Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F113E8554A11F1BB97E2FFCE1D38B0.roa
File: 02F113E8554A11F1BB97E2FFCE1D38B0.roa (raw, json)
Hash identifier: fKxZcvHp2fzsZzGgiUM+22JMgGsBJMW2hI59uimi/l4=
Subject key identifier: 6C:AC:70:EB:5C:B7:52:CC:7E:93:23:9F:7C:E3:9D:0D:0E:66:58:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F113E8554A11F1BB97E2FFCE1D38B0.roa
Signing time: Thu 21 May 2026 19:19:39 +0000
ROA not before: Thu 21 May 2026 19:19:35 +0000
ROA not after: Wed 19 May 2027 19:19:35 +0000
asID: 328608
IP address blocks: 154.200.207.0/24 maxlen: 24
154.200.208.0/24 maxlen: 24
154.200.209.0/24 maxlen: 24
154.200.210.0/24 maxlen: 24
154.200.211.0/24 maxlen: 24
154.200.212.0/24 maxlen: 24
154.200.213.0/24 maxlen: 24
154.200.214.0/24 maxlen: 24
154.200.215.0/24 maxlen: 24
154.200.216.0/24 maxlen: 24
154.200.217.0/24 maxlen: 24
154.200.218.0/24 maxlen: 24
154.200.219.0/24 maxlen: 24
154.200.220.0/24 maxlen: 24
154.200.221.0/24 maxlen: 24
154.200.222.0/24 maxlen: 24
154.200.223.0/24 maxlen: 24
154.200.224.0/24 maxlen: 24
154.200.225.0/24 maxlen: 24
154.200.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118209 (0x1cdc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 19:19:35 2026 GMT
Not After : May 19 19:19:35 2027 GMT
Subject: CN=6a0f5acb-bb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:34:4d:e6:03:db:04:4b:67:c8:7e:d4:89:
77:6e:5f:21:b9:6a:07:b4:40:b7:de:a1:29:b6:80:
56:f8:aa:93:00:2f:da:40:63:7f:ec:37:89:4b:7e:
cd:bf:a4:77:61:65:28:54:5f:ff:9c:f3:e5:6a:e9:
57:aa:a1:87:60:1f:ac:ec:07:62:79:fa:ec:0d:18:
81:e3:03:67:d1:ce:a4:50:4a:b2:4f:81:62:dc:1e:
d1:20:6b:98:81:a3:27:ff:ba:25:0b:c2:33:50:80:
6a:77:4e:5e:c0:c4:82:d0:4b:f7:5a:73:69:5e:34:
f5:7d:01:f5:b6:14:1f:ab:c6:17:84:30:9e:25:ca:
c9:85:62:aa:bc:23:bf:89:18:36:9a:72:1b:0e:d0:
4d:cd:9a:98:f4:d8:b6:df:22:59:8c:7c:53:a0:12:
ec:4b:f5:74:a1:00:e9:92:ca:a0:07:8f:62:64:11:
67:65:e6:ba:27:6e:43:ef:ea:e7:c4:d8:1c:7c:f0:
f8:97:10:1b:0b:f9:1a:2d:c4:f2:19:92:b5:76:4f:
29:42:b3:0c:05:43:63:41:97:e3:30:b2:dc:d6:d3:
e2:96:71:a8:11:00:8d:78:af:b1:37:a8:83:a0:79:
2c:3b:c5:bc:b6:71:87:5a:57:d5:25:3c:9d:b9:ab:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:70:EB:5C:B7:52:CC:7E:93:23:9F:7C:E3:9D:0D:0E:66:58:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F113E8554A11F1BB97E2FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.207.0-154.200.226.255
Signature Algorithm: sha256WithRSAEncryption
3f:8b:1f:35:20:4f:99:d4:2e:62:f7:79:d6:07:42:f5:bc:c7:
44:2d:55:1a:e2:f1:2b:d3:b8:a1:57:b9:6e:7b:9b:7c:0e:e2:
c1:5c:38:73:df:89:57:d3:e3:05:fe:1d:40:08:73:15:a0:5a:
cf:2b:f6:a3:73:f3:70:10:30:b8:ee:36:22:1e:d5:cc:56:68:
cf:d2:7e:5d:28:63:82:cd:02:8c:55:16:59:3c:e4:fb:c7:bd:
15:63:f7:00:31:6b:26:5b:cd:d7:69:02:33:07:72:ab:ae:c3:
a9:b0:f8:14:c2:29:72:21:98:7d:e9:df:e8:09:cf:78:61:15:
cf:f7:c0:09:eb:a0:12:45:5f:4e:25:81:16:be:ca:4e:05:95:
7d:7c:73:68:fd:98:5e:2d:60:5e:34:37:82:80:00:79:e1:90:
8c:40:da:46:d6:8d:2c:ee:29:2a:a8:50:43:d0:92:49:20:2b:
e3:f3:41:c3:82:20:58:41:f7:87:99:2e:b7:ce:cd:98:d0:da:
e8:29:18:28:0c:b3:2d:f8:45:42:bd:ad:f5:85:9f:bd:1c:8d:
39:9b:cb:7b:de:b4:11:ac:22:2f:1d:cb:f6:53:4e:39:5a:00:
c8:72:de:c5:24:07:33:35:c2:f1:f3:42:a1:d4:0e:1b:de:f4:
a3:50:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:15 2026 by rpki-client