Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E98B5EE65B3D11F18E64B7C6CE1D38B0.roa
File: E98B5EE65B3D11F18E64B7C6CE1D38B0.roa (raw, json)
Hash identifier: MYRlSwbic3Yx9urGww4TakIIK/qBtaZFIg6nYVoJ8yU=
Subject key identifier: 41:2D:7B:89:E5:59:82:8F:CC:41:E6:52:22:88:05:2E:E0:27:56:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D05A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E98B5EE65B3D11F18E64B7C6CE1D38B0.roa
Signing time: Fri 29 May 2026 09:08:10 +0000
ROA not before: Fri 29 May 2026 09:08:04 +0000
ROA not after: Thu 02 Jul 2026 09:08:04 +0000
asID: 44559
IP address blocks: 154.203.225.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118874 (0x1d05a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 09:08:04 2026 GMT
Not After : Jul 2 09:08:04 2026 GMT
Subject: CN=6a19577a-658d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:17:60:6f:74:38:fb:b6:16:cc:54:7c:fa:
f5:87:fd:66:de:4b:16:10:07:25:10:83:5f:93:4a:
07:4e:35:3c:dc:23:44:50:df:19:a6:c3:24:bc:86:
7e:b1:b2:30:1f:76:74:49:ec:d3:9b:77:7d:5d:ba:
79:92:b3:bf:80:c8:53:41:4d:92:a8:27:6b:e7:5d:
00:1d:4d:db:cb:7a:1f:70:53:11:3b:c7:fe:a7:02:
9c:16:28:fb:5d:40:1e:f6:42:26:d8:73:f0:56:8a:
d7:7b:db:6c:83:fd:75:83:5a:64:59:2a:10:eb:bb:
33:c8:33:e0:21:f1:e8:26:cf:e7:f0:21:0a:e4:1d:
0d:52:ec:88:51:e0:73:b3:31:ab:40:6f:32:7e:d6:
33:fd:b6:01:e5:fd:3b:a0:38:cb:8e:2f:d5:00:1f:
62:4e:01:0c:1a:60:46:42:11:45:04:2f:ce:17:b2:
b5:0a:17:e7:b0:e7:36:23:e1:ac:e7:0d:91:4f:f5:
91:d6:aa:95:ca:26:c9:94:0e:38:1d:8d:14:ff:9b:
b5:34:65:6c:ff:94:f5:47:c0:4e:a5:9d:1d:1a:bc:
f5:5c:93:5a:27:40:bf:31:51:67:a0:f6:3f:a2:bb:
d6:02:41:15:03:7a:40:0d:eb:2e:05:7b:44:a0:61:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:7B:89:E5:59:82:8F:CC:41:E6:52:22:88:05:2E:E0:27:56:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E98B5EE65B3D11F18E64B7C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.225.0/24
154.203.229.0/24
154.203.250.0/24
154.205.28.0/23
154.205.224.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
d4:04:bc:9c:ab:85:ab:10:7b:74:d2:5b:6d:0c:f4:50:57:c0:
92:e7:b6:da:f4:74:4b:16:b2:2f:58:6a:f7:92:9a:d1:8e:71:
c0:11:13:0c:ed:35:92:9d:73:d7:31:ab:56:99:fd:d3:04:1e:
3d:49:b6:cf:07:c0:c5:d1:89:f2:24:0a:de:89:98:cb:ba:81:
8d:f4:91:5d:97:df:8d:d0:3f:98:de:31:77:6b:e6:37:2b:bf:
e8:f6:c1:fd:d2:43:ac:33:bf:c9:21:77:18:3b:e0:75:28:45:
42:91:46:4e:d1:a1:d7:38:29:1f:94:88:4a:8f:f0:08:7f:2a:
a7:7d:10:4f:bd:24:23:e6:cf:6a:df:08:28:f2:99:11:87:07:
f4:1a:f6:bb:85:4c:af:22:9d:43:be:02:41:8e:ad:5c:eb:3b:
7c:6c:ff:76:51:af:73:56:44:31:f9:df:16:99:c0:a1:ff:b0:
0b:65:e0:7f:4b:41:22:d8:e0:c6:2c:3a:9f:cc:5a:28:30:86:
f7:bd:3a:0e:88:37:73:e4:02:88:8e:14:ec:1d:94:8b:6e:69:
9a:18:ae:37:6c:69:b3:0a:69:62:9f:74:f8:36:76:c9:d6:02:
f7:7c:7d:35:38:ef:20:c4:ee:f2:60:1a:79:0c:85:8d:26:08:
2b:6b:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:20 2026 by rpki-client