Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AB0790C3CCC11F1BE1B04C7CE1D38B0.roa
File: 5AB0790C3CCC11F1BE1B04C7CE1D38B0.roa (raw, json)
Hash identifier: uPiSbFMyzYeIb8o00a9YfvJWorG7omYAXrjQ5S1LE/Q=
Subject key identifier: 37:75:4A:02:9A:88:89:A8:ED:F7:76:97:19:82:68:F6:50:FC:E7:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AB0790C3CCC11F1BE1B04C7CE1D38B0.roa
Signing time: Mon 20 Apr 2026 15:19:42 +0000
ROA not before: Mon 20 Apr 2026 15:19:36 +0000
ROA not after: Wed 27 May 2026 15:19:36 +0000
asID: 63139
IP address blocks: 154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116274 (0x1c632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 15:19:36 2026 GMT
Not After : May 27 15:19:36 2026 GMT
Subject: CN=69e6440e-cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:4c:42:9e:fe:44:a8:b0:60:8f:93:76:06:
52:9e:b8:c6:65:61:69:36:bb:48:cd:e2:0d:29:3a:
2a:02:99:f9:96:a2:2a:73:da:b5:52:3d:c8:31:1a:
92:7c:96:d1:50:81:40:c0:79:6a:03:d9:6b:69:f8:
33:92:34:6c:81:49:e2:89:dd:9b:73:d2:fc:48:29:
3c:46:83:63:c5:e6:3f:f4:87:1b:5e:2a:d9:1d:8e:
e0:6c:24:29:9e:93:91:fb:bf:15:c5:1c:38:9e:8f:
4a:6a:78:84:ad:c0:38:d5:8c:4e:dd:f7:a4:ba:9c:
d6:68:de:3b:10:a4:36:b1:22:68:26:e6:30:52:9f:
af:4e:96:66:03:1e:65:76:35:b9:50:2d:27:67:ca:
1e:89:c4:b4:ae:5a:a3:6f:37:5c:12:30:d5:fe:1f:
f8:68:4f:d2:12:8e:1f:89:92:ed:29:92:2a:e6:6b:
61:3e:47:17:d4:af:79:2a:59:9a:fe:11:21:5d:10:
6d:40:26:5a:c4:f0:44:34:be:f3:e2:e6:3e:c4:c1:
5c:e9:56:c2:4b:35:4b:b5:d4:87:94:f0:01:fc:d7:
b6:c5:02:d4:43:d8:a4:95:c9:a7:47:61:63:8f:e5:
8e:06:71:3a:b9:30:6b:3e:8d:84:a7:1b:64:11:72:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:75:4A:02:9A:88:89:A8:ED:F7:76:97:19:82:68:F6:50:FC:E7:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AB0790C3CCC11F1BE1B04C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.112.0-154.94.121.255
Signature Algorithm: sha256WithRSAEncryption
6d:55:38:21:59:f9:08:7d:25:d0:72:df:36:2e:c0:99:12:a5:
e5:ad:5b:b6:bb:72:1c:7d:c2:75:25:17:4e:c3:2f:6a:4b:43:
c3:57:1f:d7:bb:c7:1e:d7:f8:ce:fb:05:2e:83:c9:f2:9e:37:
2f:1e:0f:86:b6:e4:61:a8:ff:7d:6f:de:3f:df:d4:98:d2:31:
46:c6:99:5f:af:55:fb:7f:9f:ab:bd:23:0c:be:da:01:ec:2e:
d7:ec:79:7d:b2:aa:db:be:d3:0a:fe:b9:11:8e:1a:ce:75:41:
01:78:78:5f:22:f2:8d:b5:aa:cf:cc:30:64:58:c9:ef:35:24:
de:5a:9a:ec:83:ff:2b:78:d8:db:d8:3b:e9:56:bc:1b:64:51:
d4:f3:f5:87:40:4f:ed:a4:c0:00:d7:24:8e:e6:b1:43:77:60:
11:6a:9e:a1:7e:dd:1b:75:db:74:3e:93:f2:30:aa:30:6b:25:
48:82:4a:8a:68:2f:ce:2d:83:65:42:a5:55:e5:67:91:5b:84:
24:2b:d3:e4:30:2a:d8:be:36:92:fe:3e:f0:2e:48:4f:4f:20:
0a:b4:0d:3c:58:9b:f0:d2:c4:ec:cf:bf:d9:0c:b3:d4:5f:b2:
ef:af:8f:22:2b:51:36:4d:64:5c:6e:8e:5d:78:69:21:93:5b:
f2:7e:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:11 2026 by rpki-client