Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9F43D7A5BA211F1B72C7719CF1D38B0.roa
File: E9F43D7A5BA211F1B72C7719CF1D38B0.roa (raw, json)
Hash identifier: LMUlC9Bp7slsYB+bZHNRBaWGkUdVEGSFawlBP37Z260=
Subject key identifier: CB:D7:20:F3:0C:99:4E:8D:84:AA:91:89:FC:2A:C0:BF:91:43:3C:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D091
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9F43D7A5BA211F1B72C7719CF1D38B0.roa
Signing time: Fri 29 May 2026 21:11:10 +0000
ROA not before: Fri 29 May 2026 21:11:05 +0000
ROA not after: Tue 07 Jul 2026 21:11:05 +0000
asID: 202656
IP address blocks: 154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118929 (0x1d091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 21:11:05 2026 GMT
Not After : Jul 7 21:11:05 2026 GMT
Subject: CN=6a1a00ed-ba19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:32:cf:d5:b9:05:1b:22:af:1f:aa:f1:8c:7a:
02:4e:f7:bd:0a:1b:25:67:52:1f:da:f3:e0:f7:44:
79:17:be:6f:e3:4d:4f:b2:0e:14:69:37:96:75:6b:
b3:c2:cc:82:2f:f0:d1:a1:a7:5a:f2:93:68:79:6a:
c7:65:e9:f6:39:dc:14:50:52:76:08:7d:2f:d0:7d:
18:12:97:67:8c:e7:b2:40:53:a9:83:2a:e2:10:90:
c5:4b:53:f8:96:4f:ea:4a:96:1a:ae:0d:77:32:71:
62:3d:c9:7e:68:22:6a:b9:c1:c9:a8:2a:44:40:1f:
19:c8:6a:55:32:33:26:1d:f8:a6:a8:c3:69:14:a9:
a0:98:70:a7:e2:b5:3d:ff:3d:bd:6e:55:db:09:ec:
af:b2:6b:9b:51:5d:90:cb:41:4b:64:f8:b7:9f:11:
e1:86:1f:5c:c0:2a:f3:33:2e:40:55:63:5b:a2:89:
96:29:70:e2:d4:19:c2:a6:8e:77:b5:4d:2b:f8:7b:
08:65:3d:54:55:7b:b0:31:d0:89:84:14:c7:58:17:
7d:d8:09:ae:a7:22:71:42:36:fd:43:4d:35:67:70:
69:59:c3:3d:9a:e8:44:6e:94:49:49:f7:a9:cb:21:
03:8a:f4:29:fe:02:5e:22:59:b5:8b:1f:38:26:36:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D7:20:F3:0C:99:4E:8D:84:AA:91:89:FC:2A:C0:BF:91:43:3C:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9F43D7A5BA211F1B72C7719CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.239.0-154.219.244.255
154.219.248.0/23
154.221.50.0-154.221.52.255
154.222.197.0/24
154.222.200.0-154.222.206.255
Signature Algorithm: sha256WithRSAEncryption
28:98:de:0e:9b:72:d6:4d:c7:b6:1e:e9:0d:cf:a8:03:70:2f:
fa:ae:2a:ea:e1:4b:fd:8d:65:9d:7b:24:d7:f5:40:f1:4c:9d:
86:0c:ce:a0:d2:f1:52:84:88:fe:33:58:d7:e0:0a:7c:67:34:
d1:b9:a7:63:79:7f:69:a3:05:09:bb:85:c3:64:5d:f1:be:85:
13:d6:c7:21:f5:94:c8:77:ba:e7:ca:38:02:d9:2e:5a:84:dc:
31:e2:94:98:12:13:b4:bd:5c:94:90:17:77:7c:8e:6f:44:a0:
ec:1b:92:95:4f:80:a2:18:ad:93:3e:8d:2a:59:d0:7d:10:58:
79:f9:8f:dc:2e:47:52:62:4a:74:ce:54:18:a6:e0:e5:22:9e:
d4:47:37:92:ba:51:e9:6a:e8:f2:34:72:31:0f:ee:be:00:e7:
7d:f1:31:c1:59:35:58:e4:fa:24:6e:e9:4a:52:4a:2a:56:6f:
a8:32:bf:2d:72:06:c5:a3:5c:db:eb:09:55:41:98:80:e6:de:
ee:eb:f9:99:80:f0:17:82:94:75:7c:09:2c:db:f5:e3:2a:1e:
98:0d:56:8e:e7:a8:21:68:7d:54:17:93:51:94:60:4e:4d:22:
38:07:61:56:64:c1:be:31:ad:43:53:75:94:6f:2a:4a:10:8a:
a6:cd:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:41 2026 by rpki-client