Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E73D34985E9411F1B27EE309CF1D38B0.roa
File: E73D34985E9411F1B27EE309CF1D38B0.roa (raw, json)
Hash identifier: rUr2BAg/4oAf0emZ7xvKCvECLg6EYi+q+z/D2nJ5Vgg=
Subject key identifier: 5F:2D:E8:64:7D:7B:D6:91:F6:44:EE:CB:A5:18:56:D8:A9:E2:5E:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D144
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E73D34985E9411F1B27EE309CF1D38B0.roa
Signing time: Tue 02 Jun 2026 15:08:26 +0000
ROA not before: Tue 02 Jun 2026 15:08:21 +0000
ROA not after: Thu 09 Jul 2026 15:08:21 +0000
asID: 151352
IP address blocks: 154.82.136.0/23 maxlen: 24
154.82.136.0/24 maxlen: 24
154.82.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119108 (0x1d144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 15:08:21 2026 GMT
Not After : Jul 9 15:08:21 2026 GMT
Subject: CN=6a1ef1e9-6745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:5c:b5:eb:c9:19:2d:51:ba:5b:dc:0d:24:
b1:0c:26:90:cf:a6:5a:4c:50:e4:87:97:26:e7:ff:
f9:22:a4:92:f3:50:dc:f3:fd:db:57:29:86:8f:5e:
ef:00:fa:21:6d:24:ac:d1:9d:42:00:56:ef:3c:8d:
b0:a4:bf:f6:ee:8a:d2:ca:ce:e1:50:e2:8b:68:78:
e7:d3:46:75:e5:e2:32:fb:15:8b:2e:84:ef:29:62:
d0:f0:01:6a:c4:cd:20:16:8d:b1:28:cd:70:26:ee:
9c:46:e6:6d:24:9a:20:13:d3:52:9f:21:90:59:58:
c0:b2:1d:ea:37:dd:55:44:b0:ab:ab:c2:2a:8f:e0:
cb:7c:c5:59:cd:22:77:91:8c:ee:22:19:34:e5:88:
e1:03:78:5b:7c:de:0c:f8:e2:d6:7b:53:9e:8b:a3:
46:db:91:e7:3d:f3:44:61:c0:f7:4a:f1:4e:c5:db:
c3:24:cc:79:ad:d3:7d:ef:39:a4:14:1f:58:c2:d7:
51:e9:0f:48:8b:78:5e:22:ce:c7:91:92:d7:03:fa:
35:6f:ea:c1:4e:48:80:30:79:d5:7f:4c:c5:37:d0:
41:ed:b4:4f:3b:79:0c:0e:1c:a9:4c:44:52:f4:42:
f7:32:93:83:62:d3:b9:6c:1a:86:25:71:1a:a8:2c:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2D:E8:64:7D:7B:D6:91:F6:44:EE:CB:A5:18:56:D8:A9:E2:5E:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E73D34985E9411F1B27EE309CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:cb:20:2e:94:fa:8f:26:5f:6c:a6:3e:14:59:20:31:97:91:
86:81:e4:d1:95:8c:e1:ee:be:b5:64:36:14:e0:15:68:3c:d7:
ad:73:a9:14:7b:10:2b:09:35:6e:1c:d7:3d:69:5a:ce:85:39:
7b:96:5e:36:c8:d2:b8:f6:d6:3a:36:f8:a9:cc:fb:7d:70:cb:
ff:cb:db:ba:35:0d:16:32:1d:c0:66:90:9c:4b:52:b3:93:62:
1b:5e:76:b2:47:e1:9f:f2:dd:19:c8:2b:e1:48:9e:c6:19:1d:
7b:82:a0:b6:41:9d:ea:b2:75:83:05:3d:46:d3:fd:f2:34:ea:
7c:0d:33:cc:f8:6d:ea:5d:4a:c4:18:24:d7:4d:95:96:34:65:
5f:47:55:c9:8c:d8:15:e3:6d:a9:a4:ea:f2:00:d9:e5:9d:9a:
bf:53:e7:46:07:e3:ed:45:0b:62:5a:b9:6b:e2:17:e2:01:28:
d7:5d:72:5d:f3:52:37:ec:21:4a:8a:86:c7:24:7e:d4:06:88:
fa:be:5b:c9:09:e9:f5:87:69:03:1d:ac:d7:24:3c:4a:f2:8c:
ae:dd:d7:e2:1d:a3:01:1b:be:48:e1:42:33:c8:7a:5e:af:e2:
29:78:84:90:20:02:f8:75:6b:4a:eb:25:89:8e:5d:9b:4d:3d:
6a:8b:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:06 2026 by rpki-client