Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BDE3E0C536411F1A0BEE1F1CE1D38B0.roa
File: 3BDE3E0C536411F1A0BEE1F1CE1D38B0.roa (raw, json)
Hash identifier: AqHPMFp0mL9aQFe+Un1oevrKQ6JRj0MozQzl7a0q2Xk=
Subject key identifier: 12:E3:75:FB:D2:5F:F5:32:D6:E1:3B:FE:F4:4D:B2:3F:06:29:50:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BDE3E0C536411F1A0BEE1F1CE1D38B0.roa
Signing time: Tue 19 May 2026 09:22:19 +0000
ROA not before: Tue 19 May 2026 09:22:12 +0000
ROA not after: Wed 19 May 2027 09:22:12 +0000
asID: 328608
IP address blocks: 154.200.217.0/24 maxlen: 24
154.200.218.0/24 maxlen: 24
154.200.219.0/24 maxlen: 24
154.200.220.0/24 maxlen: 24
154.200.221.0/24 maxlen: 24
154.200.222.0/24 maxlen: 24
154.200.223.0/24 maxlen: 24
154.200.224.0/24 maxlen: 24
154.200.225.0/24 maxlen: 24
154.200.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117894 (0x1cc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 09:22:12 2026 GMT
Not After : May 19 09:22:12 2027 GMT
Subject: CN=6a0c2bcb-360a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:4c:e5:ee:cf:a4:7f:e2:9c:08:be:ec:59:
27:ef:0e:53:73:51:b4:e8:e3:5c:85:f1:6b:67:13:
73:d4:c7:fe:80:e5:0b:8d:aa:38:1f:c4:23:2e:ab:
42:3c:10:8a:77:d1:e4:61:6f:76:c5:ef:19:7c:67:
fb:fc:6a:f9:90:ce:b9:15:97:32:46:a6:34:77:49:
0d:1e:c6:fc:e9:31:c1:5c:ee:fb:ab:ed:eb:58:74:
c3:52:93:ee:51:25:c2:78:96:fa:bd:b9:f4:fc:8c:
68:70:89:4e:cc:63:a3:c5:07:a9:a7:be:0a:03:2f:
6e:02:8a:91:8d:17:ea:74:9b:a0:19:a8:1a:f6:5f:
3d:71:cd:e2:5d:be:1e:63:c1:5b:99:1e:45:03:43:
e7:54:0e:1c:40:a6:41:43:9a:fd:86:0a:e0:49:df:
f4:bf:43:d2:a0:15:cc:bf:34:bd:e9:b6:ba:16:67:
bd:37:13:cf:a8:42:e5:d1:c6:0e:ab:32:c9:4d:75:
e2:ca:b8:82:2f:2e:87:4d:f8:73:3e:a6:21:bb:25:
21:c1:96:2b:26:84:28:95:63:67:80:0e:5b:4d:39:
1c:cc:c8:4b:c7:7d:b6:2c:5f:37:5b:f1:14:1f:ea:
b4:31:7c:a8:c1:00:1e:06:c1:0a:b3:77:19:26:02:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:75:FB:D2:5F:F5:32:D6:E1:3B:FE:F4:4D:B2:3F:06:29:50:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BDE3E0C536411F1A0BEE1F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.217.0-154.200.226.255
Signature Algorithm: sha256WithRSAEncryption
63:47:a7:86:71:af:bc:3c:5b:7e:6a:ba:45:2c:83:7e:47:45:
0b:52:ef:7e:4b:c2:b6:b5:1d:61:ef:7c:7d:c1:ec:a9:32:e8:
4f:e5:b0:d3:87:0f:24:59:0c:b7:15:83:23:fd:9f:28:df:9a:
2b:25:90:83:7c:d4:ce:8d:90:81:62:b4:8b:d8:0a:21:d0:1d:
7c:c2:7f:bc:50:44:06:89:6a:5b:ac:85:f2:31:8b:21:32:c1:
d7:5d:ea:0f:66:27:57:c5:76:4b:56:c5:91:fe:d7:09:49:73:
78:69:f7:58:13:de:1f:c7:d2:47:d4:63:45:3f:09:da:b0:6b:
b8:88:83:87:dc:aa:b9:1f:4e:09:a3:95:18:c2:c7:bc:84:0d:
b0:af:bd:d3:e7:2a:39:94:78:4a:03:c6:d1:e7:38:10:a1:7a:
7c:73:ee:a9:bd:30:08:8c:a7:06:97:b7:79:1e:f8:4b:37:1f:
8b:f3:6d:50:89:d7:47:0b:cb:5b:69:25:9b:96:18:36:9e:89:
46:f3:fe:e7:dd:92:90:27:3b:05:14:a4:41:57:df:e6:18:c2:
f5:7b:9c:a8:48:4f:61:58:44:c1:08:bf:72:00:5f:04:6e:1f:
9c:44:e5:fc:e8:34:69:61:a7:3c:5d:8c:62:9c:73:81:a5:3c:
3e:ed:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:44 2026 by rpki-client