Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815D463C56D211F181C2CDDCCE1D38B0.roa
File: 815D463C56D211F181C2CDDCCE1D38B0.roa (raw, json)
Hash identifier: uRY9Fuv+65qW6vj3apy1RAT8lvq6v0hdW5uFoWeOsK8=
Subject key identifier: 05:B3:0A:62:6E:32:78:DB:68:C9:F0:F5:1A:FE:45:3E:45:20:42:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815D463C56D211F181C2CDDCCE1D38B0.roa
Signing time: Sat 23 May 2026 18:09:14 +0000
ROA not before: Sat 23 May 2026 18:09:09 +0000
ROA not after: Sun 28 Jun 2026 18:09:09 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 May 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118416 (0x1ce90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 18:09:09 2026 GMT
Not After : Jun 28 18:09:09 2026 GMT
Subject: CN=6a11ed4a-5981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:5b:14:77:13:ab:23:73:19:a1:28:e6:47:
b0:ce:ec:c7:dd:a9:3a:d4:26:51:8d:40:fc:81:81:
43:00:01:97:fe:41:a8:12:74:cc:37:8d:76:d0:30:
97:11:a0:e2:d9:b2:ca:9d:a4:3b:d4:b8:94:59:45:
8b:bf:15:74:76:21:f9:d2:6d:94:78:0a:c1:e9:70:
1f:6d:53:a0:cb:f2:e7:7d:e4:10:ac:0f:35:e5:12:
03:4d:c7:5d:64:b5:8b:82:c0:3c:20:96:f0:f0:5d:
5e:f2:cb:4b:3d:a2:4d:04:59:28:4d:49:bd:84:44:
eb:1c:65:52:6e:f9:0e:9c:bf:f3:5c:ab:b6:96:46:
6e:9d:24:5e:3c:64:10:45:9b:6a:f4:81:f5:8e:50:
21:b6:c9:37:11:59:c0:81:9c:59:5e:89:44:9f:d0:
2d:b6:39:b5:93:6b:d3:c8:8e:63:ae:8d:2f:00:50:
75:0a:f5:13:32:50:ff:71:6c:8e:d3:73:c7:e8:41:
d7:42:04:06:f3:f4:c1:a1:49:e5:9c:90:bc:7e:38:
44:7b:09:79:b8:2b:b5:30:57:52:9b:32:20:80:ea:
93:94:2e:ee:bc:10:7c:1b:8f:60:7d:69:ad:1a:24:
69:c6:b1:62:91:3b:ca:ad:88:64:c5:cf:07:3a:cb:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:0A:62:6E:32:78:DB:68:C9:F0:F5:1A:FE:45:3E:45:20:42:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815D463C56D211F181C2CDDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
04:76:35:6f:00:2a:dd:0e:1c:09:83:84:f8:93:7e:6e:dd:15:
ba:c3:ec:b2:66:2e:86:27:e3:64:78:bf:49:b9:f0:be:33:f5:
dc:09:7d:5a:f4:8d:fa:2d:56:a2:0a:d4:b9:b7:79:18:a1:58:
d1:00:9c:52:62:5d:19:36:0c:20:e3:bd:d2:49:c9:e8:1b:ac:
91:41:05:b6:b3:10:bc:9e:c2:ac:54:de:b1:29:36:19:f3:7e:
fa:e2:58:9f:1c:1d:50:38:40:00:17:1a:cf:7d:6f:ec:53:10:
89:54:42:9d:6e:f3:b1:f4:aa:76:d2:40:2b:7d:0e:5c:a0:20:
0d:8e:3b:3c:eb:95:68:38:08:28:a3:28:37:45:4d:7d:69:44:
9a:07:3b:be:00:95:d1:ce:77:52:d1:71:e2:8a:ea:82:45:21:
95:cd:43:73:ed:93:77:71:40:bc:a3:11:ed:d5:9b:cb:af:50:
99:0c:7e:fa:28:43:09:78:6f:b1:69:00:c3:a1:c2:68:8a:e0:
68:b5:d1:2f:ce:d9:6a:7c:9a:6b:a2:72:e6:56:23:f8:cb:3e:
11:db:ed:c8:2c:38:7d:43:18:d8:4b:26:70:70:99:f7:b9:32:
05:69:e4:8b:00:fb:f1:68:79:e8:92:08:4c:c6:6e:3b:32:59:
1c:db:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:12 2026 by rpki-client