Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE3CA5EC5BA011F1A1253B0DCF1D38B0.roa
File: CE3CA5EC5BA011F1A1253B0DCF1D38B0.roa (raw, json)
Hash identifier: 5+YJole1CZ09AGZh56U8zXsnX6tDqomnnlpIQKW2URE=
Subject key identifier: D2:91:40:74:40:21:39:B1:D2:78:B4:5B:E1:1F:80:39:C4:6A:6E:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D089
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE3CA5EC5BA011F1A1253B0DCF1D38B0.roa
Signing time: Fri 29 May 2026 20:56:04 +0000
ROA not before: Fri 29 May 2026 20:56:00 +0000
ROA not after: Tue 07 Jul 2026 20:56:00 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118921 (0x1d089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 20:56:00 2026 GMT
Not After : Jul 7 20:56:00 2026 GMT
Subject: CN=6a19fd64-d93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:8d:2b:44:93:4a:14:24:06:4c:c8:95:98:
25:7c:97:89:c3:30:4f:a9:b0:c9:4e:14:64:a9:b8:
cd:49:ba:04:58:10:98:8d:d0:0c:da:9a:e7:59:4c:
3a:38:9c:a9:ea:37:eb:d5:1f:3b:68:19:f0:41:9c:
cd:5a:fb:e2:a0:8e:68:5c:05:2b:db:91:80:fc:9f:
05:6f:b0:01:c0:79:a6:81:18:1a:d8:f0:a1:4c:d9:
c2:f3:44:9c:23:c4:04:76:d0:49:f9:fa:36:72:74:
25:f6:88:e5:b4:3a:28:bf:8a:89:c5:ce:61:b0:2f:
91:97:7a:1f:ce:6e:52:1e:c3:47:1c:8b:cb:90:46:
25:5a:ea:71:86:d1:55:b2:e4:4f:58:9d:56:87:01:
3f:c7:0a:2c:19:05:9b:2d:d8:6e:1b:93:9d:5f:40:
82:97:d2:99:b7:5e:30:e9:85:a5:37:1e:7a:24:92:
aa:d2:68:b9:2a:d0:e5:17:40:56:e7:b0:14:d9:a5:
5b:8f:cf:62:c4:a0:65:fa:39:00:dd:ec:16:cc:52:
d0:19:50:62:d2:a0:e9:e9:77:2f:4c:03:b5:43:c5:
13:29:00:db:e2:89:b2:b8:38:98:e2:eb:90:29:4d:
00:0a:d0:a6:06:1a:b8:b6:2a:27:3f:a0:cd:3c:c7:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:91:40:74:40:21:39:B1:D2:78:B4:5B:E1:1F:80:39:C4:6A:6E:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE3CA5EC5BA011F1A1253B0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
af:ec:22:d3:a0:6a:ad:7e:e0:d5:ad:d2:77:d5:83:51:6b:a1:
0b:a5:8a:23:78:9b:5e:85:19:cd:58:cd:49:8e:73:91:e2:01:
8d:ee:4f:cc:94:4a:78:73:7d:d8:80:41:81:94:02:ef:0b:1a:
b4:04:c5:99:36:37:53:da:be:d3:1c:15:b3:ab:8b:6a:a6:7d:
40:ee:b1:c2:bf:bb:be:db:ec:22:f4:30:62:35:9f:67:47:1c:
3f:5e:e2:ed:54:0e:39:56:f3:a2:87:e8:3f:17:3c:4e:24:35:
77:b2:bc:2f:fc:2f:7e:26:86:07:4c:fc:09:a7:4f:17:58:28:
d3:a5:be:54:69:a7:b5:d6:d2:36:f8:b8:83:ec:a0:c7:37:d0:
71:ef:c7:8d:e2:fe:be:8c:68:51:5c:7c:4d:01:92:1d:47:d4:
2f:7a:bb:9b:21:e3:b3:c0:5b:25:68:17:8a:e2:10:20:78:58:
04:e7:8d:34:dd:fd:0b:86:e0:46:43:0e:53:d9:f4:65:c7:a7:
6b:b8:da:a0:70:99:94:02:f5:e1:99:7e:d1:a6:34:33:87:70:
20:68:24:ac:76:61:3f:d3:7c:bb:36:7e:e0:c0:08:59:99:30:
8a:ad:92:27:f7:e7:7c:b6:74:38:9b:59:1f:61:ca:33:1d:92:
ac:67:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:38 2026 by rpki-client