Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50EA49C85F2E11F182B1A9B4CE1D38B0.roa
File: 50EA49C85F2E11F182B1A9B4CE1D38B0.roa (raw, json)
Hash identifier: fBmEG5Xddg0JQYJvw8vbnHFR75Py1fzu3/5nO9qJI68=
Subject key identifier: 48:AC:D7:B0:FE:AD:D4:3B:EB:B6:B9:06:7B:92:04:5A:9C:5D:E5:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D175
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50EA49C85F2E11F182B1A9B4CE1D38B0.roa
Signing time: Wed 03 Jun 2026 09:26:36 +0000
ROA not before: Wed 03 Jun 2026 09:26:31 +0000
ROA not after: Fri 10 Jul 2026 09:26:31 +0000
asID: 17497
IP address blocks: 154.90.174.0/23 maxlen: 24
154.90.174.0/24 maxlen: 24
154.90.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119157 (0x1d175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 09:26:31 2026 GMT
Not After : Jul 10 09:26:31 2026 GMT
Subject: CN=6a1ff34c-d2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:55:2c:ef:a1:a7:9a:77:e6:c8:57:c8:51:
57:13:31:84:e2:d0:80:97:93:a6:90:31:4e:45:26:
b7:b7:9a:6b:ef:80:d7:c6:2a:cf:db:51:b5:d5:14:
b5:8e:7c:07:57:4f:e3:d4:11:6c:d6:29:3d:da:4b:
a0:d0:51:1c:b6:1b:1e:49:2e:d3:87:86:0b:22:df:
7a:d7:df:40:08:ea:af:1f:74:bc:7e:a7:5e:b2:89:
55:e3:fd:5d:a0:b0:77:2b:6f:dd:01:68:56:81:ac:
ae:62:52:71:17:00:db:a9:b3:8c:82:6e:65:61:2d:
80:3b:a9:af:46:70:4d:57:2a:3a:84:8d:16:1c:5b:
42:f5:7e:9c:2f:61:76:03:99:08:12:e6:30:a4:79:
9d:88:ee:4d:77:a9:d1:d1:bd:dc:26:94:4d:69:f7:
a1:af:f1:a9:04:a0:3b:ee:c8:c8:e2:78:4b:63:be:
21:ce:4a:84:4f:46:c7:85:13:c4:3d:ca:74:60:9e:
76:0d:22:02:c7:f2:99:8d:c8:80:88:c3:14:17:b0:
a0:d4:62:a9:55:52:ad:fe:42:f6:3a:ef:bb:66:a4:
f7:82:ff:76:ff:f8:dc:a8:78:e4:2f:39:d3:f3:3d:
46:df:a8:50:a7:f5:41:b3:95:b0:b7:d7:3b:91:76:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:D7:B0:FE:AD:D4:3B:EB:B6:B9:06:7B:92:04:5A:9C:5D:E5:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50EA49C85F2E11F182B1A9B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.174.0/23
Signature Algorithm: sha256WithRSAEncryption
25:c3:93:72:06:89:0c:42:d5:73:b4:d5:ce:02:92:be:e5:9b:
72:2f:1f:c7:34:65:f6:ad:84:c3:93:da:4a:af:1c:b6:98:0f:
54:9d:bf:96:1a:ca:c1:ce:b9:3f:cc:9d:8a:99:5f:6a:6c:ba:
3e:2c:9f:7b:27:bf:7e:78:50:25:13:ca:e0:dc:b4:fc:79:16:
2c:a4:ea:e1:64:6d:55:c9:d8:6a:0b:0b:35:e1:f2:15:8a:fa:
67:c1:75:bd:58:d8:9b:2d:e4:54:a3:0b:36:57:bb:94:66:f7:
04:5b:0e:55:3f:bb:26:c4:fc:3c:45:89:c9:86:7a:05:4c:33:
aa:58:5e:58:60:d7:e5:2d:38:53:fe:c6:f1:f6:f0:3f:32:b4:
5c:43:aa:a3:5d:be:45:8c:ea:1f:e3:e1:b4:75:9d:33:83:c4:
46:9b:1b:93:c3:82:11:ee:f3:9a:fc:b0:86:5b:5a:3f:1e:51:
94:ac:ef:24:8b:47:56:4a:4a:b2:26:db:66:84:81:d9:fd:99:
78:f3:15:9f:2a:5d:87:84:01:b9:94:56:69:5e:88:6a:00:07:
e1:76:fb:b2:c6:d2:33:e0:33:d0:9c:64:e2:23:d6:a9:98:f5:
69:07:08:84:55:07:c9:56:28:11:48:e6:f8:68:3f:1c:f7:df:
a7:45:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:57:02 2026 by rpki-client