Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7AFEA44ACE11F18A7CC2C3CE1D38B0.roa
File: 5D7AFEA44ACE11F18A7CC2C3CE1D38B0.roa (raw, json)
Hash identifier: 0732n2UsdV4FFa55T74o6Xf3D0TyN855mgeFE1TQhcU=
Subject key identifier: 62:B2:E7:D7:39:2B:83:0A:77:F9:BC:D3:11:09:49:D7:81:B0:63:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7AFEA44ACE11F18A7CC2C3CE1D38B0.roa
Signing time: Fri 08 May 2026 11:09:22 +0000
ROA not before: Fri 08 May 2026 11:09:17 +0000
ROA not after: Sun 14 Jun 2026 11:09:17 +0000
asID: 199707
IP address blocks: 154.193.152.0/24 maxlen: 24
154.193.153.0/24 maxlen: 24
154.193.154.0/24 maxlen: 24
154.193.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117371 (0x1ca7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 11:09:17 2026 GMT
Not After : Jun 14 11:09:17 2026 GMT
Subject: CN=69fdc462-47a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:05:4b:0b:fa:db:b0:5b:ac:f8:e2:d1:db:
5c:8d:34:e7:45:0f:36:4c:0e:ad:e7:04:d8:1e:dc:
80:97:6c:b2:57:2c:42:e2:3b:87:44:26:65:38:c0:
b5:00:62:89:e4:78:f0:e7:1c:93:55:f2:c7:d0:6c:
61:40:61:cb:89:db:b3:dc:6d:09:97:eb:29:8e:ea:
e4:a1:27:80:5f:01:39:d5:3e:88:cb:47:48:61:ba:
4b:d3:f7:ed:24:cd:8b:69:66:48:40:e8:d8:76:c6:
d9:22:2c:6d:a3:26:da:35:05:ad:ca:dd:11:8a:d8:
ac:2a:48:60:83:00:c7:5a:92:28:c6:f3:df:a2:43:
96:a2:10:39:22:d2:93:3c:68:b1:86:e4:85:1a:1e:
5f:52:59:6c:49:b1:51:3f:ea:a9:e9:f1:bb:fd:69:
7c:b2:2d:79:54:96:57:1f:80:83:0f:39:81:2d:6c:
e0:51:e9:88:78:2e:4a:82:11:fb:be:b1:29:48:d9:
15:6d:6b:90:ff:4e:d3:3e:a3:fe:6d:f1:b4:1a:91:
fb:56:41:c3:e6:3d:29:18:e0:a8:93:5a:60:af:43:
84:27:ec:10:97:78:0f:21:13:47:6b:12:9c:25:92:
c2:b8:10:d0:13:99:ad:32:ca:52:1b:2d:d0:71:82:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:E7:D7:39:2B:83:0A:77:F9:BC:D3:11:09:49:D7:81:B0:63:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7AFEA44ACE11F18A7CC2C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
Signature Algorithm: sha256WithRSAEncryption
24:51:b6:94:f1:09:6c:d5:9e:1e:85:c7:05:95:c5:8e:54:8e:
45:47:fb:68:ea:10:34:f0:4b:3c:1d:1f:d0:fa:a8:58:1f:a8:
18:73:c3:33:86:cc:ae:55:4e:0d:bc:67:ad:43:2b:1b:2d:a7:
ed:52:99:14:80:2d:1d:e0:7f:06:d8:02:7f:50:f5:1c:25:f6:
a8:0b:37:11:fc:75:fd:00:05:06:d6:c6:0d:f1:34:15:35:45:
4a:40:8e:d5:2c:c8:7b:40:ff:d3:75:88:c4:e4:22:ee:b0:09:
3d:34:12:a4:23:20:24:ec:c3:c3:80:9d:12:b2:f8:ea:52:a4:
66:ef:e8:7e:b5:18:9f:56:80:a0:44:24:21:f9:9b:26:c1:6d:
90:c2:89:54:7e:01:5a:cf:e0:be:a3:ea:35:08:bc:36:9e:f8:
81:61:41:50:5e:e6:b6:37:bb:f8:c0:55:84:45:05:d9:ef:b4:
0d:1c:f3:5a:26:5e:b1:3f:2b:b8:f0:f8:1a:9c:42:c2:a3:16:
ca:9d:48:d2:59:2d:00:b1:d9:35:87:5a:81:76:42:22:77:df:
f7:bb:42:84:84:7d:2c:16:ff:f6:ed:44:c4:fa:ed:81:c5:bf:
72:96:e5:51:a2:79:01:09:f4:e0:6f:b4:2d:6c:aa:82:58:b8:
e9:67:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:57 2026 by rpki-client