Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E536E9AE5B4311F1A94FE4E7CE1D38B0.roa
File: E536E9AE5B4311F1A94FE4E7CE1D38B0.roa (raw, json)
Hash identifier: VKfwQsibFyZPRWDvjXdhYlUDfiSQat/zwi+nPT0yxXg=
Subject key identifier: 1B:EE:00:CA:70:17:9F:53:07:44:4C:85:8A:55:6E:4F:D3:59:90:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D06D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E536E9AE5B4311F1A94FE4E7CE1D38B0.roa
Signing time: Fri 29 May 2026 09:50:59 +0000
ROA not before: Fri 29 May 2026 09:50:55 +0000
ROA not after: Thu 02 Jul 2026 09:50:55 +0000
asID: 202656
IP address blocks: 154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.210.237.0/24 maxlen: 24
154.219.64.0/24 maxlen: 24
154.219.65.0/24 maxlen: 24
154.219.66.0/24 maxlen: 24
154.219.67.0/24 maxlen: 24
154.219.68.0/24 maxlen: 24
154.219.69.0/24 maxlen: 24
154.219.70.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118893 (0x1d06d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 09:50:55 2026 GMT
Not After : Jul 2 09:50:55 2026 GMT
Subject: CN=6a196183-5bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:82:de:11:ad:32:1c:c8:9c:c3:8c:2d:41:
bb:a4:4d:67:f2:c0:70:d3:fe:09:f5:c9:a3:55:11:
97:80:6e:f6:86:06:f9:ec:39:a8:36:a4:44:d0:9f:
a4:cc:65:64:14:25:34:c9:c2:a5:43:d9:b5:96:49:
e1:94:35:64:e1:38:d6:e1:8b:44:ee:30:2e:c7:2a:
d0:85:38:dd:f3:74:3e:14:3c:93:82:ed:3a:18:eb:
f5:20:01:0a:df:4e:73:3d:67:e2:74:d5:7c:2b:44:
c3:e4:51:80:b7:92:b4:87:9a:cb:0e:6d:13:ad:ee:
2e:af:f0:14:72:76:89:43:8c:de:e7:c2:e6:a2:9a:
69:4f:d9:41:53:83:b9:d0:a8:33:70:64:0b:0b:7b:
1f:dc:67:d8:36:ea:28:11:e7:86:0e:35:d8:e5:ee:
9f:d8:6a:de:e8:ca:f6:2a:01:33:27:88:e8:5b:ee:
67:6e:12:47:d3:8e:28:87:66:61:c1:c3:a8:50:4c:
a6:fb:0c:e8:80:cc:17:c2:0c:35:0c:41:7d:16:d3:
72:6e:41:c3:9b:5f:08:a5:b1:b7:e6:7d:6f:ed:e2:
3c:f4:f3:df:a0:f0:e1:27:33:92:c4:0e:64:72:02:
70:b7:7c:96:29:e7:e4:ed:99:3e:da:82:c5:f4:b5:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:00:CA:70:17:9F:53:07:44:4C:85:8A:55:6E:4F:D3:59:90:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E536E9AE5B4311F1A94FE4E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.230.0/23
154.203.250.0/23
154.210.237.0/24
154.219.64.0-154.219.70.255
154.219.76.0-154.219.82.255
Signature Algorithm: sha256WithRSAEncryption
82:67:fc:d1:22:ab:31:38:ea:eb:a4:a6:53:af:99:66:d0:e8:
6c:ae:b3:fd:83:8d:5b:68:52:7c:e4:23:92:71:d7:36:2d:42:
81:84:68:79:ee:ef:b8:d0:8c:0f:43:71:fc:ed:74:f4:70:9d:
41:98:7e:44:b8:7e:3b:3c:db:7d:1a:d4:8e:04:2c:eb:22:b4:
f8:a6:24:ff:1a:cd:5a:b4:ad:4c:52:bd:c0:96:bd:23:69:a1:
b0:2a:86:dd:a0:d5:34:65:fa:8e:16:0d:e7:c2:64:2f:15:aa:
d3:79:c8:a9:a4:41:01:7a:7a:66:29:dd:cc:4a:89:d8:c3:f3:
3a:96:cf:61:bc:66:02:86:e4:5a:2b:d5:5c:d5:9e:d6:1e:35:
93:73:b1:c3:8d:15:72:fe:20:cc:94:12:d4:31:84:af:e8:33:
a2:e0:1f:9c:e4:25:1e:06:9f:0d:2e:72:99:54:a2:f2:33:94:
bd:8d:43:ba:e9:e8:b0:a1:29:4a:75:a8:14:ef:54:c3:2b:fb:
5b:8f:b0:be:21:8a:2b:a7:23:78:55:d5:1c:87:11:68:06:35:
e1:5a:44:da:0a:55:d5:27:ff:1d:0a:8a:ec:6a:88:5c:07:5d:
96:4f:44:fd:79:0c:5d:f9:e8:0d:7d:0a:8f:d0:f0:b2:81:6b:
01:47:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:43 2026 by rpki-client