Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E3C6E285BCB11F19F04DD10CF1D38B0.roa
File: 5E3C6E285BCB11F19F04DD10CF1D38B0.roa (raw, json)
Hash identifier: cgHHS2UboFWvB4j+iZdjGcBXHcDLwfJ0HkORe0GBRFY=
Subject key identifier: 1E:F5:F1:A4:B1:C8:51:2A:E6:C0:07:36:E8:F8:78:C9:C3:7E:5B:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E3C6E285BCB11F19F04DD10CF1D38B0.roa
Signing time: Sat 30 May 2026 02:00:45 +0000
ROA not before: Sat 30 May 2026 02:00:37 +0000
ROA not after: Wed 01 Jul 2026 02:00:37 +0000
asID: 62240
IP address blocks: 154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.83.0/24 maxlen: 24
154.194.84.0/24 maxlen: 24
154.194.85.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.195.115.0/24 maxlen: 24
154.195.119.0/24 maxlen: 24
154.196.83.0/24 maxlen: 24
154.196.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118990 (0x1d0ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 02:00:37 2026 GMT
Not After : Jul 1 02:00:37 2026 GMT
Subject: CN=6a1a44cd-abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:a6:25:7c:47:c9:5b:ed:26:f5:fe:b0:6c:
5d:51:4e:ca:bc:9f:06:0c:b0:1f:af:45:08:60:99:
cc:b9:f3:18:2d:f0:e7:fb:09:a9:c7:f7:81:50:00:
be:3e:fc:5f:da:ac:6b:d5:32:cb:95:69:6e:bb:d7:
50:34:42:c2:4f:92:3c:15:8f:46:e1:95:19:cb:24:
5e:45:72:69:be:15:aa:19:e0:96:3e:c9:b5:5f:6c:
5b:ba:ba:d2:fa:c6:a9:9b:9d:f2:a9:78:79:49:38:
b7:34:55:a6:9a:27:c7:e7:0a:f3:6e:d9:4a:2e:ab:
d2:9e:cb:7b:c8:ba:eb:4b:12:e3:fc:07:c9:da:d9:
90:8e:44:de:8c:6c:89:09:0b:ee:1e:24:16:29:51:
25:94:dc:db:71:93:cd:35:7a:e7:fb:2f:ca:11:47:
eb:2a:97:4f:73:c3:bc:b4:df:ff:58:44:5f:4a:34:
1f:88:23:35:af:e6:4e:11:30:2d:53:96:98:35:8e:
c9:b6:f4:d0:84:cf:81:eb:bb:00:95:52:06:5f:d0:
60:0f:9d:4c:9d:87:e0:fe:00:da:77:a4:4b:78:b3:
bb:72:2a:cc:e9:c2:d7:c6:d2:f2:2b:d8:f1:08:ff:
f5:e5:a3:15:d3:0e:dd:92:ef:d9:2d:c1:2c:28:cc:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F5:F1:A4:B1:C8:51:2A:E6:C0:07:36:E8:F8:78:C9:C3:7E:5B:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E3C6E285BCB11F19F04DD10CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.7.0/24
154.194.38.0/24
154.194.83.0-154.194.85.255
154.194.100.0/24
154.195.115.0/24
154.195.119.0/24
154.196.83.0/24
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:dc:4d:33:61:fb:10:31:93:0a:3f:f1:53:2c:4d:df:f4:38:
54:24:11:67:f6:87:e7:0b:26:35:ac:76:8c:23:18:7b:c1:a6:
ce:06:4b:e8:d2:a1:27:d2:b7:ba:53:14:bb:69:cd:a3:b4:d2:
03:54:ab:c1:1a:c3:09:48:8a:4d:3f:63:32:a7:38:84:e8:ce:
11:9e:e6:83:ee:27:cc:88:78:7e:bd:5b:0e:d8:7f:52:b4:de:
5c:39:2b:f9:96:20:91:76:50:6f:65:c6:9f:12:49:af:b0:6c:
bd:c8:6f:30:8b:e0:13:1f:f3:c8:a3:dc:79:f8:61:53:5e:b8:
46:60:3d:ec:e4:02:2f:5b:ca:c7:81:1e:a7:ea:07:b5:56:b8:
66:7e:cd:8a:2f:d8:ba:c4:7c:ae:df:fb:59:f4:45:35:c1:59:
11:29:df:de:34:f5:d5:5e:b8:ad:b0:8b:53:92:df:b0:09:3e:
4e:f1:81:08:bc:1b:70:b0:9e:6d:04:e2:f5:08:d3:e6:ef:0a:
02:23:3c:57:18:01:d6:64:12:8c:39:1c:46:4e:12:25:e9:cf:
da:c7:84:2f:4f:00:09:5d:11:2e:46:ed:13:89:6d:ef:11:db:
d6:79:36:20:92:8d:9b:2d:c4:b2:40:e2:ac:ab:8d:dd:8b:c1:
bc:a6:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:32 2026 by rpki-client