Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ADCA04A5BA211F1BB873B17CF1D38B0.roa
File: 6ADCA04A5BA211F1BB873B17CF1D38B0.roa (raw, json)
Hash identifier: oejbtA9OnF1oKEaINU5HYf1qiafI//MLd/5bPpPFyEk=
Subject key identifier: E7:0B:F2:47:78:39:81:07:47:D1:1E:49:3E:D8:2B:65:BE:FB:A3:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D08F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ADCA04A5BA211F1BB873B17CF1D38B0.roa
Signing time: Fri 29 May 2026 21:07:36 +0000
ROA not before: Fri 29 May 2026 21:07:31 +0000
ROA not after: Wed 01 Jul 2026 21:07:31 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118927 (0x1d08f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 21:07:31 2026 GMT
Not After : Jul 1 21:07:31 2026 GMT
Subject: CN=6a1a0018-561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:35:1e:fc:36:8c:0e:a4:b3:35:87:e4:bc:
63:ef:a0:69:a9:d5:06:b5:fa:f7:34:6f:21:62:2b:
b6:22:df:d6:cc:fa:cd:13:5e:be:e0:d0:ad:87:d1:
0e:59:3a:21:1a:15:ec:da:56:ca:0b:f8:bd:b1:18:
f4:ca:99:b1:b2:a6:8d:a0:4b:c8:0c:0d:d9:4e:75:
e4:e3:47:d2:9b:76:0d:4c:6a:3c:da:ca:0c:5c:9f:
f9:0f:ab:10:2c:5a:cb:7e:c8:81:06:9f:54:55:73:
53:99:a7:d3:e1:52:d8:1b:ac:da:af:74:fc:db:08:
fb:e4:df:14:ae:95:15:a5:43:99:a0:97:97:33:1e:
fb:d4:45:4a:ad:68:12:85:81:2b:ff:71:d9:c0:32:
45:43:70:a8:42:9e:16:2c:ed:c5:1a:6c:d7:17:5c:
8c:e6:f4:57:98:cf:3b:d1:06:d8:d3:c9:a4:f4:1b:
d0:f3:89:33:11:86:8a:5b:58:ec:56:7c:54:04:a4:
51:4e:15:c0:45:a8:17:d3:c4:7d:b8:00:5c:1c:9c:
c1:49:db:82:7f:8f:cd:8b:21:f1:c2:50:73:ea:00:
61:f0:c4:79:71:ed:a2:36:b5:62:76:db:60:b4:58:
7c:87:ee:98:4c:6a:8e:67:e1:bf:a4:26:13:56:7b:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0B:F2:47:78:39:81:07:47:D1:1E:49:3E:D8:2B:65:BE:FB:A3:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ADCA04A5BA211F1BB873B17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.116.0/23
154.195.120.0/24
154.195.131.0-154.195.134.255
Signature Algorithm: sha256WithRSAEncryption
6e:b2:65:b7:81:7e:ee:7b:dd:31:e2:d8:cd:8f:4f:d7:9c:4b:
bd:79:b5:3a:e2:db:c8:c0:02:dd:d4:8a:5c:91:5e:4a:66:c4:
d6:29:75:1e:e3:96:99:9f:9c:92:0d:d5:7d:23:4d:e8:2b:a3:
dc:41:59:51:8b:84:b2:1d:78:c5:66:31:c1:ea:cc:f1:fa:43:
a9:d8:38:4f:db:b9:69:ae:41:9b:12:61:70:67:4c:bc:db:1b:
42:e6:89:a3:76:64:b0:22:2c:e7:42:1c:43:7a:3c:8d:b7:b4:
f4:fa:27:d9:8f:82:92:d4:ba:57:e4:61:ec:1c:8c:fe:1b:20:
e3:1d:a3:fe:b9:2a:1a:87:44:d3:fe:4a:e8:1d:06:b9:e8:ff:
60:b5:a9:42:eb:41:ed:f0:08:68:1f:fc:2a:19:36:24:5b:74:
55:2a:67:92:6f:81:8f:5e:1d:2a:d0:bb:da:a7:e3:db:b7:a0:
1f:0a:08:5f:63:c0:f9:4c:b2:d4:75:98:55:e4:fd:4c:20:5f:
b9:87:c4:8a:a0:bf:31:9e:8e:20:7c:47:7d:c0:7c:31:7c:4f:
f2:ee:d9:0d:14:eb:87:ac:44:3f:20:fd:a6:df:38:19:8f:86:
20:3c:f9:95:40:ec:4e:03:e3:17:a4:80:bb:51:af:f7:2a:cd:
6a:db:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:34:41 2026 by rpki-client