Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5089C5285EAF11F1A57EA5A4CE1D38B0.roa
File: 5089C5285EAF11F1A57EA5A4CE1D38B0.roa (raw, json)
Hash identifier: OoHNkrLTslpiQTnKbWwlX+0mBdB4SPVtcwg2JLt6VU8=
Subject key identifier: 05:A2:21:BB:F6:A3:DF:91:36:5D:29:40:6E:A9:A1:7A:C7:31:1C:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D150
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5089C5285EAF11F1A57EA5A4CE1D38B0.roa
Signing time: Tue 02 Jun 2026 18:17:29 +0000
ROA not before: Tue 02 Jun 2026 18:17:24 +0000
ROA not after: Fri 10 Jul 2026 18:17:24 +0000
asID: 14315
IP address blocks: 154.81.11.0/24 maxlen: 24
154.81.48.0/23 maxlen: 24
154.84.128.0/22 maxlen: 24
154.84.132.0/23 maxlen: 24
154.84.134.0/24 maxlen: 24
154.84.152.0/24 maxlen: 24
154.88.68.0/22 maxlen: 24
154.89.1.0/24 maxlen: 24
154.89.128.0/22 maxlen: 24
154.89.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119120 (0x1d150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 18:17:24 2026 GMT
Not After : Jul 10 18:17:24 2026 GMT
Subject: CN=6a1f1e39-3ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:4d:90:3b:54:93:fc:7f:63:11:14:9a:8f:
94:0e:7f:2b:d7:84:4c:5f:6b:78:a5:58:d9:94:c5:
54:73:c0:43:d5:8a:1b:64:22:c8:0e:76:4e:61:59:
01:1b:c2:db:d2:55:81:5b:8e:ea:6c:ff:32:ac:de:
a1:0a:a6:97:8e:9f:f5:e8:c4:ee:ae:37:7c:0c:70:
0c:c8:a5:bc:5e:ef:1f:1d:ef:90:15:a9:be:6e:75:
ec:ca:7c:2e:87:0d:37:a2:10:ec:57:c8:f2:94:dd:
76:38:ff:a1:a0:18:3f:bf:7e:0b:df:4c:2c:f6:e8:
a9:c5:63:61:2f:4a:58:e2:09:21:13:3b:24:7b:ca:
19:e2:d3:a0:24:58:21:ed:61:3c:d6:27:dd:44:b2:
b3:ed:aa:20:6f:7f:78:e0:0f:d1:f4:4d:8e:8c:65:
bf:92:07:97:4d:0a:cc:8e:6d:12:4a:f1:f4:28:62:
a2:90:d9:91:ba:e1:c9:bb:8d:f3:4b:df:d3:08:5b:
f6:91:54:4f:26:fd:f4:55:1c:a5:8e:77:75:13:fb:
0b:0e:8f:b6:d6:7c:49:bd:63:9e:b1:3d:16:2a:05:
8e:d0:aa:2f:fe:5b:c3:35:f3:12:f1:c7:ea:99:32:
56:40:06:1c:5c:20:74:53:09:45:b2:1d:49:81:b6:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A2:21:BB:F6:A3:DF:91:36:5D:29:40:6E:A9:A1:7A:C7:31:1C:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5089C5285EAF11F1A57EA5A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
154.81.48.0/23
154.84.128.0-154.84.134.255
154.84.152.0/24
154.88.68.0/22
154.89.1.0/24
154.89.128.0/22
154.89.136.0/22
Signature Algorithm: sha256WithRSAEncryption
83:77:64:b8:59:4d:f7:ac:67:07:17:b4:7d:be:93:a2:10:ee:
0e:6c:12:87:4c:a4:4f:49:0b:5c:ff:19:83:04:2a:9c:3c:fc:
80:99:03:a2:9b:ff:84:c1:5d:ef:b2:7d:59:0e:2f:39:e3:55:
fe:00:fa:80:f3:80:ac:32:c6:d1:99:82:8a:62:85:53:b3:19:
f0:7b:f4:0c:48:25:2d:06:b7:90:b4:af:f2:13:9b:a8:bd:48:
60:f2:3d:92:28:94:41:af:20:5f:d2:bf:d3:e0:0b:06:fb:91:
8f:ce:7e:49:4d:eb:76:a0:19:e5:1d:7b:b5:cd:0c:ac:73:91:
02:51:72:0b:38:ee:84:f3:ce:42:96:9e:2e:1f:f2:95:c0:bc:
e6:33:51:d0:da:5b:1e:57:57:cf:4a:e7:66:ab:b7:8e:a8:2f:
c3:49:fd:44:0b:2f:f5:f2:e8:3f:f2:68:63:32:ca:5a:48:7c:
d8:8c:e0:7d:10:f3:6e:b3:95:d7:47:e1:72:c1:5e:55:47:68:
65:8b:40:04:ad:a4:bf:b5:47:12:d8:d5:92:85:3c:04:42:c8:
22:30:d0:a8:bf:24:7e:74:5e:a1:d0:fa:ad:4e:32:e5:94:25:
d5:98:c3:78:f3:fa:06:3f:b3:57:99:61:57:86:5e:32:e7:02:
e1:b7:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:20:16 2026 by rpki-client