Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1435892408E11F18732F4E2CE1D38B0.roa
File: A1435892408E11F18732F4E2CE1D38B0.roa (raw, json)
Hash identifier: wGJZx8xerNoY3dnLF6/oa9YrIkYEVfSJdQc2Y1kdENk=
Subject key identifier: BA:A6:B9:6C:01:84:00:9E:D2:A5:D8:B9:A0:BD:34:9D:CA:42:22:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C76B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1435892408E11F18732F4E2CE1D38B0.roa
Signing time: Sat 25 Apr 2026 10:07:56 +0000
ROA not before: Sat 25 Apr 2026 10:07:52 +0000
ROA not after: Mon 01 Jun 2026 10:07:52 +0000
asID: 44559
IP address blocks: 154.203.225.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116587 (0x1c76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 10:07:52 2026 GMT
Not After : Jun 1 10:07:52 2026 GMT
Subject: CN=69ec927c-9de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:5d:5a:23:57:05:e8:18:21:1f:e1:82:13:
e3:0a:7d:8c:9d:16:36:a7:bf:73:48:48:b7:03:40:
8e:44:84:31:f8:b8:64:86:8a:3b:aa:e2:bf:f0:d4:
66:c2:8b:48:ba:30:ab:8e:cf:10:ef:25:cd:07:d9:
69:d9:43:1a:61:8c:03:eb:ad:a1:1e:28:b2:f3:66:
a0:fd:dc:ab:eb:b4:0b:e9:95:d3:e0:53:63:77:3f:
f2:5a:c0:e8:57:c2:70:10:39:16:70:04:d2:4c:97:
42:0a:e7:0a:02:a0:a9:80:17:73:f5:8e:2a:dc:38:
27:59:8d:c3:45:67:d9:4f:1e:1d:2e:da:67:18:0d:
62:d6:dc:18:8a:8a:31:2c:9a:d8:bc:00:b0:62:35:
b5:88:a0:aa:5e:e2:b1:c8:ef:f4:60:08:2f:c1:f6:
c6:b3:ee:59:c1:fe:08:1d:a3:ae:f4:38:c0:0e:7a:
ac:d2:30:82:74:65:25:3c:62:cd:01:f1:5b:aa:6f:
c5:4a:69:42:16:50:d7:c5:d2:a4:74:4d:85:31:f2:
63:53:28:e2:9f:9d:9f:78:ee:74:eb:b7:bb:68:c6:
f1:e5:32:d9:d6:1c:53:21:5d:ef:df:68:7b:1c:92:
4e:6e:f9:f9:dc:3f:e6:88:5c:ab:2a:58:98:93:e0:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:B9:6C:01:84:00:9E:D2:A5:D8:B9:A0:BD:34:9D:CA:42:22:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1435892408E11F18732F4E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.225.0/24
154.203.229.0/24
154.203.250.0/24
154.205.28.0/23
154.205.224.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
00:b0:5a:28:01:12:82:f1:dd:26:da:38:f7:49:56:ea:f4:cc:
6a:25:8b:92:c6:f4:2f:25:e4:73:5d:25:79:a0:a8:23:88:32:
3f:b5:24:44:cd:61:a5:39:72:c9:d6:84:11:9e:b4:3c:09:92:
b1:66:d8:35:bd:46:02:99:dc:e4:1c:77:47:c0:6e:9d:62:70:
19:9a:6c:1b:ca:01:23:73:19:45:b1:36:35:eb:b7:d1:ee:51:
93:c5:fa:77:8f:42:dd:70:8e:c8:3b:78:8d:69:74:61:4b:30:
96:08:f6:cf:20:8c:10:0b:90:4e:5a:9a:da:68:7b:f0:d1:3d:
22:75:40:ca:d2:f8:65:09:73:ca:d5:df:e8:5c:82:e5:9f:47:
c6:e6:47:cd:8d:c7:31:f4:44:5a:32:f7:3e:c2:c0:26:39:82:
af:c6:f9:ec:3d:d5:38:29:33:4b:2f:09:3e:9b:45:53:76:c4:
ca:8f:ae:90:02:13:c3:9a:32:30:e3:29:5f:93:f5:f1:b5:b8:
56:13:0c:96:36:a5:3a:38:b5:bd:5b:be:11:ec:c0:9b:d8:90:
77:b8:89:48:97:2f:ea:4d:68:a6:fc:51:52:95:68:32:14:1b:
19:5d:7d:dc:92:cd:dc:65:99:c0:de:cd:f2:77:91:ff:66:ac:
0a:8f:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:17 2026 by rpki-client