Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B626D6C700F11F1916F9702CF1D38B0.roa
File: 5B626D6C700F11F1916F9702CF1D38B0.roa (raw, json)
Hash identifier: YdkUcFpdYNa3w67nud22GXhmZAUdrYViwPhWsGvc9AE=
Subject key identifier: 10:59:4C:28:76:D3:0A:C8:72:74:7E:F7:A7:63:EE:CD:7D:A4:16:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D503
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B626D6C700F11F1916F9702CF1D38B0.roa
Signing time: Wed 24 Jun 2026 20:57:49 +0000
ROA not before: Wed 24 Jun 2026 20:57:43 +0000
ROA not after: Wed 05 Aug 2026 20:57:43 +0000
asID: 20326
IP address blocks: 154.83.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120067 (0x1d503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 20:57:43 2026 GMT
Not After : Aug 5 20:57:43 2026 GMT
Subject: CN=6a3c44cd-9e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:5a:e1:7c:aa:ae:92:31:aa:5f:84:57:28:
91:bb:30:19:0d:96:d8:1a:27:e2:a3:ab:29:d4:28:
70:56:9d:4a:b9:79:38:d2:1a:15:7c:5d:5c:b7:08:
74:ac:d8:85:86:4c:81:75:20:28:60:cf:0b:94:d1:
8e:df:16:b7:82:06:e5:97:20:36:b7:e7:3c:f5:54:
13:ab:e6:47:82:c9:ed:9b:d6:c1:86:d5:46:3d:be:
bb:a0:67:c5:23:12:c8:ef:88:ce:4d:7e:ea:79:ec:
09:b6:a2:3f:9d:b4:b1:ae:56:b3:e2:33:2f:20:cd:
99:15:79:ce:7e:59:ae:f7:04:2d:28:d4:e2:a9:fd:
de:20:24:c8:7c:3d:57:10:2a:3b:97:ee:9a:28:61:
82:0c:7d:f3:35:fd:31:29:10:d3:6f:3b:d8:03:61:
b0:1a:f7:e8:66:df:d7:4c:93:ac:ee:c4:48:df:bd:
4f:0c:25:67:4b:d8:f9:11:66:7c:57:d2:cf:a4:41:
e6:fe:0c:5e:09:9f:07:2a:10:1d:88:7a:d4:c9:91:
5c:0c:57:05:64:14:ea:45:3d:37:98:4c:92:f0:fd:
15:dd:b0:28:6f:4b:d9:13:c2:cd:75:75:c8:41:05:
87:ad:46:ab:a4:0d:86:63:8f:de:bb:d3:b5:3f:64:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:59:4C:28:76:D3:0A:C8:72:74:7E:F7:A7:63:EE:CD:7D:A4:16:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B626D6C700F11F1916F9702CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
94:86:68:bc:1b:25:48:4c:36:1f:a1:2f:f9:96:75:1f:a1:43:
bc:45:bd:77:6b:0b:71:cb:9b:4a:af:ca:6f:54:a9:5c:f0:e4:
5e:26:ac:58:e3:db:5f:95:05:e7:c4:c7:ef:91:11:f3:38:15:
a5:0e:07:91:72:4d:2f:cb:56:2e:cd:c3:1e:ae:94:78:f3:b5:
a9:1d:e1:a6:17:f8:66:57:b4:f4:f2:7b:f5:18:54:1e:05:11:
6e:3e:8d:77:b9:cd:93:5b:60:ab:bc:ce:6d:b6:e7:67:2c:23:
cc:b1:19:5a:46:af:55:67:4a:ae:cb:28:75:e1:0b:58:a0:eb:
90:2e:48:dc:77:6c:82:1a:e2:86:89:db:c3:6d:a7:09:a3:a1:
69:10:31:93:72:62:c3:e2:53:f6:11:ee:21:9b:5a:56:84:b7:
7a:1c:51:5f:32:1e:5b:05:7b:f3:7e:2a:0d:de:74:bd:b1:36:
28:75:e3:84:dd:c3:11:40:52:04:90:ca:f1:36:ee:cb:10:13:
59:e2:a0:77:2d:72:b7:fa:57:04:9b:fc:5c:c7:a5:db:40:93:
80:15:4d:9e:d5:a6:c6:ef:a3:63:81:f3:3e:a3:b2:3e:5b:78:
b7:59:b1:10:37:67:72:cf:cc:12:d4:3c:b7:ce:b4:d5:f8:35:
4f:cd:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:21 2026 by rpki-client