Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F235685BFD11F183BAC4D4CE1D38B0.roa
File: D2F235685BFD11F183BAC4D4CE1D38B0.roa (raw, json)
Hash identifier: HiwM9uI/rhwlUgi/1IYstAboVZa43D2tkIrP1HuWId0=
Subject key identifier: F3:DB:D7:10:04:AA:F0:42:6D:BA:19:A9:9F:F3:26:68:04:51:A8:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F235685BFD11F183BAC4D4CE1D38B0.roa
Signing time: Sat 30 May 2026 08:01:55 +0000
ROA not before: Sat 30 May 2026 08:01:49 +0000
ROA not after: Tue 07 Jul 2026 08:01:49 +0000
asID: 202656
IP address blocks: 154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119018 (0x1d0ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 08:01:49 2026 GMT
Not After : Jul 7 08:01:49 2026 GMT
Subject: CN=6a1a9973-055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:88:9d:07:a0:4e:5c:ca:3a:82:77:49:e1:
25:20:ae:fd:3e:b8:e8:90:62:74:63:9d:ae:4b:d3:
95:dc:16:68:8f:77:ab:db:ee:df:5c:c0:ab:24:74:
80:b4:a3:b9:2c:96:b2:42:f0:9b:f1:78:05:ec:58:
17:bf:47:5d:78:7a:5f:02:8a:68:6c:47:db:b3:59:
dd:15:9e:b9:5f:cd:4b:be:3c:29:65:a1:3f:fa:fc:
10:b0:45:95:44:28:7f:21:b0:fe:93:90:71:43:29:
47:d7:7e:b6:d6:e3:8e:45:0b:42:02:f5:f1:3f:08:
f2:c8:70:ac:d3:43:e8:ff:20:1f:86:18:93:08:d7:
18:6d:46:5d:2e:86:85:78:31:d3:65:40:b6:17:9f:
a1:72:81:fc:f1:ec:a0:85:f2:30:b1:89:0c:a9:58:
ea:75:3b:98:a2:08:d8:26:26:8e:ae:07:fe:ec:4b:
66:3c:26:48:5f:2e:b7:39:cd:20:70:b0:8b:b5:61:
48:46:6b:04:4d:45:e6:c0:92:ea:64:85:9c:3c:5d:
7b:38:0f:ae:9e:9f:01:c9:2f:97:e3:31:96:04:6b:
06:c5:db:fb:aa:ad:1c:44:84:f8:7a:93:ab:e9:1e:
6a:a3:8d:1f:a2:15:f2:d5:34:05:d5:3c:d7:53:14:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:D7:10:04:AA:F0:42:6D:BA:19:A9:9F:F3:26:68:04:51:A8:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F235685BFD11F183BAC4D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.240.0-154.219.244.255
154.219.248.0/23
154.221.50.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3d:c1:34:fe:6d:b1:68:ca:08:14:d9:c8:57:2d:01:df:0d:
ad:4a:75:6e:92:fa:33:85:6e:de:9d:b4:b7:b9:d6:44:4d:33:
6c:ea:60:56:12:fd:24:14:e0:ff:42:c8:5f:1f:e9:bc:67:76:
32:1f:0c:07:b7:7d:c8:3c:3c:8e:57:76:aa:56:a6:cb:68:b7:
7e:24:58:02:c7:b0:41:28:7d:96:a6:7b:d4:e3:dd:b1:a9:89:
25:ff:83:2b:dd:01:67:11:8e:cf:74:4f:9c:97:47:a4:71:40:
9a:d2:99:4a:56:5a:57:b4:29:5a:bb:c5:13:b5:a8:d8:13:4e:
8d:d4:10:7a:50:6e:b5:47:08:6d:59:36:dc:c2:d2:d7:f5:6b:
f7:ce:af:97:3e:41:c5:19:22:21:8d:20:26:aa:06:87:a2:c7:
b7:4c:35:c2:21:b6:92:69:0d:49:4e:1d:1d:d8:04:ad:f2:0e:
2d:e3:68:11:30:8c:ce:98:c2:03:41:96:ff:1a:8b:5a:02:6f:
4d:43:35:4c:9a:68:9a:37:e8:15:66:a6:73:cd:cd:18:58:5e:
99:cd:d3:ba:5d:01:0c:45:d3:01:69:41:b9:6e:26:9b:59:c9:
73:f3:55:6b:2a:61:6b:3a:4d:e7:81:af:1a:25:cf:a7:c7:66:
b1:64:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:38 2026 by rpki-client