Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E61CC0B26EB911F1AC94A4F2CE1D38B0.roa
File: E61CC0B26EB911F1AC94A4F2CE1D38B0.roa (raw, json)
Hash identifier: p1dFPRAxwZT8vnyIo2a/aaDVdCPJdTL2pMXsLrEWMfY=
Subject key identifier: 36:57:3C:40:A0:8F:ED:1A:FC:06:3A:C2:4C:EE:BE:6D:04:BC:DA:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D46C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E61CC0B26EB911F1AC94A4F2CE1D38B0.roa
Signing time: Tue 23 Jun 2026 04:13:34 +0000
ROA not before: Tue 23 Jun 2026 04:13:29 +0000
ROA not after: Tue 30 Jun 2026 04:13:29 +0000
asID: 399077
IP address blocks: 154.211.64.0/18 maxlen: 24
154.211.64.0/24 maxlen: 24
154.211.65.0/24 maxlen: 24
154.211.66.0/24 maxlen: 24
154.211.67.0/24 maxlen: 24
154.211.68.0/24 maxlen: 24
154.211.69.0/24 maxlen: 24
154.211.70.0/24 maxlen: 24
154.211.72.0/24 maxlen: 24
154.211.73.0/24 maxlen: 24
154.211.74.0/24 maxlen: 24
154.211.75.0/24 maxlen: 24
154.211.76.0/24 maxlen: 24
154.211.77.0/24 maxlen: 24
154.211.78.0/24 maxlen: 24
154.211.79.0/24 maxlen: 24
154.211.80.0/24 maxlen: 24
154.211.81.0/24 maxlen: 24
154.211.82.0/24 maxlen: 24
154.211.83.0/24 maxlen: 24
154.211.84.0/24 maxlen: 24
154.211.85.0/24 maxlen: 24
154.211.86.0/24 maxlen: 24
154.211.87.0/24 maxlen: 24
154.211.88.0/24 maxlen: 24
154.211.89.0/24 maxlen: 24
154.211.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119916 (0x1d46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 04:13:29 2026 GMT
Not After : Jun 30 04:13:29 2026 GMT
Subject: CN=6a3a07ee-9fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:a5:98:1e:7b:61:14:8a:bc:93:8c:d2:86:
d8:7e:06:fc:9c:a7:2c:10:18:c3:95:da:ee:45:0d:
83:04:ef:2f:4f:28:d7:77:5c:56:a5:34:d4:0e:b3:
1d:ab:e3:70:60:c9:cb:e3:7a:29:32:a3:3e:88:e1:
96:50:50:5e:e2:c7:e2:c6:b8:f2:67:5e:f5:54:2e:
b2:9e:a5:8c:ce:60:6e:2d:da:ae:f1:08:91:d3:f0:
d6:d9:43:06:bb:1c:0a:ab:cc:2a:8a:0c:1f:b2:7b:
3d:74:12:9b:9f:bd:92:c1:a9:c7:b6:be:c0:ae:64:
27:54:9e:32:a4:59:ab:a4:8e:fa:48:fc:e3:ef:08:
6c:7b:6b:59:7e:08:6c:20:7d:8b:9a:05:f0:60:34:
14:ac:c9:9b:52:bf:82:e1:cf:bc:bc:6b:91:74:0e:
05:b9:a9:4c:1f:f5:ac:4c:56:da:42:e5:90:bf:53:
b8:6f:bc:73:50:d8:c1:8a:26:73:64:df:a3:de:c3:
53:6a:24:c2:cb:b8:fe:48:12:08:56:4a:9f:91:9b:
2f:6d:97:9d:c3:b7:21:38:c0:3d:c5:1e:d8:5b:c7:
f7:e5:5e:3b:7b:a3:72:de:e9:16:ae:ba:19:2c:3c:
8a:a4:34:91:f2:3d:3b:6c:ba:10:f8:17:92:5f:9d:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:3C:40:A0:8F:ED:1A:FC:06:3A:C2:4C:EE:BE:6D:04:BC:DA:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E61CC0B26EB911F1AC94A4F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c0:15:bf:0c:5c:4e:b9:f1:24:fd:68:99:0a:df:dc:6a:22:b5:
60:db:02:4a:68:3d:7e:35:02:19:30:3c:a0:23:7c:bc:0a:6e:
a3:fb:16:8b:7b:96:de:ae:5a:d3:92:41:87:fe:7d:e3:7f:47:
3d:d6:b4:d8:2f:66:4a:50:6c:38:14:85:02:5e:a7:18:8c:8d:
b8:87:5b:78:a7:76:c8:4a:9e:09:d7:4f:8f:5c:b0:04:77:34:
c6:3c:1a:10:82:2f:93:2b:6d:c7:67:bc:ae:9a:e2:2d:ad:46:
fb:bf:d1:60:4f:38:d4:ac:9a:b9:a7:18:8f:cc:1e:c1:fc:71:
b7:0b:ae:ed:36:e5:b1:57:29:6a:dd:cf:aa:56:e3:d4:7b:b9:
66:a1:54:ec:d3:72:2e:09:9b:08:1d:b9:f1:97:62:52:28:a8:
3d:9b:30:d9:7a:81:18:8e:9f:94:af:82:5e:82:2b:3e:7b:6b:
38:f3:42:0f:c4:a2:47:43:92:4d:5e:4e:c3:86:33:ec:62:7b:
23:85:e0:dc:1c:8e:fb:5c:80:2d:0f:3e:a6:6c:1a:96:ee:03:
e4:36:d6:64:7a:b1:44:a1:19:4a:03:09:9e:8f:3a:bf:7b:8a:
64:50:d8:ed:6f:a9:b8:ff:ed:b4:7f:e1:99:d0:14:36:4e:c9:
78:f2:f9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:19 2026 by rpki-client