Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDB9AA051CB11F1BD34EEC2CE1D38B0.roa
File: 0BDB9AA051CB11F1BD34EEC2CE1D38B0.roa (raw, json)
Hash identifier: EezcT3slBD2smNGNnIs3YsNbEp2VCQ4qZi4WtBj/hVY=
Subject key identifier: DB:3D:42:17:E3:39:52:5C:E3:86:CB:2A:27:CC:19:3A:8F:8A:47:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDB9AA051CB11F1BD34EEC2CE1D38B0.roa
Signing time: Sun 17 May 2026 08:33:15 +0000
ROA not before: Sun 17 May 2026 08:33:10 +0000
ROA not after: Wed 24 Jun 2026 08:33:10 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117798 (0x1cc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:33:10 2026 GMT
Not After : Jun 24 08:33:10 2026 GMT
Subject: CN=6a097d4b-31c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:a7:33:67:22:5d:e2:c1:ec:a2:99:45:58:
33:18:6e:f4:f2:e3:f9:a4:5f:9d:42:e9:6b:0b:b9:
e1:67:7b:6e:e4:7c:e4:16:9b:b8:22:42:d6:82:e8:
ff:00:9e:97:dd:ce:a1:e5:03:72:13:42:c2:16:f1:
80:28:39:4d:a6:6b:f7:54:7d:fd:04:60:14:da:7d:
e5:ea:56:a5:a5:50:f3:0d:9f:b4:5c:a9:d1:c4:8b:
2e:10:29:63:c1:7e:bb:0f:f5:25:bf:92:2e:3e:8b:
8e:9f:fa:0f:76:54:a3:69:41:2c:3f:c4:fc:25:5b:
0f:34:83:9e:de:a8:e2:fb:65:c8:3b:2a:c4:5e:f7:
50:6e:1b:fe:7a:90:a6:a1:c8:43:66:89:09:fa:e5:
a0:73:2b:77:0e:3d:ec:13:fb:e4:aa:1f:da:b7:24:
98:05:f3:fa:2c:4d:d4:8f:c6:40:5d:52:b9:5a:c0:
45:58:53:6a:96:aa:56:3e:91:d5:69:7f:37:75:78:
3a:9e:ef:0c:40:af:ee:a2:60:c4:47:74:8a:db:a6:
46:27:70:33:5a:6b:43:9b:15:06:50:d5:4e:8e:20:
00:a3:1a:23:3b:66:1f:13:a3:c8:eb:4a:bb:32:ec:
ff:36:62:77:64:e5:37:27:ad:9a:aa:7b:81:04:e6:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:42:17:E3:39:52:5C:E3:86:CB:2A:27:CC:19:3A:8F:8A:47:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDB9AA051CB11F1BD34EEC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
80:31:0d:a9:b8:41:ce:9f:3d:fd:3d:8e:cc:bc:01:01:5a:a4:
f6:40:12:7e:ba:48:5d:b3:0e:99:9d:62:58:4e:8a:38:31:06:
48:c7:84:0e:86:67:7b:0f:7c:39:76:03:58:08:36:c1:3e:5b:
01:bf:3b:95:05:08:95:79:cc:67:16:2c:6e:de:7b:63:08:00:
e6:c2:d0:af:55:41:3d:b1:79:fb:51:27:7c:f5:af:3e:a0:23:
b0:79:c1:fd:94:8d:e9:b5:a4:55:3b:d8:92:40:5c:92:8e:64:
cd:f3:79:fd:4c:d9:62:98:d1:a4:43:64:8c:28:cc:c8:8c:e5:
f5:5e:9f:e0:7f:00:4f:5c:7b:cc:9d:c9:f5:2d:f8:11:8d:8b:
ff:cf:3e:c3:c2:0b:6c:14:35:17:83:74:70:a0:2e:cf:2b:45:
d5:a5:2e:84:d8:8e:82:2b:a5:14:50:6a:03:c1:66:4c:13:fd:
59:9b:57:19:aa:6e:bc:c9:1b:9a:4c:8b:d0:af:2c:73:76:5b:
1a:fe:5c:dc:15:98:b5:32:d3:4c:ed:49:77:e1:d8:b0:fd:9d:
9c:6d:21:f2:f9:f8:63:9f:92:8b:46:a3:ce:ec:a3:31:50:87:
89:ef:ff:69:2a:f6:a3:02:14:3a:87:a6:90:9d:7b:7c:84:28:
83:c6:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:22 2026 by rpki-client