Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABE0D645B3E11F18EDD10CBCE1D38B0.roa
File: CABE0D645B3E11F18EDD10CBCE1D38B0.roa (raw, json)
Hash identifier: Wyr27MrykzHeWu32V9V/ZS2q6FrHcCRVgaDItYi8KiA=
Subject key identifier: 95:83:CA:23:79:43:C5:86:DD:B6:A2:4E:A0:11:E1:98:48:05:E5:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D05C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABE0D645B3E11F18EDD10CBCE1D38B0.roa
Signing time: Fri 29 May 2026 09:14:27 +0000
ROA not before: Fri 29 May 2026 09:14:23 +0000
ROA not after: Thu 02 Jul 2026 09:14:23 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118876 (0x1d05c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 09:14:23 2026 GMT
Not After : Jul 2 09:14:23 2026 GMT
Subject: CN=6a1958f3-c0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:12:34:51:10:5b:4d:38:dd:05:a4:a4:07:
c8:c9:79:67:76:bf:b7:e2:cc:92:cc:07:3b:af:93:
7b:8b:5d:21:2b:08:a1:d2:3d:76:59:b3:ec:4b:d2:
53:c3:da:78:b4:46:9a:72:7e:d6:f3:1a:7f:3a:ec:
af:69:11:9f:d8:b4:27:63:01:41:88:b3:f6:88:0b:
ff:39:b9:be:ee:3e:2a:7a:cb:63:24:4b:6a:86:f8:
5a:0f:4b:d1:f5:fb:e5:fb:28:cb:c7:8d:80:1a:df:
84:3c:3c:79:65:fc:b1:00:72:81:54:8d:05:d1:af:
a5:d6:dc:10:da:0f:5c:28:df:3d:0e:b7:78:33:a7:
16:f7:bb:7c:29:51:3c:59:04:23:df:9b:ca:03:c1:
2c:62:3c:90:8c:15:e8:7a:50:be:44:e2:36:28:4c:
e6:50:2e:92:97:4b:c8:83:1f:47:a8:5c:7e:44:e1:
bd:d7:ff:00:77:f0:e6:88:c3:27:1f:59:96:05:64:
45:cc:f5:f3:2b:85:22:9b:7f:67:53:56:53:cf:64:
36:78:bc:1e:1a:b8:c5:67:fc:c8:81:87:b0:e0:d9:
62:07:d6:78:9d:31:8e:a9:e4:67:87:0e:df:35:79:
d9:b7:46:dc:f6:9e:e4:42:2e:e7:73:55:7f:e6:20:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:83:CA:23:79:43:C5:86:DD:B6:A2:4E:A0:11:E1:98:48:05:E5:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABE0D645B3E11F18EDD10CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.226.0-154.205.233.255
Signature Algorithm: sha256WithRSAEncryption
75:db:75:57:e7:9a:d1:0c:cc:01:6a:6a:ef:4e:8b:c5:10:89:
28:ac:a6:18:95:92:f7:21:ee:b7:b2:7a:1c:81:01:5d:d0:57:
7a:3a:0d:2d:06:af:2a:23:81:6e:b3:6a:33:73:24:01:1c:b6:
f4:a2:91:84:64:d4:03:fa:fa:41:fe:b9:0d:c6:b2:6a:b8:26:
90:eb:fc:13:d9:5c:8c:a0:e7:f1:b4:8f:42:93:7d:ce:84:39:
bf:6c:03:a1:1d:2b:76:9d:d5:fd:b7:ca:9e:4a:d5:ac:b5:92:
c0:00:48:97:84:11:06:e3:4d:e5:13:b2:ec:cd:f4:9b:ee:c1:
7c:44:fa:4c:b1:a8:d9:b2:a6:ee:66:c0:53:ed:2f:1e:6d:9e:
45:a6:4f:cf:67:fc:a8:13:18:cb:73:ce:e8:43:9b:c2:b8:0b:
97:ce:ef:d8:12:2d:b0:47:62:fd:2c:b1:76:38:ed:89:63:8b:
5f:46:f3:b3:d9:2a:d0:96:cf:39:e6:8d:48:14:0b:3b:20:69:
82:48:fb:32:62:e6:4a:c4:75:90:5e:37:ef:a4:2f:ba:48:96:
6b:de:8b:87:29:ca:55:49:38:2f:8a:40:27:a9:05:8a:17:a0:
87:ba:24:44:d0:29:d7:26:06:4c:a7:3d:2e:7f:2e:42:cc:8d:
67:96:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:32:00 2026 by rpki-client