Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B05EB944ED011F1A568D919CF1D38B0.roa
File: 3B05EB944ED011F1A568D919CF1D38B0.roa (raw, json)
Hash identifier: CjxS84m0wEZyIc/lpU5cgtI+aV5vSw910LbFdA3Ccew=
Subject key identifier: 27:65:D4:03:4A:F9:7D:1B:8B:18:21:23:10:AC:05:EE:54:40:0D:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B05EB944ED011F1A568D919CF1D38B0.roa
Signing time: Wed 13 May 2026 13:32:48 +0000
ROA not before: Wed 13 May 2026 13:32:43 +0000
ROA not after: Wed 17 Jun 2026 13:32:43 +0000
asID: 139613
IP address blocks: 154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117607 (0x1cb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 13:32:43 2026 GMT
Not After : Jun 17 13:32:43 2026 GMT
Subject: CN=6a047d80-bcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:00:85:c6:02:af:22:d3:d4:00:95:23:ed:
a0:43:e4:5a:73:0f:8e:62:71:9b:f9:af:17:a9:43:
02:7d:87:7b:80:92:97:8f:2c:f6:97:41:dc:2e:c5:
f0:6a:ca:ce:06:1a:73:41:0e:8f:41:d3:d3:4a:37:
5f:13:3f:d5:0a:ed:dd:24:bc:95:d5:58:f0:3c:55:
c1:b7:f2:4b:3c:85:20:17:61:dc:db:09:32:3d:e2:
0b:46:d3:79:3a:8a:5e:b7:33:a0:a9:f4:e9:19:67:
86:69:65:8e:00:3a:9d:52:66:ac:0d:30:36:16:a6:
d7:d0:01:8e:79:cb:0e:b4:a3:7f:22:11:4b:2a:fe:
b2:ed:b5:b1:50:1a:e1:ec:6c:34:95:42:f7:81:12:
c3:4d:d4:7d:30:ff:b5:f0:11:0e:2e:95:45:49:a2:
9a:23:2a:f8:3c:86:15:66:e1:f5:3f:fc:ba:c9:24:
89:80:87:f7:98:cd:06:fe:53:1e:ac:84:ea:b0:f9:
6e:a3:f0:40:b7:de:64:e5:66:25:b6:f6:be:b0:3d:
62:d5:90:6f:62:ca:11:86:bf:ec:47:a4:3e:a3:c6:
2d:29:c7:2f:e5:e6:08:88:38:c6:70:04:93:e0:27:
91:97:46:17:b0:b2:0c:31:79:ee:2d:5a:1e:6a:2d:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:D4:03:4A:F9:7D:1B:8B:18:21:23:10:AC:05:EE:54:40:0D:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B05EB944ED011F1A568D919CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fe:10:8a:9b:31:e5:16:79:9d:00:81:e4:c1:23:50:55:84:
b2:31:31:0b:30:7a:83:86:6d:71:bf:67:ad:36:56:1a:ed:af:
e8:be:58:6b:21:ac:f9:8f:5c:d6:e9:93:a9:c0:1d:34:12:36:
21:2a:50:75:bf:92:b4:04:7f:78:6f:4b:12:dc:27:37:d8:83:
1b:c3:07:62:96:9e:95:b0:c9:e2:ce:04:76:5d:8e:1e:ba:44:
c1:9c:91:f0:90:a7:b6:d9:a5:f0:92:67:49:65:c8:52:98:6f:
c5:1c:e3:18:26:50:a5:b2:dc:42:94:55:a2:9f:8e:cc:8a:1e:
5c:6a:25:ff:b3:41:3b:b7:24:01:46:9a:20:33:75:2e:29:2a:
7a:2f:8c:d6:2e:18:b3:20:ab:f7:17:0c:2e:d1:59:fb:d1:35:
8b:f3:8f:b0:b4:87:1d:c3:2b:ce:0e:a0:f3:d5:67:e3:5f:49:
23:38:5e:cc:9d:d1:c0:75:3a:04:eb:1e:61:02:9e:27:af:50:
fb:e7:90:58:1a:55:f9:2d:41:a6:c4:1b:b1:a5:8b:c0:db:b5:
1f:23:f7:57:f7:a7:52:6b:88:5a:c0:1a:7f:e2:7c:5c:bc:04:
46:70:28:a7:b0:ab:7a:78:31:81:a9:22:82:93:54:88:90:31:
8a:d2:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:10 2026 by rpki-client