Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9A76D8561D11F1ABCEC909CF1D38B0.roa
File: 5F9A76D8561D11F1ABCEC909CF1D38B0.roa (raw, json)
Hash identifier: M2eIioggTQSLtEI0t6klXsx6Kq1blBgGdBanuRFgao0=
Subject key identifier: E8:5F:40:F6:38:A2:46:CF:1F:5D:48:0A:55:B7:E7:13:A3:F1:27:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9A76D8561D11F1ABCEC909CF1D38B0.roa
Signing time: Fri 22 May 2026 20:32:38 +0000
ROA not before: Fri 22 May 2026 20:32:34 +0000
ROA not after: Thu 09 Jul 2026 20:32:34 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118358 (0x1ce56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 20:32:34 2026 GMT
Not After : Jul 9 20:32:34 2026 GMT
Subject: CN=6a10bd66-5331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:a6:ea:6a:f4:bf:b6:80:e4:bf:77:66:8b:
5e:de:14:38:1c:04:d3:8e:67:5a:7e:fc:00:d5:c6:
1c:5c:dc:bc:45:60:d2:c7:28:6d:41:37:89:09:a6:
72:cd:e2:fd:a7:1e:8b:fe:b3:4a:45:b8:cc:2e:02:
e8:01:9a:2b:2e:12:68:8b:97:ad:e9:bc:e1:92:94:
c7:57:2f:ab:4a:74:f9:9e:fe:c7:4e:ef:45:5e:d3:
6d:8f:00:e3:52:9d:cc:6c:70:9e:42:b5:55:5f:9f:
d0:e8:98:dd:c7:54:97:a2:d4:55:7e:ba:c4:88:f9:
2b:f3:bb:96:4f:c3:44:d8:e0:ca:f5:41:9e:d9:63:
33:25:0c:98:f7:7b:c1:d7:8e:81:02:08:75:ff:c0:
d1:5e:97:72:de:1a:87:66:a4:9d:e0:19:5d:04:02:
e5:4c:28:91:2f:68:52:bd:64:dc:5b:30:a4:59:db:
fb:dc:24:9d:b6:93:81:91:1e:00:a0:00:08:0e:df:
0d:dc:2f:c9:73:a7:54:61:40:bc:1c:02:fa:c0:7b:
83:e7:ed:6c:54:36:2e:f8:19:df:93:6b:d1:05:bb:
13:fe:d2:da:22:aa:da:93:5f:f3:b1:6a:e3:21:b1:
f2:9a:f0:8e:54:75:d4:bd:87:24:6c:92:c5:0a:40:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:40:F6:38:A2:46:CF:1F:5D:48:0A:55:B7:E7:13:A3:F1:27:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9A76D8561D11F1ABCEC909CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
50:ad:59:34:11:70:58:3f:88:d9:84:cd:36:2c:f9:23:9a:5a:
f3:21:95:aa:46:6e:64:72:96:43:4d:e3:24:f7:4a:1b:b5:f1:
0d:f1:a1:26:46:db:df:bc:43:0c:a1:64:39:34:5e:f1:02:c7:
2f:81:79:1f:51:12:68:4b:98:f1:35:6b:d8:51:7b:0b:59:bd:
f3:ca:f1:48:06:f6:31:48:ac:8a:a4:b3:46:fa:be:8f:27:57:
c2:32:a6:80:bd:aa:7e:b6:06:44:52:2a:c3:ca:fc:6e:3c:95:
87:c2:a8:0f:0c:88:0d:dc:bd:6a:d2:25:98:40:80:32:87:ab:
c2:0e:8b:31:8c:9f:af:ce:97:be:15:80:b8:6f:59:5c:e4:5e:
eb:47:a9:4d:20:69:f9:2d:21:ce:76:81:a9:fb:92:dd:b7:26:
9d:5c:2a:89:8c:cc:cc:e9:bd:6b:b0:18:c8:0e:a2:d2:99:8e:
04:b9:a1:9d:e1:ae:52:69:23:52:f0:e0:5a:3e:a6:77:ff:19:
32:48:2f:8c:4f:0e:d0:d6:8e:e3:c0:75:71:18:df:26:dc:00:
c9:c1:9c:cb:ee:23:84:7f:9c:44:80:25:33:1e:b9:66:95:5c:
c9:24:51:6d:6a:cc:13:0d:a6:41:3e:67:38:fe:33:38:99:d2:
cd:c7:2b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:25 2026 by rpki-client