Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDB56E7264BB11F19814FDF3CE1D38B0.roa
File: DDB56E7264BB11F19814FDF3CE1D38B0.roa (raw, json)
Hash identifier: bPDJcGQOCWvSbIfbspZtrA/s7I6dA0Ib3/0LJue4pvM=
Subject key identifier: 84:57:3B:5A:63:B2:CE:E1:BF:01:84:6C:0E:6F:D6:FD:8E:D3:9D:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D27C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDB56E7264BB11F19814FDF3CE1D38B0.roa
Signing time: Wed 10 Jun 2026 11:02:27 +0000
ROA not before: Wed 10 Jun 2026 11:02:22 +0000
ROA not after: Thu 16 Jul 2026 11:02:22 +0000
asID: 22773
IP address blocks: 154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.198.44.0/24 maxlen: 24
154.198.45.0/24 maxlen: 24
154.198.46.0/24 maxlen: 24
154.198.47.0/24 maxlen: 24
154.202.2.0/24 maxlen: 24
154.202.5.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
154.202.13.0/24 maxlen: 24
154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119420 (0x1d27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 11:02:22 2026 GMT
Not After : Jul 16 11:02:22 2026 GMT
Subject: CN=6a294443-7d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:14:75:ca:91:a7:40:4a:e5:67:3f:4c:fc:
3b:ec:ba:d3:bf:aa:e3:bd:4e:bb:75:b5:35:6b:1d:
eb:15:76:a1:bf:f0:ae:3f:b4:f5:85:d7:0f:9d:51:
d5:09:18:a4:2f:9e:58:92:7e:81:82:3a:12:1d:a7:
aa:8a:3f:bc:88:2b:e3:17:37:b2:c7:29:72:8f:ce:
be:98:04:07:15:5b:d7:82:58:ea:a0:2a:16:45:56:
c5:e8:8c:22:50:91:c3:78:50:7e:52:3b:1f:05:58:
6a:21:e6:8d:2f:74:96:f6:07:84:7b:30:78:2d:e5:
1a:aa:b8:45:b1:53:d5:86:5f:07:d6:94:77:ed:52:
60:eb:ab:f0:59:f1:7f:f7:05:a2:2a:8a:e1:74:05:
78:c7:56:8a:47:de:b1:d5:1e:a3:14:5f:c3:92:86:
9e:33:d4:fe:2e:81:f7:01:71:b8:20:63:72:28:5f:
b7:9a:f9:3b:1a:61:5c:54:15:06:ce:fa:f6:da:c6:
25:eb:14:ef:61:f5:e4:66:3c:39:3c:56:91:86:eb:
70:e5:cb:f0:33:d1:7a:6c:77:0c:5c:3c:82:d0:74:
d3:97:54:82:c1:95:04:63:f3:18:b7:0f:0a:b9:7b:
7c:5b:c9:a1:50:69:07:8f:d7:cf:95:d5:e6:63:be:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:3B:5A:63:B2:CE:E1:BF:01:84:6C:0E:6F:D6:FD:8E:D3:9D:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDB56E7264BB11F19814FDF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.30.0/23
154.198.44.0/22
154.202.2.0/24
154.202.5.0/24
154.202.12.0/23
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
90:23:11:76:7f:4c:57:52:ea:a1:9f:d0:ee:5e:7b:b7:cb:13:
95:24:29:e0:67:78:01:12:81:63:f2:54:62:95:e2:c3:3e:4d:
19:75:0d:4b:26:a8:df:1b:76:3f:6b:e7:93:0d:c1:3b:15:1c:
b7:77:c6:e2:93:bb:55:15:e1:ea:a6:ca:5f:e5:6a:dd:49:c9:
99:64:4a:83:f8:45:20:28:d8:22:18:09:6d:d5:1b:21:cb:f1:
a9:b8:f3:d3:e8:4e:c2:00:e6:ec:28:31:5d:3c:ab:27:52:ce:
9f:df:16:85:5b:a2:d8:c9:4c:eb:2a:ac:ee:38:df:73:63:7e:
50:8d:35:97:ad:e0:6e:46:6c:26:33:26:e0:35:9d:a8:3b:37:
ef:a1:2d:cd:e1:07:9b:20:3e:9e:fa:1d:0f:82:a3:da:41:f2:
47:1f:31:2f:25:1a:7a:3b:52:d5:b6:54:a8:50:d5:f8:61:d3:
4a:43:00:69:25:38:06:97:e6:aa:f7:cf:ae:c2:dc:65:3d:7e:
26:a9:db:b6:97:b8:31:3c:61:85:16:ba:19:3b:ff:1a:a8:13:
2f:45:d9:a3:79:e4:4e:a1:5d:20:d7:81:59:57:6b:4b:c5:58:
19:a6:ac:b2:7a:71:9d:0a:8a:e7:ad:39:83:f6:c0:e9:14:c1:
fb:d8:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:22 2026 by rpki-client