Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF0D2A8491A11F19A7556E8CE1D38B0.roa
File: 5BF0D2A8491A11F19A7556E8CE1D38B0.roa (raw, json)
Hash identifier: kGHrZfJ9Aton45lAIsXSwkjEeHzA7j4Q/oOWAYOmV3A=
Subject key identifier: CB:E5:9E:2C:78:DC:2B:32:89:86:D7:C7:F5:37:B4:6E:C2:91:48:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C971
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF0D2A8491A11F19A7556E8CE1D38B0.roa
Signing time: Wed 06 May 2026 07:08:19 +0000
ROA not before: Wed 06 May 2026 07:08:14 +0000
ROA not after: Wed 13 May 2026 07:08:14 +0000
asID: 8796
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117105 (0x1c971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:08:14 2026 GMT
Not After : May 13 07:08:14 2026 GMT
Subject: CN=69fae8e3-34d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:61:52:22:78:41:ed:46:81:67:0d:b0:51:
ce:bf:f8:d6:b8:92:df:19:30:7a:fd:2c:23:5f:4c:
d6:e3:a5:b9:38:47:9a:9b:a3:37:a8:7c:18:11:c7:
a4:ae:66:e7:33:17:f1:2b:4d:24:d9:74:73:12:be:
06:32:11:0b:ff:86:36:93:22:f8:b7:14:54:4f:97:
8d:d1:5c:19:d1:7f:ac:8f:a2:c3:a7:37:25:80:2f:
52:c9:b2:29:1f:09:0a:1b:5e:d4:f1:7b:1d:4b:b4:
f5:f3:ac:d8:51:e2:37:5d:67:e3:73:de:19:b5:ee:
82:ba:30:af:e5:7d:15:27:ce:79:0f:82:13:03:07:
0f:61:e8:cb:b7:73:c1:df:fd:89:54:ae:48:9d:96:
85:b6:35:d9:63:14:b6:58:6d:86:14:74:fc:09:cb:
5b:ae:24:96:1a:b7:59:a6:57:bf:8b:06:4d:8f:cd:
b7:da:9c:d1:cf:a6:c2:98:df:54:3c:32:79:26:81:
f9:39:80:dd:31:a1:9e:14:e9:6c:f1:78:34:03:ae:
7b:b6:d2:65:77:52:43:9e:e4:43:fb:7b:04:7f:96:
fc:69:b0:49:09:b8:c7:a9:38:ad:ff:ba:cf:d2:e5:
fe:04:33:56:98:29:72:49:a1:99:7f:bd:51:cb:96:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:9E:2C:78:DC:2B:32:89:86:D7:C7:F5:37:B4:6E:C2:91:48:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF0D2A8491A11F19A7556E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
12:af:bf:dd:a7:94:29:d4:9a:6c:24:c9:41:80:43:95:26:22:
52:8d:b7:87:1c:c1:23:40:36:43:6d:c2:ce:c8:83:2a:bf:ee:
12:2c:6c:62:1e:e4:d6:25:63:7e:f8:fc:db:1a:8c:b6:5f:87:
cd:9d:9e:9e:cd:c4:b3:4f:c5:74:36:75:9d:15:56:9d:03:f2:
90:df:a2:3b:a6:7a:db:84:2a:c6:f6:64:3a:3c:1f:73:80:69:
c4:2f:8d:2e:6a:cf:f4:02:b9:80:cf:bd:65:2d:3f:fd:f4:f5:
2a:07:f3:6b:02:56:53:9c:33:08:42:ec:18:3d:7a:07:00:50:
56:db:80:c7:b9:5a:3b:1a:29:7c:15:8f:ee:9e:ab:32:15:b8:
c9:63:7c:b5:2f:b9:2a:33:6c:85:20:2d:5a:f5:72:57:82:35:
f4:23:ea:e8:10:40:cf:15:17:4b:e8:2d:9e:d1:29:d4:1e:b7:
04:a1:a7:73:f9:3b:42:1f:45:1a:88:8e:d8:85:00:df:f5:79:
cb:91:a9:1f:98:b9:9d:c1:98:f9:06:a2:bd:47:20:39:14:43:
6b:3a:68:d7:e7:9d:23:fe:e7:ef:39:74:91:bb:48:b0:0b:f3:
9f:c0:b5:7c:fd:dd:a2:0a:63:f5:ed:3d:62:d8:18:d5:30:c7:
c0:9a:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:43 2026 by rpki-client