Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C14FB4E582711F191A0DEFFCE1D38B0.roa
File: 5C14FB4E582711F191A0DEFFCE1D38B0.roa (raw, json)
Hash identifier: 8Klv2TqQoEu9o3LmexYdKCgDKoB0kw+EbQNENhZW/tw=
Subject key identifier: BD:D6:86:7A:2F:9D:1F:9E:1C:04:EE:83:AC:DF:EF:3A:E2:FA:D3:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C14FB4E582711F191A0DEFFCE1D38B0.roa
Signing time: Mon 25 May 2026 10:49:10 +0000
ROA not before: Mon 25 May 2026 10:49:04 +0000
ROA not after: Mon 21 May 2029 10:49:04 +0000
asID: 17561
IP address blocks: 154.194.228.0/24 maxlen: 24
154.194.229.0/24 maxlen: 24
154.194.230.0/24 maxlen: 24
154.194.231.0/24 maxlen: 24
154.217.224.0/24 maxlen: 24
154.217.225.0/24 maxlen: 24
154.217.226.0/24 maxlen: 24
154.217.227.0/24 maxlen: 24
154.217.228.0/24 maxlen: 24
154.217.229.0/24 maxlen: 24
154.217.230.0/24 maxlen: 24
154.217.231.0/24 maxlen: 24
154.222.88.0/24 maxlen: 24
154.222.89.0/24 maxlen: 24
154.222.90.0/24 maxlen: 24
154.222.91.0/24 maxlen: 24
154.222.92.0/24 maxlen: 24
154.222.93.0/24 maxlen: 24
154.222.94.0/24 maxlen: 24
154.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118638 (0x1cf6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 10:49:04 2026 GMT
Not After : May 21 10:49:04 2029 GMT
Subject: CN=6a142926-7a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:b7:23:04:10:80:69:87:c6:15:72:01:ac:
49:0b:5a:71:71:4a:0f:7f:23:a1:20:66:9b:e7:13:
5c:47:96:5e:6f:af:00:97:82:be:06:03:95:33:64:
74:e0:66:60:90:69:ef:94:ba:03:5c:69:a4:bd:e8:
f3:eb:d2:b7:2d:8a:66:99:f0:f2:61:4e:89:2f:e7:
b2:39:6f:47:88:8e:d0:14:8c:7f:1a:ca:09:62:14:
be:81:81:a0:27:dc:b8:f6:62:21:78:27:0f:1a:58:
47:39:1b:dc:b2:36:47:c0:e0:15:4e:c2:51:b8:40:
86:cf:b2:77:80:51:9a:2e:db:cb:40:87:e6:ec:55:
02:76:0e:a1:6e:c3:bd:9e:55:2c:f9:47:bf:e1:bd:
f2:12:3d:f5:4a:ba:0d:1d:28:aa:60:31:d5:24:93:
97:a5:fc:37:e7:7b:99:44:2a:aa:ca:15:de:18:3c:
c8:b3:75:28:c1:02:8a:38:7b:a6:94:e8:db:5a:3d:
a1:11:80:0e:13:6e:4a:cc:e8:0f:01:f9:1b:fa:0a:
12:41:58:de:e2:60:dd:ec:a7:57:95:fa:df:ae:01:
a9:34:fd:69:3f:d4:c7:74:92:5e:5a:d7:75:d9:72:
58:43:49:a5:e2:c0:9d:7f:40:9e:53:a8:1e:36:98:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D6:86:7A:2F:9D:1F:9E:1C:04:EE:83:AC:DF:EF:3A:E2:FA:D3:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C14FB4E582711F191A0DEFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.228.0/22
154.217.224.0/21
154.222.88.0/21
Signature Algorithm: sha256WithRSAEncryption
97:4e:12:51:f8:1d:9f:6d:cc:dd:f5:37:30:e1:b0:e9:53:91:
a3:ad:2a:01:ae:7e:7f:20:1c:84:ec:2c:f5:38:7c:f1:52:5b:
34:5e:5d:e4:60:57:2a:62:30:48:da:39:ca:c2:96:46:08:c2:
6c:e4:c1:aa:a2:9b:7a:b2:8b:6d:66:e4:fe:d8:2d:58:9f:e8:
bf:80:40:58:fb:cc:f7:a8:ec:dd:0a:27:44:58:d9:23:af:4c:
87:23:e9:7c:c1:e8:28:d9:54:ec:5a:20:99:20:58:c1:5d:33:
c5:66:5a:54:9b:59:aa:02:9b:da:2f:33:34:4d:02:76:fe:17:
b9:10:04:77:ca:75:8f:cd:9f:b1:43:2f:e2:0f:70:3c:06:48:
23:3c:2e:fe:99:90:ac:9b:92:7f:49:52:7d:dc:24:25:f8:39:
51:f5:af:20:f7:fe:7a:2e:68:a9:fe:27:30:4b:c8:63:ad:99:
1f:84:5b:85:f1:f5:97:c0:c9:46:0b:b2:4d:58:c6:88:a1:ff:
e0:76:d1:d4:0e:37:86:09:ab:0b:35:da:a4:a9:f6:6d:93:95:
23:c0:93:dc:00:b2:45:a8:90:0a:10:a5:c3:f2:66:04:b1:cf:
00:6d:eb:35:c3:48:d3:22:81:78:02:45:88:0b:03:f1:dc:e2:
6a:c2:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:46 2026 by rpki-client