Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CA354A2163711F1974BFC91DAE4EC9C.roa
File: 5CA354A2163711F1974BFC91DAE4EC9C.roa (raw, json)
Hash identifier: n1jOpGDKfizi3kE8lhmJ+GBNvHC+Q5sGNTGkTalE7hs=
Subject key identifier: 08:58:3E:EA:80:2F:83:85:9F:2F:38:2D:85:D2:E4:50:9A:47:4B:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CA354A2163711F1974BFC91DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 12:57:26 +0000
ROA not before: Mon 02 Mar 2026 12:57:22 +0000
ROA not after: Thu 09 Apr 2026 12:57:22 +0000
asID: 138915
IP address blocks: 154.90.44.0/23 maxlen: 24
154.90.46.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
154.90.62.0/23 maxlen: 24
154.93.32.0/24 maxlen: 24
154.93.33.0/24 maxlen: 24
154.93.34.0/23 maxlen: 24
154.93.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113923 (0x1bd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 12:57:22 2026 GMT
Not After : Apr 9 12:57:22 2026 GMT
Subject: CN=69a58936-9160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:7e:78:ad:10:a8:6c:fc:46:5c:7a:51:f5:
94:18:ed:f9:9f:93:db:b5:dd:ee:6d:20:28:67:07:
a9:61:65:25:26:09:c1:7a:38:87:1f:ab:a0:15:ba:
fd:98:1d:54:6b:94:4e:ec:d1:75:18:8e:a4:1f:48:
6f:1e:7c:63:8b:02:07:bb:05:3d:bb:0e:9f:fa:04:
2e:91:b8:0d:1c:2c:db:27:af:fc:a3:e1:78:fa:2c:
38:cb:e2:d7:9e:9a:7c:46:cd:e2:b9:70:a1:57:94:
71:a9:1b:00:aa:47:25:2a:70:5d:d4:2f:13:5a:e7:
53:9b:e3:6f:24:0b:f6:f4:54:9a:65:f5:e2:7c:21:
e3:32:56:f6:ec:de:a0:98:7f:eb:dd:31:58:d3:ab:
3a:38:9e:78:40:ec:f1:d3:93:45:29:f6:34:7b:e6:
63:66:13:34:f3:f3:ed:97:41:f1:2e:bd:e7:48:2b:
e9:9f:bc:ed:5a:2d:53:ed:a2:ab:a5:fa:08:6a:d9:
a4:c8:2d:64:ef:6c:02:b2:a9:a0:ca:fe:ee:99:3d:
90:c8:1f:19:5a:a5:f3:63:e3:20:a6:a1:46:dd:cc:
e8:be:18:af:7e:34:e8:9e:f3:f5:1e:17:64:2c:e9:
06:44:84:6f:43:92:94:75:fb:8a:76:32:b3:e8:23:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:3E:EA:80:2F:83:85:9F:2F:38:2D:85:D2:E4:50:9A:47:4B:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CA354A2163711F1974BFC91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0/22
154.90.50.0/23
154.90.58.0-154.90.63.255
154.93.32.0-154.93.37.255
Signature Algorithm: sha256WithRSAEncryption
3e:47:7e:5b:20:63:eb:53:5f:17:45:4c:23:9b:72:f9:7b:30:
69:ae:87:74:b8:ac:d2:a3:64:7a:8e:4f:43:c4:42:11:95:63:
29:98:75:29:ba:88:b5:8e:76:3c:ec:e1:25:80:93:a7:e6:8c:
43:76:07:b5:cf:03:f5:5d:f2:e4:e6:c7:be:11:7d:1b:8a:77:
f1:c6:11:db:3f:69:65:e1:1e:72:1d:f0:e2:16:53:35:83:ae:
87:94:8b:58:06:30:ea:df:28:47:98:61:ba:96:12:7f:86:c9:
82:d6:ce:59:19:51:4f:a8:8d:cf:bc:3d:7f:9a:10:61:7d:08:
f9:e4:74:e7:9f:12:0b:6b:e4:06:16:83:2d:47:53:0b:9e:4c:
35:69:3f:b4:53:33:d8:02:e2:9a:9e:ee:17:da:5e:17:4d:54:
49:88:75:bf:42:c8:59:a9:4a:13:fd:68:c4:33:28:02:ef:3f:
23:85:dc:c4:f2:62:03:2e:b5:4b:00:a0:a6:17:89:b1:5d:1c:
67:72:94:ab:1b:06:3c:1d:45:dc:8d:b4:49:d5:15:1e:ae:39:
8f:f8:36:78:6b:a7:1e:d4:e8:2f:87:bf:38:63:11:2f:dd:93:
52:0d:ae:b6:d3:f0:ed:aa:95:1a:98:91:1c:7e:0c:3a:df:df:
62:5d:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:16:10 2026 by rpki-client