Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14EC5E94542411F19ABC2305CF1D38B0.roa
File: 14EC5E94542411F19ABC2305CF1D38B0.roa (raw, json)
Hash identifier: qoEy5YKVfDeEIT8YDGx7+P19q9GEZgjIVeshv4scsiw=
Subject key identifier: 71:56:B1:0D:76:A0:79:EA:E9:26:10:B2:1F:99:59:50:E5:59:D7:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14EC5E94542411F19ABC2305CF1D38B0.roa
Signing time: Wed 20 May 2026 08:15:37 +0000
ROA not before: Wed 20 May 2026 08:15:33 +0000
ROA not after: Wed 19 Aug 2026 08:15:33 +0000
asID: 400619
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117928 (0x1cca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 08:15:33 2026 GMT
Not After : Aug 19 08:15:33 2026 GMT
Subject: CN=6a0d6da9-8878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:2a:58:c4:e9:b0:9e:db:cd:92:00:07:2d:
fc:0b:f3:12:c5:46:36:48:be:c8:dc:ee:97:c7:92:
90:76:db:3b:53:fb:34:ad:09:c9:dc:d4:37:a4:a5:
21:2e:34:e7:b0:b3:fe:82:66:5b:99:66:30:f6:09:
a4:a7:2d:7e:65:d3:0a:09:fb:14:a3:c5:58:05:8d:
1f:e4:01:17:be:1c:40:e5:c7:5d:dd:4e:d1:53:d7:
82:7b:f4:f4:dd:aa:8c:eb:7d:23:b4:07:4c:4f:dd:
17:44:dc:e2:ee:38:61:86:18:aa:13:34:7a:13:e3:
07:fd:17:7d:56:3c:0b:c4:82:0b:dd:89:9d:d3:9e:
78:a7:b8:b9:57:e5:aa:dd:3a:75:ea:07:8f:ac:7c:
3a:87:94:b9:89:83:ef:56:5a:45:8d:fe:07:c0:88:
44:13:6b:fb:68:ab:06:a6:3a:81:9b:e0:46:70:c5:
6f:44:5a:91:28:ba:a7:dd:f7:fd:8d:6b:66:1b:78:
98:bb:51:c3:99:e7:5e:22:61:bc:3e:c8:0d:1c:63:
8d:53:72:97:e4:44:bf:26:47:30:27:ea:52:51:93:
f7:df:85:ba:b7:b5:52:65:66:b6:49:a9:9e:1c:4e:
c2:53:04:00:9b:0f:38:e5:10:2f:67:a9:0f:66:aa:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:56:B1:0D:76:A0:79:EA:E9:26:10:B2:1F:99:59:50:E5:59:D7:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14EC5E94542411F19ABC2305CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
85:6b:b5:43:a3:b5:29:6a:9b:03:d9:fe:64:76:ed:8f:cf:be:
18:98:78:71:82:76:59:4b:e2:1b:ac:2f:bd:2c:04:d1:4e:3b:
d1:a6:04:32:9e:c6:fd:65:b2:ee:8e:3d:ab:05:ab:7c:08:29:
c3:18:ae:40:e1:28:1e:70:5f:d3:48:4b:89:74:f9:2f:ae:77:
cd:61:25:cf:29:cb:15:ed:ff:f3:2e:70:35:90:00:e3:f5:a2:
f3:27:eb:03:01:1f:ba:15:72:82:f2:cd:f3:41:df:bf:a5:d4:
eb:7f:b6:de:08:b2:a3:f2:74:64:28:66:05:89:29:82:7b:c1:
56:e4:be:eb:50:b0:ec:f1:75:8b:d9:bb:f4:87:65:a4:a6:a3:
fe:14:a6:d3:4c:14:57:13:7e:9a:cc:6f:ec:88:50:9b:8f:ee:
7b:b2:99:bd:a5:e3:80:40:2e:7a:55:33:44:07:4f:64:07:9a:
bb:ce:5b:1a:5c:35:44:3f:87:3b:ca:8e:8c:3b:04:5d:98:62:
70:4d:cd:55:85:00:03:e2:8f:2e:ec:da:80:0c:14:86:6b:70:
45:77:f3:66:55:b9:81:4a:c5:ec:ee:86:a2:5d:c1:06:e5:c5:
52:80:33:83:92:05:61:c4:a3:cd:ce:9c:57:dc:c3:90:88:37:
c7:a1:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:09 2026 by rpki-client