Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3593E054550F11F19A9471A1CE1D38B0.roa
File: 3593E054550F11F19A9471A1CE1D38B0.roa (raw, json)
Hash identifier: popjPXUcne7D8985fzG/tPhDdjhUgzqBy0lny0DwyyQ=
Subject key identifier: 74:10:20:C0:F2:2D:6F:36:14:B6:A4:96:F4:6B:76:96:E5:27:92:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3593E054550F11F19A9471A1CE1D38B0.roa
Signing time: Thu 21 May 2026 12:18:44 +0000
ROA not before: Thu 21 May 2026 12:18:39 +0000
ROA not after: Wed 19 Aug 2026 12:18:39 +0000
asID: 400619
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118098 (0x1cd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 12:18:39 2026 GMT
Not After : Aug 19 12:18:39 2026 GMT
Subject: CN=6a0ef824-4019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:b8:2a:4d:56:25:bd:fe:be:46:23:a0:c9:
75:e0:0c:9c:d5:f9:f1:66:94:85:a8:15:b8:03:83:
1a:2a:e4:bd:34:72:ea:cb:5b:89:14:02:1a:eb:ad:
8c:0e:90:89:dc:60:a9:80:e3:37:fc:18:4d:a8:9b:
7f:9f:71:fe:94:34:67:2f:c9:42:51:35:e3:b1:17:
81:ed:4d:f4:6e:4c:aa:09:5c:5c:81:c8:cd:47:e6:
74:b9:a1:81:0c:74:29:48:9a:e6:23:38:fb:e6:a3:
e4:31:45:09:48:ea:3c:e6:67:2a:43:bf:d2:f2:c2:
3e:2a:c1:b3:dd:aa:e9:09:d3:39:d5:9d:a8:70:d0:
9c:ae:de:f2:84:5a:3e:a6:74:b2:53:1f:43:ed:d6:
33:39:02:99:50:22:f4:d8:a2:ea:94:59:1e:02:11:
b0:b8:5a:8f:e9:f2:14:9d:d5:3e:76:17:23:ad:7c:
8c:32:08:65:5e:52:fd:03:28:24:db:a8:06:f7:3e:
72:98:a9:72:3b:76:a2:73:e4:0f:c3:07:ce:10:5c:
28:33:00:fc:87:a2:c1:09:8c:82:10:0f:3a:3e:4a:
a1:8f:c4:db:58:9e:c6:e6:81:f3:b3:7f:4a:68:e4:
5d:7a:aa:5e:4d:75:e4:30:09:28:f3:11:80:0d:cb:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:10:20:C0:F2:2D:6F:36:14:B6:A4:96:F4:6B:76:96:E5:27:92:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3593E054550F11F19A9471A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
11:dc:51:7d:1f:53:39:50:2e:d4:c5:a0:1c:72:0f:ad:19:f7:
0e:69:2a:45:2d:95:23:ae:f1:4d:43:c4:48:dd:2b:7d:43:2b:
ef:82:c9:35:a3:f0:19:bb:fc:1f:9d:74:e4:97:e2:6a:21:42:
64:e9:68:07:57:1c:51:c0:5d:48:93:7f:18:51:0c:09:cf:f8:
a5:12:5d:6c:96:9a:c7:75:84:d4:8f:65:b4:21:c2:48:2f:92:
c7:cb:f4:58:be:c5:ea:9f:90:36:84:51:d5:b3:1f:ab:e7:8d:
9a:b1:81:75:fc:5f:8d:4f:41:91:7d:1f:0f:a1:54:a5:07:4a:
1a:09:53:9a:c1:66:fc:6d:f6:09:45:cf:2f:11:96:20:e7:38:
88:ae:2c:5d:b2:50:ee:fe:b2:92:20:2c:86:b6:8b:c5:ca:d8:
5e:eb:01:61:2e:ba:ab:ca:2d:ec:2d:5e:9e:72:88:1a:d9:27:
8a:c6:06:77:c3:91:c2:94:28:9c:d9:e1:f8:de:5d:5c:f4:38:
44:a2:51:06:44:2e:32:20:dc:e1:53:d9:b8:2c:7d:8e:5d:d2:
ae:38:7d:ee:b3:03:ac:ed:56:10:e3:55:32:7e:23:12:59:da:
55:c2:16:e1:c9:0a:13:47:ca:a9:04:6e:2a:00:d6:d5:28:d7:
91:e2:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:49:36 2026 by rpki-client