Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72EC83EE560311F1BE37DAECCE1D38B0.roa
File: 72EC83EE560311F1BE37DAECCE1D38B0.roa (raw, json)
Hash identifier: 5AILmAazRs6f+dT+o7MiL7CGq5ldzrgaT1OD1niR3L4=
Subject key identifier: 71:FE:88:59:89:D8:DB:55:23:0D:8B:E5:7C:C2:59:8F:CE:FC:E3:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72EC83EE560311F1BE37DAECCE1D38B0.roa
Signing time: Fri 22 May 2026 17:27:04 +0000
ROA not before: Fri 22 May 2026 17:26:59 +0000
ROA not after: Sun 28 Jun 2026 17:26:59 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 May 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118338 (0x1ce42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 17:26:59 2026 GMT
Not After : Jun 28 17:26:59 2026 GMT
Subject: CN=6a1091e8-cd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:9b:6f:2f:1a:e1:39:bf:6b:dd:cd:68:c1:
17:bc:d8:e8:2b:d1:3b:67:10:58:80:ca:a7:cc:24:
35:34:f5:f4:eb:ea:69:a3:34:49:2e:a8:08:4b:84:
f3:75:e5:ac:d5:02:5b:2f:49:cd:0c:06:74:85:e1:
44:b6:e9:7e:ae:e3:c4:3e:71:f4:5a:3f:1f:32:fe:
9c:de:47:55:32:0d:8c:85:9c:51:a0:b8:c9:12:3a:
12:bb:92:73:6e:2e:86:6d:3c:a1:c3:84:09:11:3f:
6b:af:de:3e:19:67:b0:28:72:57:61:08:15:78:23:
07:77:28:38:b3:46:74:83:2d:f0:13:43:ad:fc:17:
09:62:7b:c9:df:f9:3c:a3:e9:6e:10:44:66:35:0c:
94:ba:80:f6:75:60:6a:06:b6:58:9a:3b:d8:ba:a3:
5d:78:56:64:36:fb:f2:43:91:bd:3f:c5:7a:fc:a2:
55:92:db:c4:a9:0b:79:61:b2:d0:eb:83:4c:99:1a:
88:0e:ce:c2:42:c3:7c:ba:cf:6e:2f:5f:ce:e6:86:
61:c3:d0:f3:15:3f:77:a3:d8:b1:97:3b:d2:36:15:
cf:66:c4:48:08:ab:44:0c:c4:6e:ee:13:84:9a:85:
e5:67:6f:c3:be:3a:34:09:6d:2a:e5:86:e9:8b:d3:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:88:59:89:D8:DB:55:23:0D:8B:E5:7C:C2:59:8F:CE:FC:E3:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72EC83EE560311F1BE37DAECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bc:e9:6c:fc:67:cd:a3:dc:23:8b:0e:51:de:ac:14:f1:56:
78:6c:5d:e6:cc:e2:72:60:c3:5f:3b:b6:3b:ea:d7:7b:f0:2c:
ab:c8:6b:f5:9c:3a:24:75:d5:6f:e9:bc:7f:e6:88:02:85:d3:
a7:ff:41:2b:bf:8b:19:7c:e8:4b:19:11:d5:e7:c6:b3:04:a3:
23:7c:1d:f0:48:da:e6:7b:34:49:3d:77:ee:50:4f:ef:e8:c6:
65:88:96:2f:0f:a8:13:1e:c7:24:60:79:73:a2:83:f1:97:3e:
8a:ef:4e:f2:f0:5d:27:d4:87:6d:ae:7c:8d:bc:e3:94:17:dd:
4d:d5:9e:b4:27:e5:f2:cd:91:bc:35:14:f7:34:fe:2a:69:33:
a4:90:38:5c:de:5b:12:f5:b6:dc:16:da:78:ed:12:ff:3b:6d:
e0:ed:88:4c:d9:74:09:a1:d2:3d:6f:78:82:3c:12:5a:10:f6:
58:63:de:62:e2:b5:86:ac:94:e6:01:21:1c:6c:3d:9e:b9:0b:
a5:7e:5b:aa:c4:82:bf:51:48:5a:7d:ed:b5:48:45:e0:a1:e3:
63:d8:b2:bf:66:7f:47:27:13:77:ec:47:42:90:69:48:2e:98:
d4:60:3f:0d:e5:75:93:da:72:d5:bc:86:cf:5a:0a:72:0a:56:
1e:f5:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:13 2026 by rpki-client