Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6106284578211F1B3963E0FCF1D38B0.roa
File: E6106284578211F1B3963E0FCF1D38B0.roa (raw, json)
Hash identifier: az6nhcZyzgIgj+nHBfRLpMidCqYCQcYWFlhZm4o2Uyo=
Subject key identifier: 52:27:A2:7B:07:39:43:B7:8E:52:E9:79:6F:B6:E6:48:5C:C4:41:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6106284578211F1B3963E0FCF1D38B0.roa
Signing time: Sun 24 May 2026 15:11:54 +0000
ROA not before: Sun 24 May 2026 15:11:50 +0000
ROA not after: Thu 02 Jul 2026 15:11:50 +0000
asID: 11427
IP address blocks: 154.194.8.0/22 maxlen: 24
154.194.16.0/21 maxlen: 24
154.194.24.0/22 maxlen: 24
154.194.196.0/22 maxlen: 24
154.194.216.0/21 maxlen: 24
154.198.128.0/19 maxlen: 24
154.202.144.0/20 maxlen: 24
154.202.192.0/18 maxlen: 24
154.213.168.0/21 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 13:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118503 (0x1cee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 15:11:50 2026 GMT
Not After : Jul 2 15:11:50 2026 GMT
Subject: CN=6a13153a-517a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:d1:2e:b9:a9:b0:64:c1:3b:8f:a5:73:f8:
c4:da:23:2f:da:f3:58:cc:48:3f:03:78:4e:45:9f:
3d:26:fb:4c:50:bd:c0:b2:e7:13:88:88:37:53:b5:
3e:83:b9:6d:1c:c2:2b:59:a5:f4:bd:d5:17:dc:8b:
67:7f:44:dc:40:d2:0c:90:ee:a5:21:23:e6:e3:16:
90:7f:8f:37:1e:14:37:a6:0e:84:85:b9:0e:c6:69:
a7:33:05:aa:b4:79:cc:70:6f:a3:3d:94:ea:4c:23:
f0:2d:ad:1f:9a:40:c9:dc:25:ff:8a:54:bb:ad:19:
1d:7f:5c:92:bf:a3:db:77:b5:33:d8:8c:63:31:97:
4e:36:14:a7:ab:2a:50:39:e7:26:ea:87:38:90:fd:
05:2c:f2:29:d4:4e:f6:d2:ef:94:79:82:b7:0d:47:
08:6d:88:51:07:d4:c3:3a:ac:7e:64:c7:46:f3:91:
0c:60:2a:be:d6:66:38:5a:89:e9:7a:a2:67:67:e5:
0e:ba:78:82:68:c2:75:05:ad:77:22:a7:56:1b:b5:
76:a4:87:5f:a0:1f:fd:d1:5d:af:5d:50:cc:31:00:
dd:ff:74:ce:a1:b6:9d:16:09:bf:3a:d0:82:ee:b2:
33:77:28:26:c8:81:1f:4a:da:89:ca:77:9b:86:7b:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:A2:7B:07:39:43:B7:8E:52:E9:79:6F:B6:E6:48:5C:C4:41:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6106284578211F1B3963E0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/22
154.194.16.0-154.194.27.255
154.194.196.0/22
154.194.216.0/21
154.198.128.0/19
154.202.144.0/20
154.202.192.0/18
154.213.168.0/21
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c9:a6:e3:c3:0e:8f:6b:a8:21:25:ac:74:2d:6d:9f:a8:cc:bf:
29:c7:0b:b0:d4:cb:c5:1d:91:b6:f5:e9:48:a7:08:70:f7:89:
a1:25:b3:b5:4f:21:b3:2b:ae:b8:06:df:00:d3:9e:21:5a:3c:
1b:1c:d0:48:19:b7:4e:3f:d2:60:8b:31:fd:ba:34:74:1e:68:
b0:34:30:4f:46:37:6f:18:5d:f1:4f:c4:c7:db:a5:7d:6d:9a:
1b:45:fa:e9:a2:b5:f6:4d:c9:6f:b4:5f:48:57:08:fb:bc:13:
d0:e5:46:21:4e:70:eb:e8:16:76:c9:89:cb:78:63:48:29:5e:
ae:63:81:d7:d4:c2:a6:c2:2c:9c:f6:4b:2b:88:25:09:b3:f6:
12:5b:1c:ac:0b:70:50:c0:a5:8a:96:e7:5d:da:dd:13:a7:5a:
5e:a4:30:69:b9:34:90:dc:3d:2d:68:1f:56:19:88:c4:7f:70:
ff:bd:a6:db:10:92:14:2f:db:78:c0:d7:e9:0a:e5:2d:0c:e0:
ec:7d:83:ac:2b:69:69:66:90:ad:7b:e2:82:ed:e9:38:69:9c:
ce:45:d4:13:65:e1:2a:aa:35:8a:52:d0:92:44:8d:2e:c3:1c:
0d:ff:70:3f:85:c1:10:c7:76:ba:d2:db:e8:fa:eb:21:91:8c:
92:1e:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 17:26:04 2026 by rpki-client