Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AC890B45A6811F1B30C81B5CE1D38B0.roa
File: 5AC890B45A6811F1B30C81B5CE1D38B0.roa (raw, json)
Hash identifier: L8sAGTNCbs68dqYmnYrW4vXt4UdwHzIs8enPTxME18k=
Subject key identifier: 6E:3D:B8:A6:B8:85:C5:D3:C9:B0:74:9F:29:27:B2:8D:BD:1E:D7:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D01C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AC890B45A6811F1B30C81B5CE1D38B0.roa
Signing time: Thu 28 May 2026 07:39:27 +0000
ROA not before: Thu 28 May 2026 07:39:23 +0000
ROA not after: Tue 09 Jun 2026 07:39:23 +0000
asID: 154177
IP address blocks: 154.90.52.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118812 (0x1d01c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 07:39:23 2026 GMT
Not After : Jun 9 07:39:23 2026 GMT
Subject: CN=6a17f12f-5574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:2f:f7:88:ab:86:7c:c3:00:d9:42:42:d1:
dd:1d:cf:c3:6c:27:74:f7:9e:9d:56:0b:65:8f:02:
41:cc:09:df:42:5b:46:88:49:b1:dc:78:ae:15:0e:
9b:16:c4:66:97:e4:f4:3d:a1:bd:aa:b2:06:c0:96:
aa:a8:c9:2a:e3:fe:41:4a:c9:3e:75:43:dc:a2:10:
09:53:a1:10:08:5b:62:5a:23:78:c7:41:df:9c:fe:
2c:25:d1:79:7c:54:64:f9:cc:07:33:51:69:dc:41:
f2:0b:b3:1f:05:10:71:42:1c:13:3f:1b:42:2a:70:
e3:88:c1:64:33:47:7d:8a:8e:a9:9b:a9:95:a2:ad:
10:80:21:da:6f:d9:ff:2e:ed:c5:60:92:ce:55:2f:
4d:69:17:37:af:9c:68:8b:2a:35:c5:40:e1:dc:f7:
64:69:e3:09:8f:ca:54:53:b1:99:e0:b0:30:b2:cd:
b2:43:aa:77:bb:69:b3:cd:66:11:0f:f0:44:f4:8f:
8e:25:84:4a:c9:6e:b8:df:a6:8c:f8:cd:0b:3b:f3:
fa:46:ec:46:b6:d6:9d:ae:e8:f2:5d:bd:83:63:aa:
f7:c7:13:10:cc:2b:41:51:4f:55:e3:e5:7b:e6:57:
8f:97:77:56:d6:cf:42:9e:2d:ff:7f:91:da:08:1a:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:B8:A6:B8:85:C5:D3:C9:B0:74:9F:29:27:B2:8D:BD:1E:D7:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AC890B45A6811F1B30C81B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.52.0/23
154.90.56.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:be:e7:a7:5e:d4:12:7f:8d:e2:ad:48:18:0c:32:02:4a:df:
ab:db:0c:f2:77:3c:1f:0b:d2:a2:6e:f3:f7:ef:f1:98:b6:5d:
fa:1f:7e:73:b9:36:81:bb:10:90:27:2a:cf:64:f0:b1:c5:dd:
f0:0b:4f:56:f7:6b:c1:b4:a4:08:d3:d5:b2:ee:69:93:15:ed:
8d:f8:f1:10:64:6d:0b:ae:6d:08:0b:55:e8:14:b2:13:85:1a:
23:50:f9:33:24:2d:37:fa:8e:f3:41:02:5f:cb:a9:14:dd:73:
56:fd:8b:2b:57:42:7a:f8:5d:3f:79:59:e0:24:fb:6d:50:3f:
a2:29:58:8a:a2:50:41:eb:df:23:ef:51:50:2c:f2:8c:a5:2f:
5b:50:5c:45:dd:26:da:7e:25:93:b8:51:35:1b:07:db:6f:0c:
13:1e:aa:73:37:67:4c:aa:e9:5f:a2:af:05:f4:1f:72:b9:95:
cb:02:ee:3b:d4:e1:05:82:85:ce:36:f0:53:1b:b5:a2:64:a2:
68:2d:b1:18:39:4f:fc:f8:8b:ac:bf:cb:ca:a0:d3:94:5c:1d:
8b:c6:21:81:09:ae:71:4b:ee:13:cd:75:5b:92:74:bb:68:0f:
b2:ae:e8:1e:94:70:eb:da:92:76:f8:18:6d:ef:d5:94:8d:37:
22:26:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:44 2026 by rpki-client