Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19131FD0545611F18A2FA6B1CE1D38B0.roa
File: 19131FD0545611F18A2FA6B1CE1D38B0.roa (raw, json)
Hash identifier: ejnGTNa5XB34/a3j/TFgbk7Y5FVRAt1bpzPAfIEspa0=
Subject key identifier: 93:72:6B:F1:5F:B6:F4:5C:16:61:78:A1:06:B8:AA:A1:7A:7D:E8:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19131FD0545611F18A2FA6B1CE1D38B0.roa
Signing time: Wed 20 May 2026 14:13:39 +0000
ROA not before: Wed 20 May 2026 14:13:35 +0000
ROA not after: Fri 26 Jun 2026 14:13:35 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117992 (0x1cce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 14:13:35 2026 GMT
Not After : Jun 26 14:13:35 2026 GMT
Subject: CN=6a0dc193-9a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:89:66:5c:69:24:b4:7e:97:1f:ab:0a:57:
2d:d1:cf:8a:89:b8:c4:10:75:31:05:f0:e8:0c:18:
19:48:39:73:6a:da:3f:c0:f7:3c:3f:62:c4:7b:83:
39:2d:69:00:ed:e8:64:7a:70:f7:ef:32:12:e8:cb:
f9:28:e0:de:6e:8d:5b:f4:53:f0:dd:f1:75:4d:74:
91:5c:78:9c:69:08:26:79:7d:59:76:ab:63:3b:ae:
19:d7:c7:87:0e:e1:ac:51:98:d5:8a:59:32:13:51:
d3:81:1b:8d:35:34:54:0e:09:7e:4b:59:5f:44:a5:
60:58:cc:0f:5e:80:c6:61:37:7d:ca:f4:16:3e:3b:
8b:f9:38:1f:f1:e5:b5:13:1d:3a:a7:cb:82:bf:cb:
2c:48:6a:a3:c3:50:a6:7d:9d:ca:76:0c:db:e3:fe:
06:05:5a:73:b5:ca:9a:40:58:c7:76:eb:ac:f9:71:
a6:b6:f2:88:88:08:e3:b3:fd:b1:1b:c2:46:ee:99:
b5:bc:10:c3:5e:0d:a3:c6:9a:e5:42:ad:b6:0d:c9:
6c:7b:74:a4:b8:85:6f:b1:a4:08:1e:f4:b1:9e:93:
7d:22:b8:23:ba:c6:47:97:3c:9a:95:6a:87:81:92:
a9:58:d5:e5:99:d4:79:22:7b:89:40:79:65:1d:14:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:72:6B:F1:5F:B6:F4:5C:16:61:78:A1:06:B8:AA:A1:7A:7D:E8:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19131FD0545611F18A2FA6B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.66.255
154.94.91.0/24
154.94.122.0-154.94.127.255
Signature Algorithm: sha256WithRSAEncryption
cc:cc:88:c1:bc:0c:70:df:ca:67:e5:2e:ad:14:d1:9f:dd:8f:
ae:5e:71:74:d2:82:01:c8:1e:90:94:10:32:0b:ce:7a:aa:8d:
4a:ab:5c:57:a7:7b:49:f5:e4:03:43:5b:2c:b1:6c:8c:f8:3b:
80:eb:2c:d4:dd:42:2d:f4:1e:4e:59:1d:70:a5:8e:7e:47:bf:
a2:8e:ff:73:3e:fb:2f:4f:54:29:1f:45:39:9f:9d:d7:ca:d1:
7e:f6:5c:0c:1e:d9:89:37:59:a5:fb:a0:77:e2:d1:13:41:40:
8a:ac:92:fd:d7:a4:a6:13:2e:75:89:e2:6a:3d:de:31:0e:c4:
73:99:f2:a1:84:02:b7:2a:f5:f4:54:13:4a:f2:73:52:6e:d3:
ed:3b:c2:e2:c8:e8:97:86:ee:0f:6e:c1:e3:72:10:d1:d7:68:
f9:a2:55:b2:72:76:0e:01:74:7f:54:a5:a2:af:a6:01:ce:b6:
84:44:6b:94:5f:06:68:85:78:34:59:9b:a3:71:15:af:97:3b:
42:39:93:5f:80:55:ac:77:0b:10:8f:de:55:e3:93:98:ee:36:
b6:c8:4b:72:eb:e4:32:5b:2e:7e:16:02:a4:4c:e6:f1:2b:83:
75:a1:0f:23:0b:a0:5b:1d:af:5b:2c:c0:c2:d4:54:9b:b0:93:
78:2c:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:54 2026 by rpki-client