Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602DE5985D9411F1A4D8F0FACE1D38B0.roa
File: 602DE5985D9411F1A4D8F0FACE1D38B0.roa (raw, json)
Hash identifier: tG00ocyzXjzLmpuYIsxqDqmH/Rk3pt6fg5N60td+GeQ=
Subject key identifier: 56:B7:B5:EF:0F:46:6B:B2:5B:61:51:12:FF:A4:4B:80:FF:FA:4D:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D126
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602DE5985D9411F1A4D8F0FACE1D38B0.roa
Signing time: Mon 01 Jun 2026 08:32:08 +0000
ROA not before: Mon 01 Jun 2026 08:32:03 +0000
ROA not after: Tue 08 Jun 2027 08:32:03 +0000
asID: 138995
IP address blocks: 154.218.2.0/24 maxlen: 24
154.218.3.0/24 maxlen: 24
154.218.4.0/24 maxlen: 24
154.218.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119078 (0x1d126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 08:32:03 2026 GMT
Not After : Jun 8 08:32:03 2027 GMT
Subject: CN=6a1d4388-dfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:2d:d4:dd:0f:fb:06:a6:ec:2d:d1:20:00:
4f:94:25:b3:86:fe:af:5e:86:83:4d:97:c7:36:85:
73:43:2c:f4:51:d3:46:59:0d:33:a0:52:4d:58:d3:
71:0e:98:ac:a4:15:1a:95:2f:3b:41:fc:8a:24:c5:
68:1a:6d:56:97:8b:18:71:03:e0:63:0e:24:99:a1:
a3:09:91:6a:a1:04:eb:eb:bb:d5:35:75:80:ef:a5:
e4:df:28:db:59:a5:77:39:a9:53:b5:d1:bf:97:59:
44:b0:b7:17:06:10:63:88:ad:7d:a5:84:99:73:fc:
c4:58:d2:21:c8:33:44:93:44:5a:75:af:6f:c5:fe:
13:f9:3b:e0:6b:fe:c4:74:69:ed:47:be:4e:e0:bb:
11:46:a4:68:e5:29:5c:6e:6c:81:bd:1e:97:38:bf:
86:ce:c2:b0:78:98:5a:a0:06:de:04:ef:bd:bf:68:
00:41:4d:12:d9:cd:ed:bf:a8:2a:81:b9:31:ae:48:
fb:fb:a2:0f:5c:0e:e1:1d:a8:85:41:ab:9a:fe:bb:
97:89:2a:cd:65:aa:65:70:2b:c4:ca:4b:0b:3c:c8:
fc:9a:2d:f1:6b:24:d3:36:6a:55:70:95:e9:18:fc:
cf:1d:42:82:8a:02:bb:5a:d4:b1:6e:67:26:88:1d:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:B5:EF:0F:46:6B:B2:5B:61:51:12:FF:A4:4B:80:FF:FA:4D:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602DE5985D9411F1A4D8F0FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.2.0-154.218.5.255
Signature Algorithm: sha256WithRSAEncryption
bc:97:d1:c9:81:ed:d2:1b:f2:9f:ec:ce:76:b5:45:00:ad:42:
b0:03:b9:e2:8a:e5:d0:10:6b:48:6a:3b:1d:40:60:77:43:12:
5c:71:a5:c6:78:14:eb:4d:b3:2c:07:7a:9f:48:18:23:8d:9d:
87:4a:37:b6:e1:19:a7:c4:df:ad:11:c5:f4:29:7d:e6:c7:90:
bd:4e:c6:43:6e:ac:2b:fc:33:df:59:e6:3b:df:fc:1b:08:c9:
29:c5:e6:39:a5:d1:16:8f:0b:dd:a7:be:96:84:1d:52:db:96:
83:8a:d2:60:92:73:d8:2c:73:a7:50:9d:0b:c0:fb:8b:3e:29:
8e:57:b1:6e:b6:2d:d8:fb:bb:ff:f4:03:80:b9:1f:ae:a8:46:
b7:c4:58:0d:92:cd:aa:4e:50:6c:5d:dc:d9:ec:e0:b9:ff:83:
37:ee:4e:9a:ee:ec:c2:b7:8b:31:2a:32:36:1b:eb:9e:73:13:
d0:4d:5f:e9:0e:4d:83:e6:f7:62:c9:42:5f:ad:df:7b:e8:5f:
e3:26:db:c0:d8:e3:a6:e9:0b:59:3b:c9:f7:6f:ce:28:4d:3e:
84:ca:e2:e5:eb:5c:93:2e:da:d6:e7:5d:fe:e0:7e:9e:6d:69:
f1:52:0b:bd:4e:60:f1:54:46:2a:0f:8a:2d:13:9c:f0:de:65:
94:d1:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:47:26 2026 by rpki-client