Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A81E0F983C9911F196205415CF1D38B0.roa
File: A81E0F983C9911F196205415CF1D38B0.roa (raw, json)
Hash identifier: Tpcag6EFPHWw46kU/te/TEWGhGnd88aAo0eUiXV7mNM=
Subject key identifier: 0A:1D:30:AA:1D:66:8E:2C:AE:4E:D5:68:D4:97:7F:46:B0:CB:28:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C62A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A81E0F983C9911F196205415CF1D38B0.roa
Signing time: Mon 20 Apr 2026 09:16:48 +0000
ROA not before: Mon 20 Apr 2026 09:16:43 +0000
ROA not after: Wed 27 May 2026 09:16:43 +0000
asID: 63139
IP address blocks: 154.203.182.0/24 maxlen: 24
154.203.183.0/24 maxlen: 24
154.203.184.0/24 maxlen: 24
154.203.185.0/24 maxlen: 24
154.203.186.0/24 maxlen: 24
154.203.187.0/24 maxlen: 24
154.203.188.0/24 maxlen: 24
154.203.189.0/24 maxlen: 24
154.203.190.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116266 (0x1c62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 09:16:43 2026 GMT
Not After : May 27 09:16:43 2026 GMT
Subject: CN=69e5eeff-8788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:1d:96:e8:dd:58:88:f7:88:1c:6f:5b:19:
1a:56:0a:f2:ba:1c:e4:6f:12:b0:0b:70:1d:ed:5d:
57:2b:c8:b2:1d:63:9e:b1:df:97:83:95:6c:6c:8c:
fa:c2:d9:4b:10:83:18:96:36:31:ec:05:dd:90:8b:
e3:54:2a:ac:32:0a:39:83:76:25:b9:b1:2d:9a:02:
4b:9f:ca:09:75:85:9a:19:8b:d7:4a:a2:4d:ee:b8:
04:5d:a9:2d:4a:62:44:b2:19:46:a7:d7:67:8e:4f:
c8:3d:9c:49:54:10:fc:37:17:f6:7e:51:e0:2f:0d:
c6:66:d4:37:54:08:a4:b6:13:67:8b:c8:38:54:99:
10:07:df:20:1d:6e:00:c3:29:48:72:6e:c5:4e:90:
26:bc:94:fc:74:46:f7:15:c5:00:6e:9e:4d:1c:05:
6e:1a:65:26:e1:02:7c:04:50:de:b8:bf:d2:54:10:
58:e0:ab:45:73:de:09:7a:30:32:26:5c:74:ce:4a:
4a:4b:aa:0c:c1:1c:bb:fb:a3:48:2f:0a:85:21:8d:
4e:4f:fc:00:d4:6c:74:07:84:a3:ad:f7:31:cd:77:
a9:1a:71:33:2a:81:ae:b8:26:13:ad:ad:be:8d:c4:
3e:8c:ea:40:66:2d:0e:77:ec:b3:c4:30:62:5d:7a:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:30:AA:1D:66:8E:2C:AE:4E:D5:68:D4:97:7F:46:B0:CB:28:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A81E0F983C9911F196205415CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.182.0-154.203.191.255
Signature Algorithm: sha256WithRSAEncryption
2a:cd:fc:a3:83:7f:a4:dc:fb:07:cf:53:7e:34:12:34:a7:c5:
1b:ab:00:58:07:84:b7:72:d2:12:80:7e:8e:d3:95:52:5a:b4:
01:12:a2:39:a9:20:ef:01:7b:61:b8:85:15:ca:ff:66:d5:fd:
72:46:55:65:1e:08:fd:58:15:eb:9e:41:fb:85:5f:68:64:fd:
db:8c:07:32:b9:19:9c:91:4b:bd:ca:bf:55:cc:24:15:ca:52:
75:39:c6:b2:1b:60:a9:2e:33:f3:46:d8:e0:e6:c3:ee:32:3d:
c7:7f:2e:2a:d3:c5:47:3f:23:74:ac:8d:4e:58:ef:b0:77:df:
c9:0b:06:63:6c:0b:5c:6c:fe:73:17:a1:9c:5c:60:08:a1:0f:
f5:41:7e:a1:2d:0a:18:f0:fd:d3:50:19:db:b8:45:cb:80:42:
93:35:7c:85:30:a8:2b:dd:01:30:5d:6f:8a:ea:ee:74:21:84:
76:96:be:9a:58:0e:8f:f7:48:37:9f:70:8c:cc:ae:e5:bf:10:
1c:73:79:32:e2:0c:fb:35:4b:63:7b:27:14:a3:ec:bc:ae:74:
04:0b:3d:be:1c:b7:29:1a:a8:b1:b7:e0:b4:31:93:4a:f0:d8:
94:2b:0e:33:65:26:db:91:d8:6b:03:f1:85:83:5b:e5:2f:d9:
02:8f:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:58 2026 by rpki-client