Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D55B778A455D11F1805BC8A8CE1D38B0.roa
File: D55B778A455D11F1805BC8A8CE1D38B0.roa (raw, json)
Hash identifier: mmvBimFwdKh80GSfT0MJ7ggyDCDTvaFq6qd6lv2E7jw=
Subject key identifier: 29:AA:51:8D:32:34:C6:AD:2D:C8:5C:EE:D3:45:56:68:C9:02:3A:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C89B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D55B778A455D11F1805BC8A8CE1D38B0.roa
Signing time: Fri 01 May 2026 13:01:14 +0000
ROA not before: Fri 01 May 2026 13:01:09 +0000
ROA not after: Fri 30 Apr 2027 13:01:09 +0000
asID: 328608
IP address blocks: 154.200.203.0/24 maxlen: 24
154.200.204.0/24 maxlen: 24
154.200.205.0/24 maxlen: 24
154.200.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116891 (0x1c89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 13:01:09 2026 GMT
Not After : Apr 30 13:01:09 2027 GMT
Subject: CN=69f4a41a-3e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:f6:74:08:85:5e:49:19:c1:0d:d0:fb:5e:
00:ac:7c:18:ad:f4:30:d9:f8:67:e2:ca:af:eb:6f:
75:17:53:03:35:4e:61:bb:9a:a3:83:b7:11:a4:9c:
5c:b9:cb:df:84:de:b1:02:db:87:4b:1f:c4:39:05:
d1:6f:32:39:4b:a7:26:e4:4c:2f:62:38:d4:e5:f9:
fe:59:ae:5e:9e:26:53:c2:aa:ab:fe:e5:52:8d:5c:
e8:28:cb:8e:08:b1:5e:2d:a5:14:14:fc:3e:13:72:
2d:2b:e3:af:81:3a:d2:e6:4b:4b:18:5c:de:43:e5:
8e:1c:3c:39:7a:74:4f:ba:a6:81:b3:68:a5:fc:c2:
92:93:6e:53:b0:d8:0f:43:a5:d5:4b:42:94:0c:ae:
89:3a:b9:99:15:8a:dd:cb:7b:92:ab:9f:cb:20:5c:
68:a8:6f:08:e0:cc:6a:9f:5f:0a:70:c7:61:f0:8b:
a5:d5:41:7b:58:92:7c:10:9e:b6:86:44:c0:e7:47:
3e:2d:f7:83:d9:c1:4d:cd:ea:f6:00:5b:fd:38:ec:
aa:c1:bb:54:9c:50:8a:3c:4a:da:df:68:3f:e2:a0:
43:64:b0:43:19:5f:5a:ce:a1:d0:d8:d0:95:c9:d3:
cf:7c:0f:e7:27:8d:f1:31:53:44:d6:93:f0:34:69:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:51:8D:32:34:C6:AD:2D:C8:5C:EE:D3:45:56:68:C9:02:3A:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D55B778A455D11F1805BC8A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.203.0-154.200.206.255
Signature Algorithm: sha256WithRSAEncryption
54:a0:29:ea:94:15:ec:67:7b:64:11:d9:73:0b:ac:a7:8d:83:
d1:65:92:b4:bc:70:c4:3c:b7:99:e3:02:1f:2e:5c:5c:10:aa:
23:76:e4:25:b4:08:0f:4f:eb:63:14:ef:7f:d6:7e:fb:41:48:
4b:79:a8:32:fe:e8:70:7f:66:1b:ff:b2:13:db:52:7b:0b:04:
74:e0:ae:25:6f:c3:07:ef:53:24:74:18:a1:f2:74:23:8d:2b:
25:fa:ac:99:3f:0e:65:d0:d9:3c:90:88:3d:a1:53:76:17:9d:
94:f8:f6:4b:1b:13:e1:9d:f1:79:87:7d:e8:55:1f:b0:96:e5:
88:41:51:f2:1f:db:f3:12:e8:69:e1:fd:ef:2a:39:60:a6:d9:
65:49:59:e8:ef:2a:a4:d1:88:1d:c5:e6:04:5a:1d:30:98:6d:
e1:9b:4f:ff:8e:db:94:e2:06:50:90:ed:35:de:7a:58:ea:5b:
f4:50:28:fe:2d:a0:22:af:ec:6d:89:4d:de:07:a1:5d:94:77:
1c:9e:1a:57:7e:61:17:b6:bc:90:97:20:14:75:ab:41:c0:45:
21:4c:82:34:dd:cd:45:d5:d0:f3:7f:12:fe:f6:06:9a:01:46:
8d:19:b4:af:4f:0e:81:2b:3d:f8:96:2a:d2:ab:52:5b:54:e7:
c2:06:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:49:00 2026 by rpki-client