Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98C60745FF511F198C8D1F1CE1D38B0.roa
File: C98C60745FF511F198C8D1F1CE1D38B0.roa (raw, json)
Hash identifier: cCWOBU6A5XicUG18yv0aRspjoz9BkO7+sHz+6h8w8jE=
Subject key identifier: D5:99:2F:64:C8:E2:BE:6E:F0:05:02:48:FA:C0:81:14:E7:70:64:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D18C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98C60745FF511F198C8D1F1CE1D38B0.roa
Signing time: Thu 04 Jun 2026 09:14:28 +0000
ROA not before: Thu 04 Jun 2026 09:14:23 +0000
ROA not after: Fri 10 Jul 2026 09:14:23 +0000
asID: 138915
IP address blocks: 154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119180 (0x1d18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 09:14:23 2026 GMT
Not After : Jul 10 09:14:23 2026 GMT
Subject: CN=6a2141f4-2e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:ae:c9:27:0e:f6:63:3f:41:70:78:79:63:
36:35:f3:55:31:c1:4c:53:e5:07:fb:2d:af:ed:24:
32:94:ac:52:42:b2:8e:23:1b:a1:9e:2e:6b:12:69:
8d:2b:eb:b0:0a:2d:fe:44:47:58:6f:2b:04:94:4f:
c1:2c:3b:56:e2:4b:92:26:4d:c4:e0:e0:95:03:5a:
c3:32:9e:0e:e8:67:98:35:ca:19:70:07:14:27:cd:
73:42:dc:cd:18:6f:4d:29:39:ef:5e:3d:c1:df:2f:
69:18:63:a0:ba:06:db:5d:c8:57:e8:34:bc:9c:b1:
37:92:57:a3:30:6c:3e:e8:82:e6:97:6c:5c:59:35:
6f:23:35:ef:4b:59:0e:a1:b5:5e:25:be:31:5e:d7:
45:ae:e7:70:be:da:15:26:0d:4f:93:bf:9b:b2:44:
97:d6:9d:2a:e8:0a:1d:ad:00:5f:6b:fb:d8:a3:48:
6d:1f:b2:56:7c:55:54:e3:0b:0a:44:fa:eb:d0:f1:
a6:ef:6e:59:e5:c8:34:b0:b2:5c:fa:9f:b8:d9:bf:
26:28:4b:00:9a:0a:a2:bf:67:d3:4d:0c:7a:da:ef:
c2:e3:b9:8e:51:ce:ab:4c:eb:d6:5f:14:ab:01:94:
79:85:96:a7:9a:e1:f7:7b:0e:4c:c1:c1:89:74:4b:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:2F:64:C8:E2:BE:6E:F0:05:02:48:FA:C0:81:14:E7:70:64:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98C60745FF511F198C8D1F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
154.223.30.0/24
154.223.32.0/22
154.223.37.0/24
154.223.40.0/22
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:fe:18:5c:57:73:07:99:79:c0:ef:5f:17:d4:ca:fe:73:f4:
66:12:c6:67:e3:5e:6e:99:73:c4:af:b0:f3:7e:d8:ee:68:cd:
cb:cc:4e:2a:5a:0e:f9:81:a5:17:e8:c6:e9:67:63:46:80:a0:
d7:68:4a:52:d0:46:13:f1:74:9b:f4:c0:f0:77:d8:ac:3e:3d:
a2:7a:84:4c:27:ed:61:03:13:5c:ed:2c:b6:0b:06:17:1c:f6:
b2:ae:bb:cb:64:ff:73:bc:91:8c:0b:ec:14:75:ef:87:66:55:
f2:29:8e:4c:f0:7f:34:dd:70:16:34:ae:7d:e6:f5:d4:df:70:
f8:cf:3b:74:71:da:6e:a8:11:aa:98:ed:75:d0:f5:6c:23:e9:
f8:57:cb:b5:bc:94:ff:9a:f8:3c:fc:dc:16:f2:ce:75:9e:84:
92:b9:2d:d7:2a:a6:5f:5f:f2:3b:9f:4d:de:9d:91:ed:dd:2b:
68:91:73:af:dc:22:c8:14:b1:fa:ae:a6:e0:25:d4:af:86:e7:
a8:7f:7b:36:16:9a:ca:40:d3:60:9e:db:dd:bd:50:52:7f:f9:
f7:11:0b:1a:2e:06:46:49:b7:1d:b5:a0:18:d6:06:30:68:ca:
16:77:9e:54:10:6a:dd:0e:9e:a8:3d:8d:bf:26:68:09:ae:8b:
dc:25:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:12 2026 by rpki-client