Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE9D6DC401411F1A31423ECCE1D38B0.roa
File: 5CE9D6DC401411F1A31423ECCE1D38B0.roa (raw, json)
Hash identifier: k5n+h6t3J+vYieg5/eoN8O4MlCBF6WQYM0lA2U9JrEo=
Subject key identifier: E0:D8:46:8B:09:60:87:7C:A9:75:00:E2:9A:32:86:C1:55:6E:40:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C758
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE9D6DC401411F1A31423ECCE1D38B0.roa
Signing time: Fri 24 Apr 2026 19:32:43 +0000
ROA not before: Fri 24 Apr 2026 19:32:38 +0000
ROA not after: Sun 31 May 2026 19:32:38 +0000
asID: 20326
IP address blocks: 154.222.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116568 (0x1c758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 19:32:38 2026 GMT
Not After : May 31 19:32:38 2026 GMT
Subject: CN=69ebc55b-005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:15:19:37:6b:40:64:44:ca:8c:76:32:1c:
1e:34:79:44:65:aa:db:31:42:aa:9a:13:f8:ef:1d:
52:0d:12:5f:59:36:f4:16:db:ef:f2:89:a4:77:9c:
77:39:6b:4d:07:99:75:89:f2:9b:7c:9f:cd:d4:d4:
04:6a:53:5e:7f:d9:cb:50:c5:45:e1:6b:35:6f:86:
ec:53:51:4d:6a:ea:c4:ae:c5:91:b0:3f:6e:5a:1f:
f1:2b:c8:cb:8b:74:48:31:bf:be:9b:6e:f9:b2:fc:
58:c1:0c:c2:e8:ef:d1:f6:fc:00:8e:cd:52:cc:18:
3b:41:d1:55:c9:2b:d0:54:55:f7:29:55:92:d3:7b:
d8:bd:1a:72:20:01:9b:63:3a:ca:60:a9:fe:0c:94:
ce:a2:fe:fb:7b:55:56:ea:c4:97:c7:c1:2b:51:d0:
14:79:7b:25:c0:7f:58:c6:9f:36:b7:87:60:5f:01:
f3:0c:c3:10:a9:46:6d:dd:10:29:8f:85:fc:45:8a:
90:0b:54:58:de:e9:f1:b2:db:97:2b:e8:49:04:8f:
56:18:3d:ec:5f:78:b7:e7:39:f7:ee:2c:50:0b:99:
a6:3e:87:da:da:9d:a4:a4:8e:ab:dd:ed:fd:47:59:
6e:0d:bd:cc:f4:2d:3d:26:95:bd:5d:52:33:10:68:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:46:8B:09:60:87:7C:A9:75:00:E2:9A:32:86:C1:55:6E:40:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE9D6DC401411F1A31423ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.118.0/23
Signature Algorithm: sha256WithRSAEncryption
93:1d:92:45:ac:05:6a:1c:9a:88:5b:8b:ae:95:9b:12:a1:c5:
c0:bb:f1:a2:f4:74:b7:c6:e9:41:ce:8e:dc:b5:a9:52:e5:71:
57:c1:86:34:ab:86:70:62:b5:aa:70:bc:78:fd:79:a9:86:83:
4f:92:08:37:45:6f:e9:be:85:e9:e6:ba:2d:ee:7b:a3:f1:e2:
c0:97:9a:b7:1e:47:31:4a:09:b9:b0:0a:3d:73:c8:bb:62:74:
e5:77:88:70:7c:03:5d:1a:e3:ec:8f:1e:39:b9:d8:24:f8:18:
60:4d:79:d3:5d:88:3c:b5:a1:98:d1:bb:e8:57:ed:08:a4:3d:
d6:0b:42:71:4f:c9:a9:1d:84:ec:c0:72:71:c5:95:23:d4:99:
40:65:cc:ef:11:ab:13:91:8d:49:16:a6:8b:b4:ce:0f:91:e9:
4f:ba:32:56:e9:7c:f9:1a:62:b1:36:58:77:5f:52:e4:ab:0b:
84:be:a2:5e:31:92:21:0e:07:5f:23:11:25:80:6b:33:9e:fd:
bf:05:c3:73:dc:a0:27:ec:7f:19:2b:17:4d:25:69:93:d4:17:
df:20:57:78:94:dc:00:4c:30:dd:09:07:bd:cf:04:37:29:3e:
33:ba:35:d2:58:d1:4c:11:1f:61:d4:5d:87:ec:9c:e6:28:d2:
dd:07:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:11 2026 by rpki-client