Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C22D1426546111F18ABBFCF2CE1D38B0.roa
File: C22D1426546111F18ABBFCF2CE1D38B0.roa (raw, json)
Hash identifier: 2ts7iBCW/QVszCE0ivC6tfTQvc5nOoRHZjmMgPsujA0=
Subject key identifier: F0:12:50:DF:FD:D7:B9:E9:7A:AA:3F:FE:F0:98:A6:CF:A9:0D:4F:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C22D1426546111F18ABBFCF2CE1D38B0.roa
Signing time: Wed 20 May 2026 15:37:07 +0000
ROA not before: Wed 20 May 2026 15:37:03 +0000
ROA not after: Fri 26 Jun 2026 15:37:03 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.143.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118004 (0x1ccf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 15:37:03 2026 GMT
Not After : Jun 26 15:37:03 2026 GMT
Subject: CN=6a0dd523-422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:7f:ec:ae:32:04:d1:03:42:56:08:4d:2e:
30:f1:bd:91:17:27:fb:09:bb:bd:ef:5b:9c:a5:f1:
61:74:78:65:ec:5e:81:8f:59:50:bd:12:2f:73:4f:
52:d4:d9:14:58:70:f8:57:63:b7:49:72:72:3d:74:
4a:c7:80:e9:bd:4c:c1:25:bd:14:71:5c:6a:3b:80:
21:f5:85:c5:76:90:cb:0f:09:8d:af:e4:ca:7d:08:
02:ed:9c:45:ca:5d:87:4e:22:b9:d8:ca:cf:09:e6:
37:cb:82:f7:9c:4e:f6:cb:43:1a:d7:5f:8a:ac:e3:
e7:ac:9e:dd:7f:6c:f0:af:2a:34:cf:07:a2:7b:80:
72:6d:39:da:14:49:6b:3c:3f:92:26:a4:b4:0b:47:
3c:62:9b:3f:5c:b1:01:2c:5e:13:92:84:b7:d4:00:
5f:f3:0a:6c:2d:ce:eb:f4:6d:de:87:3c:ce:90:a2:
0c:86:9e:40:11:8a:63:14:d7:e2:a1:67:ff:e0:5e:
d2:39:22:e2:c3:f0:6c:dc:cd:f0:ec:0e:2f:d1:26:
e0:f9:4b:1a:f1:77:c2:e1:c3:ac:5c:40:3b:5b:3d:
e0:1d:21:04:c3:e5:0b:c9:c6:78:af:94:91:34:c1:
72:4f:e2:28:31:f1:56:55:50:39:48:a2:e8:3d:57:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:50:DF:FD:D7:B9:E9:7A:AA:3F:FE:F0:98:A6:CF:A9:0D:4F:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C22D1426546111F18ABBFCF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0-154.203.145.255
154.203.163.0-154.203.164.255
154.203.166.0/24
154.205.140.0/24
154.205.157.0-154.205.159.255
Signature Algorithm: sha256WithRSAEncryption
cd:e0:12:c3:0a:7c:2f:e8:ad:0c:88:74:51:a5:7f:ba:f5:99:
2f:93:c4:85:19:ac:36:ee:1b:d8:ce:51:fc:1b:a8:c7:f0:f8:
6b:30:65:e2:4a:28:56:f1:82:5f:62:bf:6c:f5:3f:c2:6a:14:
d2:46:22:da:f3:38:8a:ff:f6:81:5e:7a:a1:6e:05:29:dd:5e:
46:c5:df:a3:68:80:04:57:a0:0c:a9:e9:6b:c7:a2:df:05:76:
3b:22:4a:72:cf:b1:4b:ee:c4:59:34:57:3b:c5:92:b4:e0:72:
01:dc:88:d3:ef:d5:d2:7a:63:9a:27:10:1e:80:c8:e7:ed:7c:
32:28:a2:6f:35:3b:ab:6e:c0:ab:9a:04:ad:9f:5d:6f:51:e0:
76:6e:41:03:df:5b:e9:c8:30:fd:46:09:e0:61:c5:a9:88:b5:
eb:11:3f:03:98:8a:05:12:77:52:8c:fc:56:d7:0d:43:59:8f:
4e:df:95:43:e2:d1:4a:8d:0b:70:42:70:49:f2:7e:51:ae:ee:
b4:9d:03:b7:e3:69:db:6c:d9:ae:92:77:b0:2b:9c:41:f2:eb:
53:72:4b:9c:e0:6f:06:e3:c9:8e:f6:56:4c:de:39:05:7e:82:
f6:40:5a:5e:2d:35:de:bc:e0:ca:69:f6:9d:16:38:09:4d:ff:
9c:e8:7a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:43 2026 by rpki-client