Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8C25EE55C711F1BF5C0B05CF1D38B0.roa
File: 5E8C25EE55C711F1BF5C0B05CF1D38B0.roa (raw, json)
Hash identifier: tMRqS+2TzlRHV7gjXsgTmiWqLNLnuz64yMXI/TsF1dg=
Subject key identifier: FF:84:B6:8D:2C:71:EF:2F:49:3F:E6:6A:CB:EB:DC:44:9B:1B:F5:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8C25EE55C711F1BF5C0B05CF1D38B0.roa
Signing time: Fri 22 May 2026 10:17:02 +0000
ROA not before: Fri 22 May 2026 10:16:55 +0000
ROA not after: Wed 19 Aug 2026 10:16:55 +0000
asID: 139923
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118260 (0x1cdf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 10:16:55 2026 GMT
Not After : Aug 19 10:16:55 2026 GMT
Subject: CN=6a102d1d-6880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:f3:93:71:8e:63:44:01:2e:e6:38:4f:1c:
06:ca:42:b0:54:3d:f6:0d:eb:79:fb:4b:db:eb:fb:
b6:58:70:2d:d2:85:56:21:2d:d7:d5:71:bd:25:38:
29:73:8d:06:70:26:05:79:b7:ee:34:08:2a:7a:96:
5f:c8:75:c0:01:77:62:c3:f7:2c:da:cc:56:07:d5:
52:f9:65:ff:c0:26:83:b0:a6:cd:3a:cf:c1:dc:e5:
69:f2:ad:da:2e:8d:0d:5a:10:ea:e6:fe:eb:32:01:
7e:fe:cf:13:fb:ca:a9:38:76:b8:ac:2d:b4:62:0b:
e5:5b:71:90:b0:7d:c3:e0:dd:61:19:46:79:b6:98:
e0:1d:93:20:64:67:57:0a:1f:a5:db:63:4f:d9:19:
55:70:73:12:d9:9d:be:68:b0:af:45:95:cf:3f:85:
f6:85:ec:ea:09:1d:a6:c5:bf:78:2c:1c:00:2b:55:
68:8c:96:0d:6e:79:13:53:12:72:b2:50:0f:6a:58:
35:39:10:a1:92:dc:17:13:b0:8a:dd:9e:22:73:39:
f4:c3:cd:43:74:71:d2:1e:ea:87:5b:e7:3c:9f:c2:
44:44:9e:3f:df:de:85:a0:e2:dd:76:0e:6a:43:9b:
a8:25:16:2b:f3:43:7e:6d:c9:da:85:a9:81:70:68:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:B6:8D:2C:71:EF:2F:49:3F:E6:6A:CB:EB:DC:44:9B:1B:F5:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8C25EE55C711F1BF5C0B05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:b8:e6:0f:1e:bc:75:5c:a0:ee:4f:99:61:c0:49:c9:70:64:
4b:ae:2f:4e:85:a7:bd:54:8b:7f:51:90:09:a0:78:c5:29:dd:
b2:1e:8d:a0:d1:c2:2e:78:57:4e:6c:e2:a0:2d:79:b2:0a:7a:
13:0b:1d:36:56:45:91:c3:6b:25:ac:cf:51:b1:da:23:33:2f:
28:91:cd:d9:cf:ce:2d:43:a7:7f:a9:cc:45:e2:3f:6c:35:71:
18:c6:41:07:7d:2e:97:7d:85:de:58:f8:eb:a6:46:13:5c:3b:
17:12:62:4b:90:8c:db:42:11:47:b8:d4:5f:10:d2:78:b5:e4:
66:fb:b8:54:63:8c:6d:fd:2d:58:e4:be:c8:1d:9c:97:fc:1d:
78:b2:fb:00:80:a5:02:40:e9:f6:0a:0d:4e:48:1b:6a:86:fe:
6a:97:bc:fb:c6:99:bc:c6:cf:da:5e:d8:f1:2a:dd:9c:9b:a2:
2f:e4:bd:21:27:94:20:0b:30:77:66:9a:1a:e8:f7:9e:c1:34:
ab:b4:24:9d:cb:70:7c:10:7b:90:46:51:6c:c7:b6:18:ab:6a:
4f:52:ab:5d:b9:0d:6c:fe:ff:3b:78:a3:13:cd:89:6c:b3:89:
b8:2d:d9:51:75:7d:3e:e4:3c:e0:0d:5c:bf:0f:a4:bb:83:4d:
0f:d3:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:39 2026 by rpki-client