Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8391A085B3F11F1B8A36DCFCE1D38B0.roa
File: A8391A085B3F11F1B8A36DCFCE1D38B0.roa (raw, json)
Hash identifier: Vo+I2FPtY8qAhfLssKm1KPaOozrgk3WZIicA0jbEptw=
Subject key identifier: DD:D7:BA:F3:A8:8C:5E:68:CE:9E:B2:50:F0:B1:FA:E4:D6:C6:A7:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D05E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8391A085B3F11F1B8A36DCFCE1D38B0.roa
Signing time: Fri 29 May 2026 09:21:00 +0000
ROA not before: Fri 29 May 2026 09:20:35 +0000
ROA not after: Thu 02 Jul 2026 09:20:35 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118878 (0x1d05e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 09:20:35 2026 GMT
Not After : Jul 2 09:20:35 2026 GMT
Subject: CN=6a195a67-a443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:9e:89:b1:4d:df:4e:7f:fd:5e:cf:67:10:
10:d3:93:e5:61:b9:62:d5:49:89:85:fe:c9:b2:66:
e6:fb:7d:f1:5d:8a:4a:d0:53:51:70:e7:37:27:e6:
dd:c6:31:55:bc:aa:5f:69:8b:9d:84:f1:48:78:20:
3f:88:56:c5:f0:e4:f5:12:57:7c:ee:12:a6:7e:2e:
04:66:c4:5e:bb:42:f0:30:9d:c8:03:d6:a7:a7:b8:
d2:6d:55:75:1c:96:e5:cc:96:bd:13:5d:52:d8:8d:
cf:12:67:b9:1a:fd:90:db:68:09:fd:88:43:eb:51:
70:03:d3:05:18:88:75:d6:1a:8f:86:ca:6e:37:f4:
29:ba:ea:45:bb:41:d4:37:53:6b:02:9d:f2:ed:1c:
b3:f8:28:c6:0f:ee:9e:46:7e:b1:ad:50:ab:91:a5:
47:99:82:dc:6d:72:78:6f:8a:2f:56:98:c4:dd:4e:
82:3f:94:c2:5b:5c:ea:9b:82:5d:2f:ac:5a:e4:36:
5c:fd:92:18:84:c0:44:94:e6:85:7e:5d:59:fd:1c:
2d:9b:11:21:f0:db:21:dd:3d:39:b7:44:da:18:68:
04:9f:b7:d3:4e:8a:4b:3d:6c:dc:15:ca:7d:ad:b5:
0e:81:cc:0a:90:57:1c:9c:f6:7a:9f:50:9e:dc:b2:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:BA:F3:A8:8C:5E:68:CE:9E:B2:50:F0:B1:FA:E4:D6:C6:A7:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8391A085B3F11F1B8A36DCFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
154.203.230.0/23
154.205.234.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
b2:70:84:5a:e0:80:b6:69:10:1a:da:7b:ac:09:34:ae:0a:f0:
81:43:24:89:9a:df:25:f2:af:0a:da:b0:3d:43:38:80:eb:e6:
6e:e8:f7:74:c1:d9:bf:1f:1e:da:2f:e2:c9:51:5e:af:c3:82:
f8:eb:a0:f5:76:43:47:3d:06:17:cf:f9:99:55:e8:2d:f7:94:
6d:74:5b:df:55:b5:8b:c3:ab:a1:1e:44:3f:f8:76:48:dd:da:
69:5d:60:cd:29:81:61:55:64:fd:c4:c9:4b:e5:cf:40:f1:1f:
92:18:a0:d8:f6:a0:56:90:7c:09:bd:87:2d:59:97:ce:c7:aa:
4a:6c:df:be:77:ec:be:49:71:f8:20:6d:ca:ec:c6:9e:91:c5:
8f:55:75:fa:e9:96:c6:82:60:24:fa:16:d6:8e:f8:fd:82:a3:
64:7e:23:24:d9:bf:b8:8e:9a:c7:48:00:23:ab:04:ee:58:4f:
9a:6f:93:85:dc:c3:7c:5f:35:d4:86:f0:bf:1a:c4:3b:5b:6a:
c0:03:ca:d5:f2:65:9d:a2:bc:3a:b4:04:68:17:a5:19:b1:34:
a2:3d:3c:b8:e1:fa:d4:44:28:a8:13:49:d2:1d:6b:f7:0c:31:
f4:7a:cd:1c:13:d0:99:18:8f:27:1b:79:b0:a0:f5:a0:f5:ba:
26:f3:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:32:55 2026 by rpki-client