Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49048DBA54CD11F1B32B360ACF1D38B0.roa
File: 49048DBA54CD11F1B32B360ACF1D38B0.roa (raw, json)
Hash identifier: den5YUq17eYRZwLYPwFy2sbmss7C3rh9RgtEiDnPguk=
Subject key identifier: E5:56:01:3F:52:8D:BA:2F:52:1B:B9:63:DA:87:F4:65:71:07:BD:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49048DBA54CD11F1B32B360ACF1D38B0.roa
Signing time: Thu 21 May 2026 04:26:50 +0000
ROA not before: Thu 21 May 2026 04:26:45 +0000
ROA not after: Fri 10 Jul 2026 04:26:45 +0000
asID: 32043
IP address blocks: 154.193.99.0/24 maxlen: 24
154.193.100.0/22 maxlen: 24
154.193.104.0/22 maxlen: 24
154.193.108.0/23 maxlen: 24
154.193.110.0/24 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Jun 2026 00:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118056 (0x1cd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 04:26:45 2026 GMT
Not After : Jul 10 04:26:45 2026 GMT
Subject: CN=6a0e898a-be56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:59:82:b4:21:61:78:74:ea:c1:a8:88:df:
d8:5d:66:f0:9c:53:6d:57:8d:c2:39:1a:fd:9c:c6:
df:ee:36:fc:5d:45:5b:0c:f6:4f:ee:a2:c4:b1:bb:
0d:16:fb:b8:45:1c:0c:42:0b:04:e8:bb:0a:be:45:
7d:8d:bd:cf:0e:66:32:23:08:b9:1d:0d:a9:48:83:
2f:2a:b3:dc:d4:29:2f:c8:4c:6a:d7:07:62:3d:35:
c8:76:d2:1c:98:7b:b0:a9:f5:63:de:f8:b3:66:32:
ae:fd:f8:f9:2c:bc:a2:56:32:36:74:27:99:5a:56:
4a:53:f6:96:dc:d3:9d:0d:82:a7:3b:5d:59:7a:0d:
d1:30:35:ee:5a:8a:94:4b:32:6a:ce:2c:99:cd:4c:
01:c5:57:f1:e3:c9:18:5e:49:23:67:75:2d:20:97:
47:97:41:c8:a2:27:ad:c2:2d:e1:70:12:e3:e2:81:
ac:4e:3f:70:a3:7e:dd:b9:c6:11:6c:32:f1:ac:84:
da:98:a4:4e:44:d0:ff:de:9a:af:ba:6b:4a:4f:05:
43:0a:61:69:be:51:d3:db:d2:57:8c:cb:7e:66:bc:
1b:8a:9a:1d:10:7a:2c:21:b9:83:b8:34:a9:dd:59:
25:41:22:bf:e2:40:f6:1b:9e:54:ae:a3:65:b8:c4:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:01:3F:52:8D:BA:2F:52:1B:B9:63:DA:87:F4:65:71:07:BD:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49048DBA54CD11F1B32B360ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0-154.193.110.255
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
9e:98:9e:c5:98:bd:98:b5:a5:c5:dc:55:ea:73:aa:37:9d:89:
06:20:54:4c:a1:c0:ac:e8:eb:77:d8:95:e7:32:29:c8:91:ec:
a7:d3:0b:19:5c:e6:63:d4:f7:60:c0:b1:dc:95:0b:28:0c:4c:
d9:8d:30:7c:ea:d9:02:b0:ee:d1:08:be:3f:4e:7e:bf:b5:bf:
59:3b:fa:dc:bf:bc:3e:20:93:e5:f2:94:d4:90:41:36:80:06:
8d:23:db:27:42:75:4c:00:f7:b7:8d:33:07:9e:cf:0a:b2:50:
26:f2:bc:c7:6c:02:e8:09:47:9d:7b:f6:ba:bd:fe:bb:f2:d6:
25:dc:8c:6d:4c:8d:db:c9:58:f3:93:55:0e:d8:b6:42:52:7e:
e2:36:0d:4f:fa:93:5b:31:6b:b0:8a:61:72:a5:6f:13:0a:fd:
69:1e:dc:13:ac:e8:a1:ab:3f:45:69:84:99:46:dc:97:f2:23:
67:6f:7b:24:6f:2b:3f:11:7f:44:4c:5c:1f:50:95:d3:2e:37:
37:25:7e:cf:da:df:cf:1c:8a:26:f8:19:cf:8b:28:c9:1f:74:
36:da:e0:da:47:72:5e:1f:4d:73:ee:3f:14:dc:5b:9d:1f:03:
46:cc:ee:ab:b6:12:e8:2a:81:42:4b:ff:6d:bb:c8:6c:5a:78:
db:8b:d3:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 9 08:06:37 2026 by rpki-client