Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C4777A457D11F1853390E3CE1D38B0.roa
File: 57C4777A457D11F1853390E3CE1D38B0.roa (raw, json)
Hash identifier: /L9IkqzQl9R+us+3ZKf+u8HjUZl8c4hjmalJ7DBdn3c=
Subject key identifier: F5:07:E2:C0:F4:D5:F3:D0:8A:A8:FE:7A:E7:C3:20:CF:E9:10:27:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C4777A457D11F1853390E3CE1D38B0.roa
Signing time: Fri 01 May 2026 16:46:47 +0000
ROA not before: Fri 01 May 2026 16:46:43 +0000
ROA not after: Fri 05 Jun 2026 16:46:43 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116929 (0x1c8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:46:43 2026 GMT
Not After : Jun 5 16:46:43 2026 GMT
Subject: CN=69f4d8f7-0162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:18:be:30:a1:ca:0c:8a:82:8f:b3:f5:9c:
19:6d:a0:26:32:9b:6e:f1:76:bf:79:b2:53:e9:43:
9e:03:2f:48:eb:12:75:14:8e:60:11:85:c2:46:34:
75:32:62:95:73:b9:94:f1:ea:72:ea:40:3c:30:d5:
71:93:6c:68:9d:85:a8:78:ed:51:6c:ce:63:b4:14:
ff:25:b4:38:94:58:4f:78:6b:82:eb:3d:83:02:b8:
0d:b7:4b:d8:4b:05:63:5f:42:82:ad:27:4a:70:30:
95:14:7c:5c:b7:f6:a9:5e:49:98:65:8d:27:4d:ca:
11:b8:7d:7a:cb:c9:21:f1:7d:39:72:4b:ec:f9:43:
4f:ac:ac:66:64:f5:b4:67:96:74:3b:0e:b3:d3:f6:
82:c2:d4:f1:5b:9f:27:6e:8a:7e:08:10:a9:6d:61:
a6:de:88:d9:38:91:0d:88:35:91:a8:ac:ac:8a:f5:
fd:f1:89:76:34:8a:55:2f:3c:28:cf:97:bf:36:90:
7f:55:e3:5b:fe:e7:3f:18:5b:6e:8b:0b:6e:5a:fb:
6c:5c:5b:ce:02:3f:15:1d:8b:71:b4:af:f5:2c:8d:
c7:60:f2:a7:e6:82:a2:8a:25:1a:66:a1:7f:fd:52:
0d:1d:78:ca:a9:76:5f:2c:46:ed:96:46:01:f3:3e:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:E2:C0:F4:D5:F3:D0:8A:A8:FE:7A:E7:C3:20:CF:E9:10:27:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C4777A457D11F1853390E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d4:39:3d:9d:4b:34:09:25:14:2e:17:cc:62:12:50:89:a0:
2a:5e:48:90:ba:be:ba:3c:2a:58:ae:69:ef:3e:69:f6:ab:57:
7c:26:d8:66:76:83:12:97:cc:25:ee:42:94:c1:90:57:cb:35:
2a:f3:e1:0d:cf:52:b4:aa:d6:d1:35:7e:36:d0:a4:ee:50:40:
b3:f1:bc:78:91:a7:cd:3b:28:80:ce:bf:cc:1f:76:77:ff:43:
7a:cb:27:ec:4b:ea:ed:ab:8e:6f:69:70:aa:68:31:6f:4c:d0:
40:a9:d6:8d:1a:19:9b:cb:d5:bf:ea:be:d3:ed:cb:50:c6:c9:
2a:69:9c:81:25:ce:59:09:b6:27:dd:a0:4f:f3:0f:e6:cd:3f:
27:ff:6c:b0:41:7a:aa:8f:44:9e:84:a3:a3:41:56:85:bb:9d:
fb:46:1f:45:c2:33:19:03:ed:a4:6e:e4:57:e8:85:f6:4c:e8:
a8:e0:1e:f8:cc:c0:3d:25:56:2c:12:9f:5c:fe:f9:cc:da:88:
8e:6f:b0:75:27:6b:44:19:58:22:eb:70:16:61:c6:a8:51:dd:
31:0a:00:15:be:5d:9e:45:0e:ea:51:c0:36:b1:5d:ef:10:cc:
11:58:f2:ef:78:13:90:25:52:d3:ef:e7:8a:57:a2:b7:65:e4:
1a:74:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:43 2026 by rpki-client