Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D251910A581811F1A4F3EBA9CE1D38B0.roa
File: D251910A581811F1A4F3EBA9CE1D38B0.roa (raw, json)
Hash identifier: 0QllTKTzR3p0elu2LbhlFQ5d054/xMfKSFkVCANoBr8=
Subject key identifier: AF:DA:B7:60:25:8C:A9:2F:75:8B:DB:6A:4D:BA:F3:24:67:90:29:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D251910A581811F1A4F3EBA9CE1D38B0.roa
Signing time: Mon 25 May 2026 09:05:07 +0000
ROA not before: Mon 25 May 2026 09:05:00 +0000
ROA not after: Sat 06 Jun 2026 09:05:00 +0000
asID: 140224
IP address blocks: 154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118608 (0x1cf50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 09:05:00 2026 GMT
Not After : Jun 6 09:05:00 2026 GMT
Subject: CN=6a1410c3-b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:38:4d:30:04:d3:e8:ee:21:57:4a:e9:14:
38:d3:72:c1:8e:50:b1:24:5b:84:59:64:03:bc:32:
e5:8c:90:f4:59:bd:b8:86:c9:bb:45:70:8c:07:83:
8a:47:7c:f9:35:9f:a0:42:98:53:51:ed:81:6d:72:
c9:87:9e:51:01:33:74:79:23:6d:8c:cf:15:83:fe:
91:d1:49:ec:9d:ea:1f:91:7b:3d:5e:a0:5b:a4:c4:
94:ba:08:c0:1b:dc:65:9d:10:7b:d9:9d:81:c0:1e:
3c:1c:49:cf:be:c7:d7:6a:fc:6b:79:18:66:42:db:
c6:8c:2c:92:f0:1b:9a:21:4e:d4:93:a2:30:d2:4b:
ea:1c:9b:b0:68:00:3d:ab:26:fe:61:ab:e6:91:d7:
9f:a3:f8:7f:9c:0a:df:f8:4a:ea:92:d9:89:47:ad:
ac:d4:b2:fe:73:f7:fe:d8:87:6b:3b:6d:17:25:66:
05:40:24:a7:b6:3f:1e:28:49:01:bb:af:5b:17:af:
2f:5c:55:71:31:26:ac:84:ae:e2:03:46:e5:2f:63:
68:23:65:64:fe:3a:c8:84:3c:e8:66:aa:1a:9b:44:
1c:fd:83:85:67:53:7a:fb:09:dc:46:80:d6:df:49:
97:fb:34:3b:49:77:74:c7:b0:1f:1a:6e:9a:10:cc:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:B7:60:25:8C:A9:2F:75:8B:DB:6A:4D:BA:F3:24:67:90:29:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D251910A581811F1A4F3EBA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.26.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
25:39:a0:e0:36:7b:e1:88:a1:74:7e:93:bc:10:45:83:1e:60:
0e:5e:4a:4d:1c:ca:d1:1f:85:25:00:3f:3b:0d:df:a5:96:88:
eb:23:32:3a:bb:02:3b:b4:41:7b:55:7a:c8:1d:b7:59:d1:58:
15:45:0c:80:eb:32:ab:77:ef:49:50:f4:82:8b:27:9c:d9:35:
7f:28:f5:9d:05:23:b1:54:4e:35:a6:fb:01:4a:9d:6a:08:cf:
0e:4f:7e:36:1b:a5:7a:18:84:93:2a:76:1c:38:ee:8a:e5:0e:
a1:05:34:3d:e8:03:f5:01:79:4b:c3:b1:04:b2:00:35:e9:9d:
b8:3b:28:51:05:1d:49:01:93:82:08:4d:7f:11:2d:3a:b9:13:
dc:1f:c7:d6:ac:0c:58:a7:7e:f9:19:0d:68:c9:2f:0a:ca:f0:
67:5d:48:38:6d:25:01:a3:52:2d:32:27:d1:36:eb:3f:31:73:
b6:b7:3e:be:77:89:24:e5:f2:01:2e:bf:09:d9:05:d6:19:06:
32:fe:98:85:0b:26:63:b6:e4:3a:8b:70:cf:f1:51:10:fb:4d:
33:6e:3a:b0:b2:c1:84:f1:cc:b1:cf:34:41:b9:69:19:0c:e1:
09:1c:fb:21:7d:7d:b6:e2:f3:e4:68:ed:8f:1b:80:85:ee:65:
3c:0a:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:57 2026 by rpki-client