Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C5EE268552A11F1869137C2CE1D38B0.roa
File: 5C5EE268552A11F1869137C2CE1D38B0.roa (raw, json)
Hash identifier: ZVNtmGqfzd/9af3fMTY3IIN88bDOpWv6vN5ijmZ2A+M=
Subject key identifier: 34:57:0B:CC:DE:0E:85:95:CF:67:B5:54:44:A8:0D:75:9D:88:36:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C5EE268552A11F1869137C2CE1D38B0.roa
Signing time: Thu 21 May 2026 15:33:05 +0000
ROA not before: Thu 21 May 2026 15:33:01 +0000
ROA not after: Sat 27 Jun 2026 15:33:01 +0000
asID: 3320
IP address blocks: 154.208.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118151 (0x1cd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 15:33:01 2026 GMT
Not After : Jun 27 15:33:01 2026 GMT
Subject: CN=6a0f25b1-6c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:37:02:3b:1e:81:44:84:f0:7c:56:fd:70:
9b:9f:e5:24:43:0d:aa:65:af:36:78:b9:8a:55:18:
80:f8:b7:f1:e8:f3:d5:1d:9b:a0:e2:f2:93:95:3e:
9f:d4:1f:9d:28:67:f4:67:44:30:05:bd:b8:30:8c:
36:c3:6d:ce:27:85:54:fd:98:df:fe:84:65:00:bf:
86:10:0e:8c:05:f9:02:5d:b3:c1:37:c9:76:8c:5d:
43:5d:dc:91:e9:44:5f:52:25:6f:61:bd:d2:a0:fe:
1d:51:da:17:a1:43:61:1a:c2:64:ff:54:96:62:31:
84:8e:3b:0d:68:cb:90:71:fe:42:8e:29:f1:c4:74:
4d:6d:6f:f5:c1:5e:38:30:e7:56:0e:06:d8:13:d8:
d1:41:43:fe:8d:c8:90:21:46:33:11:65:59:60:f9:
da:f1:d5:4a:7d:6e:36:54:a8:26:7b:67:03:ab:e5:
8e:b4:71:f8:69:3b:af:c6:7d:b1:c9:26:f7:24:c1:
ac:e1:bf:df:a0:aa:ad:c2:22:ff:8b:87:b1:93:e9:
b9:55:02:a7:27:65:ab:c9:8b:a3:16:b8:8d:61:6e:
ef:dd:b6:54:c9:07:6b:8e:f5:ff:86:9a:c9:b5:b8:
6b:ab:d9:0e:af:84:07:4c:0d:ab:50:77:ec:50:58:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:0B:CC:DE:0E:85:95:CF:67:B5:54:44:A8:0D:75:9D:88:36:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C5EE268552A11F1869137C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.66.0/24
Signature Algorithm: sha256WithRSAEncryption
79:df:b6:c3:e5:c3:1d:f2:59:9b:31:3c:34:6e:14:26:5d:8c:
52:f6:f4:d6:23:aa:be:fe:0f:86:a7:49:a2:36:b1:66:ea:db:
e7:a1:11:15:bc:c8:7c:31:af:dc:41:3b:34:cf:99:82:00:16:
80:16:e2:db:e0:be:08:ce:ae:8d:ac:db:d6:92:2b:18:bf:5f:
81:aa:af:d0:5e:d5:1a:6e:6a:bb:01:5d:3e:2d:f3:af:70:20:
56:c4:36:71:0f:15:ba:7b:7d:44:aa:b7:73:9d:27:d6:43:f7:
b8:53:55:63:e5:7b:32:fb:d5:59:6f:3c:d2:a3:85:11:ce:3f:
6d:d2:93:49:68:9d:57:4f:04:e7:b7:76:b0:ff:4d:98:25:9e:
a3:5c:6e:44:0f:65:91:0a:8b:09:92:ce:18:b4:e7:94:34:82:
7c:21:5e:fd:a0:2f:5d:e2:2d:3a:90:c1:57:c4:33:16:44:b4:
74:8c:c4:f8:a1:1f:34:98:c9:51:e3:ae:04:b0:15:51:29:36:
c0:5b:57:9c:13:7f:3f:5d:f0:a0:ad:48:4e:41:f0:56:ea:c4:
cf:5f:7b:94:43:b7:a7:95:b9:b4:c2:23:9f:da:a2:5f:94:20:
bd:95:62:ca:95:60:9d:04:30:70:2e:76:14:b7:ca:c4:f9:7a:
5b:30:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:39 2026 by rpki-client