Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC930A83E9111F1B4AD9DA9CE1D38B0.roa
File: 5EC930A83E9111F1B4AD9DA9CE1D38B0.roa (raw, json)
Hash identifier: jJyJRptxu7nKadh+AL4jtmH3N4glp83UCvJbtn0CR18=
Subject key identifier: 9A:34:14:00:4F:22:29:FB:A3:56:F1:C0:94:93:EA:F9:92:9A:29:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC930A83E9111F1B4AD9DA9CE1D38B0.roa
Signing time: Wed 22 Apr 2026 21:22:31 +0000
ROA not before: Wed 22 Apr 2026 21:22:26 +0000
ROA not after: Mon 08 Jun 2026 21:22:26 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116390 (0x1c6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 21:22:26 2026 GMT
Not After : Jun 8 21:22:26 2026 GMT
Subject: CN=69e93c17-0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:10:5a:3e:17:8a:a7:ec:60:ac:e2:2b:1f:
9a:01:be:f7:f2:f4:3f:1d:df:56:96:30:07:78:6d:
89:33:51:5a:10:58:cb:8d:cd:d3:14:57:17:ad:fa:
ba:8f:70:f9:7e:f7:26:60:ae:05:6b:2a:94:43:02:
87:bf:04:71:1e:17:8f:68:b9:d7:91:c0:83:94:17:
82:60:71:46:86:5f:94:e3:7c:b8:33:10:d6:78:e8:
0c:bb:01:d7:9e:bb:d5:5c:6a:8f:8a:08:67:c2:1a:
46:87:e8:8c:b3:bd:df:31:47:de:1c:26:7e:34:e6:
2f:9c:a2:b9:d0:88:f3:89:89:d9:34:b6:71:93:53:
da:24:ec:c1:8d:06:92:28:78:27:d8:48:9d:65:96:
1a:91:0a:85:ae:b3:25:b8:5d:a9:28:76:0e:b6:4b:
ad:4a:15:f3:bc:0a:98:bd:6b:71:9c:12:53:34:9e:
ae:98:af:1c:da:32:d5:0b:41:76:da:92:76:7f:f8:
e9:8d:93:79:4d:1d:57:70:e7:d3:b5:69:4b:b2:bb:
90:f4:de:e9:4a:69:2e:c6:a0:fe:90:77:68:a7:45:
6a:34:fa:fa:05:98:1e:39:1d:88:9d:14:45:e7:c0:
5b:ae:9c:ec:e2:35:2b:e6:af:b4:4f:62:c1:5b:08:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:14:00:4F:22:29:FB:A3:56:F1:C0:94:93:EA:F9:92:9A:29:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC930A83E9111F1B4AD9DA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:4d:d4:04:5c:15:af:17:fb:fb:25:46:2c:7b:7e:93:fa:0f:
01:ae:5b:b9:46:89:d1:43:93:6a:a5:19:43:43:e4:c7:17:8e:
c5:01:91:5b:63:d2:57:98:46:85:b7:ee:fa:7c:47:b0:9a:f6:
47:8e:b5:99:2f:86:84:bb:87:c8:73:05:29:d0:06:0a:0e:b9:
20:74:c5:b9:52:9f:a1:ac:d5:ed:4c:01:89:51:b9:d6:2b:63:
2c:24:97:1e:19:09:79:52:6d:24:23:16:58:c9:92:d8:2a:cb:
5c:82:af:cc:9b:e6:e7:0f:cc:35:0f:96:9a:41:83:55:af:ad:
9b:f9:96:19:ff:5c:bd:f2:0c:72:f4:23:66:55:92:91:53:c0:
b9:7e:8a:d3:3e:ad:77:04:98:ff:6c:0d:29:73:11:f9:d3:24:
d7:39:b2:47:8c:7e:ce:b9:7c:30:63:40:f3:1f:85:f7:5f:6c:
f9:3c:8b:de:78:d8:39:1b:84:d1:77:bf:62:6a:37:95:74:09:
18:da:72:9a:0e:35:11:43:37:24:1d:fd:b5:98:7b:29:1a:d0:
dc:96:c8:54:67:4b:ce:c5:93:1c:8d:77:b0:0a:a6:de:9d:65:
0c:a8:2b:96:bd:7b:a9:63:b4:4c:80:c6:e5:de:52:5f:1b:ac:
26:ae:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:57 2026 by rpki-client