Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5622EB3A545111F1A7886A13CF1D38B0.roa
File: 5622EB3A545111F1A7886A13CF1D38B0.roa (raw, json)
Hash identifier: 6e8r+z/idZ+9CoG8xcZ3+L6cAbnDhmcSQaosQRxquh8=
Subject key identifier: 31:61:7F:0E:91:C2:CB:96:68:59:F6:E2:2A:53:A2:42:66:25:D4:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5622EB3A545111F1A7886A13CF1D38B0.roa
Signing time: Wed 20 May 2026 13:39:34 +0000
ROA not before: Wed 20 May 2026 13:39:30 +0000
ROA not after: Tue 20 Jul 2027 13:39:30 +0000
asID: 328608
IP address blocks: 154.200.228.0/24 maxlen: 24
154.200.229.0/24 maxlen: 24
154.200.230.0/24 maxlen: 24
154.200.231.0/24 maxlen: 24
154.200.232.0/24 maxlen: 24
154.200.233.0/24 maxlen: 24
154.200.234.0/24 maxlen: 24
154.200.235.0/24 maxlen: 24
154.200.240.0/24 maxlen: 24
154.200.243.0/24 maxlen: 24
154.200.244.0/24 maxlen: 24
154.200.245.0/24 maxlen: 24
154.200.246.0/24 maxlen: 24
154.200.247.0/24 maxlen: 24
154.200.250.0/24 maxlen: 24
154.200.251.0/24 maxlen: 24
154.200.252.0/24 maxlen: 24
154.200.253.0/24 maxlen: 24
154.200.254.0/24 maxlen: 24
154.200.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117978 (0x1ccda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 13:39:30 2026 GMT
Not After : Jul 20 13:39:30 2027 GMT
Subject: CN=6a0db996-a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:7f:00:16:ca:fc:f3:07:31:87:9d:03:5c:
6e:19:13:99:59:12:a9:77:e2:a2:8e:bb:5b:b5:79:
5b:92:1b:a9:b0:0c:90:73:36:e0:19:ce:f0:77:97:
86:0a:f3:d3:14:64:f8:b6:42:2c:1a:46:51:e5:8e:
ed:b1:1d:67:c0:b1:4c:00:15:58:15:4d:4c:b5:5b:
02:31:c1:f0:0a:16:0d:b4:b7:35:df:ce:6b:27:fc:
af:d8:82:a2:ca:14:7a:19:74:8e:6f:a1:7a:eb:c0:
c4:d8:ed:6f:ec:09:86:46:8f:4d:73:bb:c3:05:bd:
84:62:87:98:0f:e8:a6:6d:51:09:0f:da:6e:b7:ed:
a7:ec:a5:4d:f6:3e:00:2e:be:14:5d:07:96:e3:52:
94:bd:61:db:69:e9:a8:1a:4e:0d:d9:32:5c:75:c2:
67:a5:03:16:a6:33:95:fc:46:b9:9b:f4:e0:4c:01:
78:58:a5:c2:8f:c4:f6:4d:a9:fb:06:97:0f:7e:22:
ce:6f:88:01:8c:f5:50:90:c6:1a:52:17:cb:2f:3e:
a6:d5:a1:9d:d1:51:04:eb:07:13:85:6b:af:9f:e7:
82:6b:d4:23:f9:62:6b:39:5a:39:5c:6d:ec:65:9f:
92:da:73:97:7c:ed:cd:d8:23:80:60:e7:9b:37:71:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:61:7F:0E:91:C2:CB:96:68:59:F6:E2:2A:53:A2:42:66:25:D4:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5622EB3A545111F1A7886A13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.228.0-154.200.235.255
154.200.240.0/24
154.200.243.0-154.200.247.255
154.200.250.0-154.200.255.255
Signature Algorithm: sha256WithRSAEncryption
95:45:a6:80:9f:f6:4c:f6:59:f7:14:58:88:3d:aa:56:f6:a1:
e6:cd:84:41:f8:e8:6d:94:8e:cc:cd:04:7a:45:b4:b9:99:b2:
f0:5b:6a:c2:fd:80:92:bc:1d:32:9f:5c:39:b5:b2:84:e3:10:
c3:5f:ab:1b:2f:8b:f7:a0:11:c2:a4:50:98:ca:ef:19:54:9a:
53:25:d8:ab:23:5c:30:df:29:06:bf:7b:7a:d8:43:21:77:bd:
4a:a4:d3:62:31:6d:3d:9f:c0:04:c6:01:26:d1:60:3d:a0:a1:
9e:ef:1c:9c:21:dc:c3:1d:7c:9f:70:02:a3:fd:8e:29:c3:dc:
69:41:a9:8c:7b:f4:b2:69:3e:c5:98:9e:a9:c9:ec:14:de:81:
50:9f:5b:b9:5b:0b:ab:9f:58:6c:34:02:d8:f8:08:18:94:41:
86:54:f3:32:52:53:4d:98:f1:95:8a:d3:41:39:ec:2a:f3:7c:
78:06:3e:42:39:36:0c:0a:3c:cb:b5:23:36:e2:71:4f:19:48:
eb:52:86:05:19:01:2a:41:84:cd:64:7b:d5:3f:ec:63:56:00:
1f:66:d1:51:00:ee:ba:ae:12:b1:c6:89:ee:9a:35:8a:29:d0:
b5:62:24:7d:65:3c:df:1f:2c:a5:a1:25:54:a3:a5:6b:46:d9:
eb:f2:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:54 2026 by rpki-client