Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20539E52574711F19BEBD3AFCE1D38B0.roa
File: 20539E52574711F19BEBD3AFCE1D38B0.roa (raw, json)
Hash identifier: oNrobZAj6PYLB2yDp6rbNJq9kybiUqn1aRg+3/bSRLQ=
Subject key identifier: 38:3C:91:E4:E8:C0:6B:BB:C5:EE:22:4E:37:71:95:2E:11:39:F5:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20539E52574711F19BEBD3AFCE1D38B0.roa
Signing time: Sun 24 May 2026 08:04:02 +0000
ROA not before: Sun 24 May 2026 08:03:53 +0000
ROA not after: Tue 30 Jun 2026 08:03:53 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118451 (0x1ceb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 08:03:53 2026 GMT
Not After : Jun 30 08:03:53 2026 GMT
Subject: CN=6a12b0f2-e73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:79:a3:e2:a9:84:31:0e:a3:eb:27:94:51:
f4:62:eb:21:f0:04:1d:e0:e4:1f:5e:51:4e:09:9f:
c1:89:4d:0e:11:4a:77:9d:76:63:db:c1:c7:6e:c3:
73:bb:df:c4:e7:0c:df:df:8b:77:05:a9:4b:a4:17:
0d:ff:14:3d:16:19:14:45:a6:16:e4:d3:d8:cc:23:
a9:1b:4c:56:49:d0:7b:48:49:a4:2e:3f:f2:80:18:
2c:b1:e3:e4:83:d6:7a:3f:42:c3:9d:e5:ac:7f:5d:
d6:ea:88:c0:22:52:93:45:39:09:00:b2:ab:9b:55:
e3:b4:97:40:24:68:01:bf:0f:d0:56:aa:96:d2:8f:
68:75:b2:fe:e3:f7:b5:af:01:a9:fe:42:c6:72:67:
4a:81:a8:f1:08:20:96:1b:b7:84:85:f5:73:26:c8:
99:4c:f8:c9:1d:5f:98:ed:99:26:0b:14:55:9a:b1:
07:71:4c:56:d7:16:77:25:f5:fa:27:25:86:ca:2f:
2d:25:73:63:6a:28:a5:96:42:be:c7:f1:f7:b4:6a:
e4:80:bb:36:11:59:e0:ba:63:0d:f0:9e:d5:38:c0:
07:9b:14:f6:3f:fe:61:09:86:95:3c:17:54:5f:6f:
54:12:b8:63:eb:a4:ab:3a:29:1a:44:30:14:b2:43:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:91:E4:E8:C0:6B:BB:C5:EE:22:4E:37:71:95:2E:11:39:F5:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20539E52574711F19BEBD3AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:ed:59:a2:4b:68:ca:87:90:42:a3:30:76:47:71:f5:0f:f3:
78:0c:ff:91:65:42:16:cd:ce:2c:ab:e1:50:7a:d4:9a:d1:60:
32:6f:3f:85:88:65:89:73:3c:12:c8:e4:71:cb:cf:f1:89:62:
74:74:e8:d8:88:aa:e3:f0:bb:74:31:42:54:dc:16:a0:cb:a5:
10:e5:fd:33:f3:1b:b2:e5:8e:41:55:e0:58:54:7c:49:c9:1d:
60:ad:64:c6:e0:7d:80:30:e7:5c:81:fe:2d:0a:5b:0a:b2:96:
37:dd:f8:cf:28:58:11:59:d8:96:79:33:a2:87:db:d3:f2:59:
b4:7a:85:55:9d:64:ec:c7:6d:4c:f6:08:31:8a:fa:89:66:c8:
b3:37:53:52:4f:33:2d:93:4a:cd:73:f8:b3:52:59:e5:26:c9:
4e:73:57:2f:ba:bc:8b:ac:a8:42:6e:8f:b5:57:65:dc:44:38:
1d:ee:f2:a3:91:8f:98:28:ac:00:60:e2:ed:b5:04:d8:2c:dc:
8a:3c:50:0b:73:92:57:65:f8:87:a4:b8:3c:9c:af:24:77:63:
8f:6b:c5:75:45:04:f7:8f:8f:69:30:07:e3:74:ed:79:6f:8e:
ca:f5:33:40:70:b8:3b:19:8f:eb:f5:11:05:15:e8:b4:dd:32:
43:52:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:00:52 2026 by rpki-client