Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF2C392560C11F197E690A4CE1D38B0.roa
File: 5CF2C392560C11F197E690A4CE1D38B0.roa (raw, json)
Hash identifier: 9hc/5/LuKh8e3pElbrk9QrsskqroOcm9sqyFgO/TVTU=
Subject key identifier: 27:3B:0F:C0:E1:8A:83:4B:E0:81:12:21:CC:DB:63:24:BA:5B:BD:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF2C392560C11F197E690A4CE1D38B0.roa
Signing time: Fri 22 May 2026 18:30:53 +0000
ROA not before: Fri 22 May 2026 18:30:47 +0000
ROA not after: Thu 09 Jul 2026 18:30:47 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118348 (0x1ce4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 18:30:47 2026 GMT
Not After : Jul 9 18:30:47 2026 GMT
Subject: CN=6a10a0dd-0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:71:05:6d:88:0f:af:5d:fa:9b:4d:e3:c5:
fd:da:49:e6:d2:d0:3b:1d:d3:9e:7b:38:34:7f:07:
a7:4d:c3:97:db:5f:a7:15:f4:32:c8:43:c1:9f:93:
79:75:86:c8:20:3f:62:27:c4:69:81:04:87:92:fd:
5f:e1:11:df:a0:22:3b:c5:6c:e3:2f:a0:cb:5f:b0:
bb:9b:ba:e0:3f:38:5f:9d:b9:14:e1:c7:f5:8e:35:
0a:e0:c5:85:99:c5:14:f3:e3:24:62:90:66:19:b1:
87:2b:9a:30:8f:42:c3:3b:ce:71:b1:af:52:8a:52:
09:ea:61:21:48:e6:d9:a5:2e:93:ec:2c:51:1f:6a:
2b:ae:ae:c1:39:54:63:cb:9a:ca:f6:8d:ab:81:31:
53:89:27:4a:bb:f5:2a:54:f0:cc:03:e5:11:c1:9e:
6b:75:09:de:76:d0:58:b8:67:c9:ff:7c:37:b4:11:
82:73:ac:47:a7:fb:14:e7:d6:06:a6:81:55:e7:54:
c3:4d:76:78:ef:cc:6e:eb:bc:ee:0e:67:73:67:60:
de:5f:d6:94:5c:da:b7:6a:70:5d:4f:0b:ca:fd:85:
0a:30:5c:f8:44:58:85:7b:9b:b8:f2:14:62:fd:76:
f4:bd:94:20:0a:7f:c4:ac:98:aa:7d:d3:06:12:c7:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:0F:C0:E1:8A:83:4B:E0:81:12:21:CC:DB:63:24:BA:5B:BD:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF2C392560C11F197E690A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f6:6f:15:93:3c:53:bf:c6:38:75:ee:17:b7:9b:05:61:90:
29:ee:1c:fd:26:76:e4:30:88:83:77:93:cc:2c:e7:4e:37:d0:
29:69:d2:c0:6f:c7:fc:31:88:97:34:d0:03:95:e2:97:b3:a3:
5b:a0:3f:65:d4:b8:e9:c9:14:f8:d4:d1:9f:8a:9b:1b:83:8b:
6d:b5:f1:a8:c0:2f:19:72:2e:12:52:84:be:6d:ba:bd:c9:e9:
50:1a:49:0d:9e:2b:fd:74:74:d3:54:e9:1b:59:31:4b:dc:01:
cc:d1:48:df:fa:dd:b9:16:84:9f:d2:ad:e5:e3:0a:54:b8:a7:
b0:55:28:8d:20:54:de:1c:e8:f3:77:28:89:c0:27:95:f7:91:
bb:12:92:d5:11:5e:49:32:84:ca:32:8d:62:ad:50:35:ff:7c:
96:74:3a:63:b7:ee:08:67:83:7e:6c:96:7a:2a:e0:82:a1:30:
8e:e5:03:56:f3:ff:b3:03:b8:b1:b4:de:a0:b4:f0:9c:df:e7:
a8:ee:c7:d7:7e:c4:89:05:04:1b:54:32:c2:0f:76:fe:8b:9a:
af:79:2f:bf:4c:81:31:6b:1a:75:7b:3a:92:5d:ee:9e:b8:f4:
f9:0f:b9:bb:c9:e5:d5:e0:3b:c0:64:da:fa:0f:39:f1:22:5a:
96:98:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:08:26 2026 by rpki-client