Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/201BFC0E590911F18118DADACE1D38B0.roa
File: 201BFC0E590911F18118DADACE1D38B0.roa (raw, json)
Hash identifier: H9MI1/5b0CATIyeazE6leXM2NImML1Gb7NzPAh2bCug=
Subject key identifier: 75:78:85:AC:0D:E3:1A:F6:99:0B:65:D2:62:7E:4D:6D:03:62:53:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/201BFC0E590911F18118DADACE1D38B0.roa
Signing time: Tue 26 May 2026 13:45:16 +0000
ROA not before: Tue 26 May 2026 13:45:11 +0000
ROA not after: Tue 09 Jun 2026 13:45:11 +0000
asID: 154177
IP address blocks: 154.90.44.0/23 maxlen: 24
154.93.37.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118729 (0x1cfc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 13:45:11 2026 GMT
Not After : Jun 9 13:45:11 2026 GMT
Subject: CN=6a15a3ec-c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:0d:c4:b1:68:b5:ee:9f:e4:8a:e9:09:5b:
c8:27:68:c8:df:7f:b6:6c:e4:f7:7c:39:82:fb:c1:
af:29:4a:45:dc:14:fe:47:a1:8b:dd:8f:91:3d:f1:
14:e7:be:3e:33:29:a1:1c:48:e3:a0:02:a5:1a:ee:
ed:a7:98:0d:d4:f0:23:dd:48:cd:a4:79:3c:98:2e:
50:b8:b0:19:4d:8f:6c:d6:e6:55:30:f6:29:fd:2c:
2a:a8:17:ea:f4:fe:fa:8d:39:ec:31:c9:ec:a0:f4:
95:9e:9f:a0:21:f1:d4:25:57:10:90:0f:d2:08:81:
d6:3b:28:11:d5:64:d2:ce:b6:aa:d3:84:8b:1b:d4:
8f:b1:1f:d7:a1:3a:59:dd:c3:dd:b7:bc:53:91:77:
9a:df:66:89:68:e8:f8:e1:8c:45:f3:df:82:55:fd:
e9:62:94:35:bb:ae:e7:ba:9c:f1:3b:2e:52:57:cf:
4b:af:06:bf:d6:e9:63:96:92:d3:36:23:01:53:7b:
2e:67:66:c3:39:89:e7:78:11:6d:cc:e0:b0:ce:f9:
a9:a4:2f:81:82:a2:d8:57:5d:30:64:fe:77:39:9e:
7e:ff:d2:89:73:d8:b5:5d:61:4e:c2:f0:21:72:f1:
a9:ce:54:f7:8f:0e:52:e3:fe:fb:85:00:0e:3e:0b:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:85:AC:0D:E3:1A:F6:99:0B:65:D2:62:7E:4D:6D:03:62:53:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/201BFC0E590911F18118DADACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0/23
154.93.37.0/24
154.93.51.0/24
Signature Algorithm: sha256WithRSAEncryption
40:53:31:7d:07:09:c3:c7:3c:5c:33:97:82:34:46:78:49:4a:
99:99:63:30:41:12:83:d5:9a:99:f5:4d:ff:a9:31:9f:48:b8:
c6:a7:b2:ab:88:bc:53:16:27:3b:d3:8f:18:bd:86:a0:e1:c3:
0d:92:e1:f3:3b:34:e6:b5:90:6f:dc:b0:5c:2b:c9:30:bf:06:
e2:90:2b:fc:5f:88:7f:ca:90:a8:75:7d:f9:7c:d7:a4:36:aa:
78:9d:e0:c0:6a:67:99:72:19:ec:94:50:8a:c8:cd:e4:30:03:
66:99:31:79:d7:46:2e:73:9e:9a:75:fa:c5:64:4f:cf:82:76:
4a:18:17:a6:2c:81:d4:46:03:ec:8c:57:5f:a5:86:f6:54:0f:
09:fe:f7:c5:95:74:97:2e:85:7e:2a:a9:d1:e3:be:86:50:11:
9b:eb:08:98:db:fa:71:65:8d:10:ba:5a:8a:b3:b5:91:a3:ce:
0d:40:46:61:27:9d:e4:8a:00:c6:b5:24:ad:73:6c:41:79:49:
bb:3f:83:cc:e1:ce:97:fe:d1:38:27:6e:c2:f0:84:60:6b:81:
bc:a0:20:85:70:29:62:b2:62:30:0b:35:e9:5c:ac:ec:14:ae:
2d:09:d7:41:03:0e:b1:64:38:df:d9:cb:5d:be:ae:0b:34:da:
53:c5:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:01 2026 by rpki-client