Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B184C9856CC11F1B84AC9B8CE1D38B0.roa
File: 5B184C9856CC11F1B84AC9B8CE1D38B0.roa (raw, json)
Hash identifier: r4NZo2fh+KtUZVXwwBpl1xxPxmg7TjYbwGmok+K0pwo=
Subject key identifier: DD:BE:0C:1C:A5:72:32:EA:DD:E3:EB:9D:3E:EC:99:66:C2:04:93:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B184C9856CC11F1B84AC9B8CE1D38B0.roa
Signing time: Sat 23 May 2026 17:25:13 +0000
ROA not before: Sat 23 May 2026 17:25:08 +0000
ROA not after: Fri 26 Jun 2026 17:25:08 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118412 (0x1ce8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:25:08 2026 GMT
Not After : Jun 26 17:25:08 2026 GMT
Subject: CN=6a11e2f9-f01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:73:d3:44:45:b2:6f:94:1b:c4:59:b3:ee:
34:ae:12:65:dd:09:22:ff:69:e9:84:24:7e:ad:10:
ac:78:21:47:88:ca:05:d7:12:0a:ae:e7:b3:93:1e:
bb:04:7a:29:6f:ef:3f:f0:3e:b6:47:9f:02:1f:a5:
e0:a9:aa:2e:94:05:88:38:f3:e0:c2:09:b7:2a:c9:
38:a0:eb:1d:82:fb:58:1c:e3:bb:ae:38:e2:eb:1c:
78:b1:92:90:f2:56:59:e0:be:d4:23:ee:03:7d:3e:
50:3e:02:f7:36:02:6a:3f:a5:bd:c0:3c:7b:06:5f:
8f:06:97:cc:b3:a6:e8:0a:e5:b6:2d:b8:92:03:a7:
d9:5d:ab:7f:d1:bf:26:9a:ae:d8:d2:b8:f5:10:94:
31:93:72:f4:d9:68:af:b5:8c:5b:c5:ed:f7:70:3e:
e7:cc:7a:a4:45:78:53:25:05:83:49:e0:c7:7c:fb:
7c:05:c9:d2:1c:81:a6:5e:1e:6b:0a:9b:0d:fa:21:
54:2a:71:ad:71:e5:e0:24:b5:a8:56:07:ba:ea:22:
24:68:1b:78:09:f1:9f:9a:99:ce:1e:39:0a:08:73:
b0:78:a9:53:80:64:bc:0f:69:75:a3:31:56:47:1d:
20:73:71:3a:f7:72:70:55:c8:6e:59:4e:4d:ae:d0:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BE:0C:1C:A5:72:32:EA:DD:E3:EB:9D:3E:EC:99:66:C2:04:93:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B184C9856CC11F1B84AC9B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.66.255
154.94.91.0/24
154.94.112.0/20
Signature Algorithm: sha256WithRSAEncryption
85:9e:42:c5:38:c5:86:f0:d2:8a:9d:b4:76:c6:1c:5e:1a:48:
ca:41:f6:e6:09:3a:b0:a5:40:3c:3e:1d:fa:fa:29:f6:24:dc:
97:76:df:23:bc:53:85:f1:ba:c9:63:99:a2:e5:1d:df:44:7e:
af:0e:86:aa:12:71:60:83:3d:83:19:33:27:a3:71:d8:e0:16:
ac:0c:9d:a8:72:c4:5e:65:1c:b2:07:f3:32:55:ff:50:00:6f:
65:97:8a:b2:90:28:34:1e:3f:46:1e:04:8d:3e:60:83:b3:b6:
4b:f5:d4:e2:98:9e:f2:b8:b9:68:9a:34:cb:1e:4d:b8:c9:36:
d3:77:2f:42:2f:70:c2:41:78:9a:b4:58:e4:7c:7d:c9:b9:91:
18:c0:00:c7:f5:59:8f:76:7d:0d:bd:90:ef:60:31:f6:af:bb:
4a:56:6d:71:e8:c7:fd:42:54:7f:18:7c:64:1f:a3:f8:95:2d:
82:05:b1:48:89:69:1c:d2:b1:2e:f8:7a:e1:c2:2a:8b:dd:67:
e1:1c:93:bb:e1:d9:65:34:b3:9f:23:3c:e9:ee:aa:a6:c1:c7:
44:ba:c5:5d:48:b8:84:fc:51:ef:fd:2d:9a:27:4e:7b:4f:9c:
27:71:de:b8:e6:eb:ef:b3:6c:e3:5e:a4:3f:3f:b7:86:bb:64:
35:ad:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:44 2026 by rpki-client