Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5247F20706F11F1982889DDCE1D38B0.roa
File: A5247F20706F11F1982889DDCE1D38B0.roa (raw, json)
Hash identifier: apvbFC86W/BMvCGGNyP77GZYheMkf0rWtW/5R30o92g=
Subject key identifier: 3C:9F:A7:48:F6:EB:66:0B:4A:9D:2E:9E:02:FA:63:AC:D5:D1:A5:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D514
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5247F20706F11F1982889DDCE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:27:04 +0000
ROA not before: Thu 25 Jun 2026 08:26:59 +0000
ROA not after: Sat 01 Aug 2026 08:26:59 +0000
asID: 62240
IP address blocks: 154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120084 (0x1d514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:26:59 2026 GMT
Not After : Aug 1 08:26:59 2026 GMT
Subject: CN=6a3ce658-bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:15:b9:14:1d:ad:3e:9d:97:09:04:77:5b:
df:9c:63:2d:57:84:c4:1d:f5:b8:89:96:46:87:85:
3a:0e:b0:52:3f:99:8f:7b:74:bd:63:f2:b7:e0:b4:
e0:ee:aa:c6:a4:92:6d:96:f5:0a:ea:c1:48:33:ca:
cd:bf:f3:29:f2:3b:28:3f:a3:9f:1e:b2:ab:82:4c:
ce:d2:c1:d2:3f:bf:81:1e:9a:78:dd:c4:9b:ff:76:
be:36:b2:70:06:95:01:96:7c:97:fc:14:39:b9:46:
39:20:0f:2c:6c:1f:1c:20:29:74:47:a1:57:99:69:
94:36:c2:df:13:3c:cb:95:16:8f:0a:97:d9:25:a7:
fd:2a:61:41:f3:15:53:f3:3c:61:8f:ce:75:e9:5f:
65:10:43:7a:5f:2b:1f:98:2a:0c:db:19:d9:26:7a:
0a:40:a6:77:ca:38:47:8f:bb:9d:a1:2d:92:e7:f4:
b4:95:2f:af:01:fe:5c:62:52:ca:49:34:22:b7:dc:
e9:ed:d4:f7:73:9c:3a:48:56:15:5f:d2:f9:ec:e7:
94:fc:50:d6:f9:be:ac:bb:2b:7b:e0:df:69:07:af:
ec:10:9a:39:29:8e:50:2f:83:23:d1:c1:c7:d7:ab:
e1:bd:ff:63:95:58:c4:f0:3c:41:03:05:fb:87:48:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:A7:48:F6:EB:66:0B:4A:9D:2E:9E:02:FA:63:AC:D5:D1:A5:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5247F20706F11F1982889DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.208.0-154.223.217.255
Signature Algorithm: sha256WithRSAEncryption
10:de:03:31:be:7f:e6:cd:62:5a:cd:51:d2:17:13:9b:a5:fa:
a6:a3:4b:af:8c:b1:00:cf:fd:11:b9:00:cf:d3:55:7c:4b:dc:
af:2a:bc:e8:09:ce:5b:d7:f2:40:90:05:fd:f3:75:31:1c:85:
af:d7:2d:e7:b3:f2:b6:79:76:c8:73:90:10:69:f2:4e:38:3e:
82:84:ba:d4:59:9b:9b:38:92:10:38:7f:d3:27:a8:5f:75:8b:
a8:19:39:e8:89:24:cb:08:e7:a8:32:30:de:e0:c8:9e:2e:fe:
18:71:2b:c6:d4:53:5f:37:14:7a:ea:3f:77:22:fd:ad:65:be:
b1:96:e6:d1:2d:68:1a:e8:86:a2:8a:f4:cf:2e:23:f6:ba:29:
65:fa:38:9f:f1:08:8e:20:f8:86:4d:05:49:95:52:c2:fa:1d:
f1:a4:9a:e7:2e:09:af:e2:65:ea:da:86:a2:32:5d:36:7b:38:
de:8c:b9:87:8f:c6:b7:72:e8:6c:34:70:d9:90:e5:09:19:f3:
17:8f:bc:8b:c2:d4:9e:e8:e3:aa:50:66:d2:c3:7e:e6:06:a2:
e3:8b:07:54:66:b1:0c:25:a4:fb:d2:49:48:fc:35:91:fb:4f:
7d:39:69:ca:0d:94:32:8d:92:b8:aa:d9:ce:1c:7a:ce:5b:28:
28:2d:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:31 2026 by rpki-client