Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04EF8D455FD11F18AD052CCCE1D38B0.roa
File: C04EF8D455FD11F18AD052CCCE1D38B0.roa (raw, json)
Hash identifier: VbhE5+Y4DM264qj1DEgYmrIENny10hiwXXnPGeGKWYc=
Subject key identifier: 05:1C:50:B9:0C:06:16:82:A0:DE:EF:8A:DC:AE:CD:B3:D3:99:22:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04EF8D455FD11F18AD052CCCE1D38B0.roa
Signing time: Fri 22 May 2026 16:46:17 +0000
ROA not before: Fri 22 May 2026 16:46:12 +0000
ROA not after: Fri 26 Jun 2026 16:46:12 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
154.203.130.0/23 maxlen: 24
154.203.132.0/24 maxlen: 24
154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.136.0/24 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118326 (0x1ce36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 16:46:12 2026 GMT
Not After : Jun 26 16:46:12 2026 GMT
Subject: CN=6a108859-e93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:cd:f2:14:f3:07:55:4e:6a:20:f9:94:98:
71:b2:cb:33:a2:74:66:0a:c1:ac:4f:e5:1d:c8:95:
d3:c0:fc:67:b5:c6:3c:18:cb:84:ff:4a:3e:ad:c5:
7a:df:89:ea:88:3b:b0:75:36:d4:ec:21:ea:df:86:
a1:17:84:81:bd:f4:f9:26:e2:12:c4:8f:f3:43:f4:
fb:e7:b1:3f:ff:a5:18:88:b0:47:11:ca:96:a1:07:
62:e0:99:00:6b:b7:eb:b7:cd:67:16:23:f1:38:b2:
55:21:52:f7:f3:f3:95:43:71:3f:bc:02:74:0b:43:
57:e2:21:28:68:64:cf:35:41:d4:3c:92:f9:68:7b:
bf:a2:a9:77:9b:e6:36:6c:37:73:11:31:5f:3e:a8:
59:60:de:0b:d5:34:17:6d:c0:95:a0:ba:66:be:04:
b4:da:3b:9e:13:8d:c7:15:98:76:49:fc:ce:68:f8:
d5:52:a1:7d:7a:02:04:89:ca:2a:eb:35:4a:eb:91:
ce:b2:d1:ea:a6:c6:15:ab:ea:67:71:56:30:72:d8:
fd:7c:d5:9e:47:e8:23:a1:a4:11:8b:bf:90:27:5b:
be:c2:35:f3:ee:1f:f4:b6:99:aa:a8:7c:04:71:b2:
39:58:8d:a9:28:6e:10:92:4d:2d:9c:fd:6f:54:af:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:50:B9:0C:06:16:82:A0:DE:EF:8A:DC:AE:CD:B3:D3:99:22:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04EF8D455FD11F18AD052CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0-154.203.134.255
154.203.136.0/24
154.206.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:ba:2f:01:03:1d:42:b2:a0:94:e3:30:58:26:29:d1:0c:94:
37:9b:1a:47:aa:1d:30:7c:3d:b9:ed:9b:42:95:e5:6c:0b:6e:
72:8e:60:a4:ed:04:ce:36:c9:df:de:3f:e0:fa:77:4e:af:bc:
91:60:ee:ce:d4:cf:b0:5f:df:26:7a:98:12:cb:97:19:55:0b:
84:50:60:61:ba:e6:73:2a:ec:60:b6:ea:8a:cb:e5:ef:99:60:
43:bb:4a:79:44:d6:1d:a0:e2:ed:d7:8b:0c:a0:fa:59:99:87:
cb:27:d7:59:9b:c7:f2:71:ab:6e:ff:9c:92:ba:a8:55:bf:0c:
8b:e6:f0:ce:57:dc:2d:7d:20:47:2f:87:d9:06:55:93:29:b2:
6e:7a:77:74:56:db:c1:ec:9c:22:29:a7:f0:0c:9f:c7:62:d2:
8e:70:09:fc:4e:3f:a8:2b:fb:22:b5:14:0d:10:da:e7:f4:39:
06:cb:24:75:7f:0e:ab:d7:39:5e:6a:99:a4:85:37:77:cb:ae:
a3:3b:5f:65:74:a2:9e:60:07:e6:af:8c:38:07:31:0f:b9:06:
85:6b:a0:bb:12:46:22:f0:19:bd:91:f0:6f:85:6f:4d:e5:5a:
0f:f5:79:76:b4:f5:3a:0a:15:5b:33:0e:8d:45:9e:36:c1:28:
8e:2f:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:43 2026 by rpki-client