Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9DA81A5BFE11F1A0FCD3D8CE1D38B0.roa
File: 5C9DA81A5BFE11F1A0FCD3D8CE1D38B0.roa (raw, json)
Hash identifier: 7S4CK7JQotdIZjTfy0P69TTvawqmq8itIOChxRmoIjY=
Subject key identifier: 00:35:63:75:AE:0F:97:69:1B:70:19:26:FD:B1:27:F2:EE:EC:50:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9DA81A5BFE11F1A0FCD3D8CE1D38B0.roa
Signing time: Sat 30 May 2026 08:05:46 +0000
ROA not before: Sat 30 May 2026 08:05:42 +0000
ROA not after: Tue 07 Jul 2026 08:05:42 +0000
asID: 44559
IP address blocks: 154.209.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119020 (0x1d0ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 08:05:42 2026 GMT
Not After : Jul 7 08:05:42 2026 GMT
Subject: CN=6a1a9a5a-5a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:be:75:f3:0d:e4:b4:0e:68:86:d5:ab:b1:
bc:08:82:ba:82:ed:c9:df:01:f9:d0:58:9b:9f:7d:
6b:15:1e:15:3b:2a:9b:82:e9:cc:27:a6:fe:34:63:
46:1e:0a:6a:d4:94:0c:5f:db:c1:20:3c:33:b3:81:
51:a6:c2:ee:dd:26:09:d0:55:c6:fc:c8:90:4c:90:
5d:1f:1b:76:9f:c7:7d:3f:27:98:a7:d6:28:88:cd:
71:0b:c4:4b:cb:8c:c3:c4:5b:a7:4b:cb:e7:49:91:
98:9c:f3:8c:3a:e5:42:ce:ec:27:83:48:39:9b:f4:
ef:5d:61:96:bb:69:e8:1d:6c:fe:ed:a3:db:93:9d:
19:6b:a7:93:71:1e:bc:8e:ab:ae:70:db:5e:35:be:
33:e2:a1:6d:1c:1a:ac:65:d4:09:99:6a:5c:72:51:
bc:df:b1:56:d3:fe:fe:46:2a:d1:15:b9:5b:99:ae:
16:bc:21:05:e6:5b:af:6a:f3:97:31:77:52:60:a3:
47:e9:d2:71:97:fc:67:fe:1c:62:1f:78:7a:94:cf:
69:24:25:63:77:92:c8:a3:3d:e0:2b:fc:ad:e4:99:
e8:bc:69:0a:23:84:f8:57:57:9c:f5:4e:f9:b1:16:
88:0d:ff:0a:c6:a7:3e:25:d2:ef:87:fe:08:e6:05:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:63:75:AE:0F:97:69:1B:70:19:26:FD:B1:27:F2:EE:EC:50:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9DA81A5BFE11F1A0FCD3D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:66:a6:5c:aa:26:ca:f2:ef:9d:11:2d:39:c4:d1:b7:e6:1d:
59:4b:c1:84:47:64:af:87:a9:b5:47:3e:69:65:5e:42:c0:64:
14:00:bf:ca:2f:ea:56:60:e0:0f:e7:9a:7c:c3:94:63:1f:4b:
96:c3:a0:85:68:4f:49:a5:1d:bc:df:fd:d7:a6:e7:d1:12:a1:
19:b4:d3:60:fa:8a:0d:8c:bd:0c:58:1c:1c:c3:1b:c1:07:82:
b2:c8:68:b5:23:69:b7:8a:b8:c4:de:99:5c:6f:34:2c:fd:dd:
70:27:f9:23:4f:ba:f5:27:ec:2d:b2:3f:f7:3b:c5:3f:61:f7:
ac:0f:06:2a:09:29:b8:b6:ce:e8:d4:81:a7:df:7c:b3:ad:99:
4e:24:66:fe:10:68:bf:5f:45:37:c3:07:6a:bb:96:3a:46:2f:
fd:29:a6:c3:58:3c:95:58:13:2e:63:f2:41:48:8a:cf:f0:e6:
5d:a1:f2:6b:f4:31:44:e3:58:9a:05:e3:8a:34:1f:f8:9a:f9:
86:2d:8e:d6:1f:e7:20:2a:71:b0:f6:69:a4:1c:59:fd:7e:23:
2e:c6:42:1a:ab:c4:f8:b5:d6:3e:b8:a3:8b:ad:30:77:c5:74:
98:64:c9:21:93:bc:32:08:4f:78:b5:5f:6e:07:91:e0:4f:00:
7d:b3:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:05 2026 by rpki-client