af:b7:1d:a5:69:54:0f:
2c:e8:8f:60:a7:37:57:92:e2:85:6e:75:9d:d3:de:
ee:c7:3a:95:12:55:59:05:d4:b0:3e:5e:be:ab:f3:
44:4a:f9:0d:a8:3c:da:95:bf:74:d5:c8:0c:08:bc:
61:7d:1e:1b:cb:c6:15:c3:49:ae:d9:f3:08:e9:54:
a7:0d:3a:8a:34:27:5f:9e:3d:9f:56:7b:e5:fd:44:
6b:ec:79:a2:30:3a:8e:17:8a:02:71:ef:8e:8f:18:
dc:27:f4:e6:8f:53:3b:12:d5:96:ec:21:25:13:84:
f1:f1:e0:b7:eb:53:46:b1:c1:f6:4b:f6:2b:34:5d:
88:06:98:34:08:d8:47:cd:3c:ea:34:fc:90:82:b1:
2b:be:26:c0:bb:01:70:e1:d7:d3:67:ff:1b:da:22:
f3:33:60:2c:c6:ba:ff:e7:2b:fb:95:9b:6a:12:d2:
b5:ae:36:c7:ba:e3:94:b7:6d:32:27:e0:ee:8f:47:
a2:02:91:ce:74:2f:78:3b:5f:22:0b:82:df:db:b9:
86:19:79:f1:cf:8d:01:23:66:7e:b0:1b:9b:61:2e:
89:99:f9:a1:89:52:d7:1f:14:d4:f2:cf:18:6b:ec:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:9D:9F:CA:33:CE:6A:7B:D0:30:7B:5D:4F:28:C8:EB:FF:3A:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/984FF700574911F19F5259BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.37.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0-154.200.54.255
154.200.60.0/24
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2f:3d:4b:cd:ac:77:5c:a0:5c:d1:d4:c8:41:eb:d2:5a:00:
36:75:fe:06:a8:f1:3e:9c:4f:72:c6:56:c7:da:0d:33:f0:5f:
88:d5:a7:ae:4d:35:1d:dc:e4:ed:76:f2:e1:9d:39:0a:04:32:
90:a5:1f:da:10:0a:f0:ba:c1:da:18:1c:12:11:bc:58:5a:23:
bd:b8:a7:6c:e6:02:07:20:fe:08:33:e0:a1:4c:be:86:67:db:
02:76:f5:cb:dd:22:b4:bd:5c:09:ea:d1:a6:fa:7a:2e:ee:1d:
b6:97:35:50:ef:38:4f:c4:c3:d6:23:28:92:e6:b3:19:4e:4b:
c7:f7:ec:b7:f2:da:3f:2d:8e:84:a7:3f:4c:89:83:40:72:c6:
e1:a2:9f:d7:46:95:7f:3d:dd:ff:72:95:a6:a3:88:c3:21:4d:
df:3a:83:4d:cd:29:6e:19:24:f4:16:4e:b7:ce:49:a9:5d:88:
d2:d1:48:0a:12:84:1b:72:88:61:6e:3d:41:46:e2:a4:13:94:
6a:25:c9:54:aa:5d:55:df:8c:26:d6:a8:8a:ba:b5:83:11:31:
25:49:e9:d6:d7:0e:46:96:68:18:d3:aa:9e:24:35:06:f1:57:
c9:da:e1:94:f4:c5:48:32:36:4d:ea:0b:2a:ab:5d:cc:70:5e:
db:00:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:54 2026 by rpki-client