Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F1159055FA11F1A99BC6BBCE1D38B0.roa
File: C5F1159055FA11F1A99BC6BBCE1D38B0.roa (raw, json)
Hash identifier: coSoSRc3y4NBlNsT54THdMC7aMw7pVIJNqFd6yuBOkM=
Subject key identifier: 55:2E:88:E2:89:95:47:F9:37:78:E3:74:28:DC:BE:B9:EA:2F:03:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F1159055FA11F1A99BC6BBCE1D38B0.roa
Signing time: Fri 22 May 2026 16:24:58 +0000
ROA not before: Fri 22 May 2026 16:24:53 +0000
ROA not after: Fri 26 Jun 2026 16:24:53 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118320 (0x1ce30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 16:24:53 2026 GMT
Not After : Jun 26 16:24:53 2026 GMT
Subject: CN=6a10835a-76f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:7f:d8:80:94:6c:74:63:3c:72:77:d9:ab:
6b:44:76:2d:e2:f7:0b:e5:7a:54:66:6d:15:13:a4:
0b:29:1a:96:97:e9:9f:cd:1b:42:af:66:bd:0c:a6:
5a:6d:6e:e6:27:be:98:25:f8:50:8f:90:2d:3c:e0:
7d:fb:fe:8c:e0:ac:0c:b9:e6:c4:fe:8a:06:20:93:
24:d3:c5:5e:e8:23:2a:34:fd:a2:a3:86:0b:65:69:
58:8a:ef:6a:de:cf:46:27:2c:4b:5f:f8:e5:a7:2a:
b5:7b:03:71:fc:bd:3c:ab:a0:db:61:35:fb:d8:1f:
12:01:7c:15:fb:c7:6f:8a:81:b3:32:7b:9e:02:a5:
f4:0b:c7:a2:ad:ca:32:fe:15:90:fd:2f:78:e6:8e:
d3:d8:50:c4:63:e8:17:9b:bc:65:dc:06:5c:f9:c3:
54:c7:4f:3c:5e:a9:61:9c:14:61:f6:f5:20:d9:ae:
2c:98:c4:7f:86:d6:7d:e2:d7:d2:be:84:0f:9a:35:
e7:1a:9c:39:8b:56:27:a7:f7:2a:b9:f2:a0:3d:6d:
34:3d:5c:20:79:95:f7:1e:e3:fb:c7:6f:7d:5b:75:
d4:28:da:aa:09:60:02:67:bb:85:1d:08:20:cc:f8:
d0:32:27:e7:c3:87:4c:7d:b3:d5:54:76:6d:bd:c2:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:88:E2:89:95:47:F9:37:78:E3:74:28:DC:BE:B9:EA:2F:03:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F1159055FA11F1A99BC6BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
154.203.137.0-154.203.141.255
154.203.146.0-154.203.159.255
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3e:e6:71:d4:8f:5d:95:60:a3:2e:65:9f:86:97:47:0e:b6:
d8:f4:68:46:82:c8:44:26:8c:99:07:3e:e4:f2:bb:94:76:55:
13:71:2c:e6:9a:d2:dd:e1:a0:78:bf:01:c1:e8:65:f3:12:55:
54:eb:62:fa:ae:06:68:f1:ee:5d:73:a8:d7:3f:17:88:a6:97:
e9:80:64:46:7e:9c:a1:0e:bf:a7:bf:08:00:f0:0c:7b:5f:6e:
83:79:57:75:9e:e0:03:9a:f8:9e:4f:3e:f3:fe:09:8f:a7:65:
93:f9:c5:f8:d4:61:8a:16:1b:af:0e:2f:8c:06:78:fd:f4:d8:
ab:5c:4b:ff:08:a6:9d:88:05:31:ca:99:4b:91:0d:ab:35:24:
7c:55:e7:9a:a2:74:53:9c:4a:a8:25:d8:0a:0f:a3:6d:e4:32:
24:3e:b8:95:9e:5d:0b:e1:46:53:72:8d:15:63:bf:cc:fd:6a:
4c:56:98:3a:8b:f3:7f:b9:e1:4a:53:34:1e:b2:b7:c4:91:4f:
ac:29:e7:32:4d:68:f6:58:9c:5c:ff:31:0a:55:25:10:29:3b:
38:ce:3f:81:45:8a:74:ed:db:2d:08:90:62:75:36:d3:01:05:
02:de:80:c1:12:34:bb:87:77:97:a3:73:d2:e3:45:e7:36:12:
9d:fb:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:41 2026 by rpki-client