Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859EA3DA58F311F1944A4CDACE1D38B0.roa
File: 859EA3DA58F311F1944A4CDACE1D38B0.roa (raw, json)
Hash identifier: nx4dDkQDs/gP4diqzJSFSeQz0tFiCAJJhbfnomPzwjw=
Subject key identifier: F0:12:DA:4E:43:29:D9:2D:47:C8:F9:7F:08:63:62:D2:48:EB:F7:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859EA3DA58F311F1944A4CDACE1D38B0.roa
Signing time: Tue 26 May 2026 11:10:37 +0000
ROA not before: Tue 26 May 2026 11:10:28 +0000
ROA not after: Thu 02 Jul 2026 11:10:28 +0000
asID: 984
IP address blocks: 154.82.132.0/24 maxlen: 24
154.82.135.0/24 maxlen: 24
154.90.133.0/24 maxlen: 24
154.95.2.0/24 maxlen: 24
154.95.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118709 (0x1cfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 11:10:28 2026 GMT
Not After : Jul 2 11:10:28 2026 GMT
Subject: CN=6a157fad-a26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:35:a4:ef:14:51:3f:ee:5f:2f:77:9c:50:
75:22:d6:09:56:da:98:ae:b9:db:70:2b:15:d0:e9:
15:67:c8:f2:15:a9:b3:5b:9f:a6:84:7f:ae:ca:b8:
54:66:7a:da:4e:d6:08:7c:69:a0:e6:f3:c4:1f:2e:
64:06:f5:05:2c:08:86:db:d2:6f:c4:44:02:54:aa:
1e:64:aa:af:fc:ef:04:1a:90:c0:b1:22:19:8d:34:
2b:a2:67:8d:5f:92:1c:91:c2:6d:26:9a:80:05:ab:
73:0c:ca:37:4d:e8:d5:23:01:94:52:2e:0c:6e:a1:
b4:ab:dd:b1:db:0c:15:f9:6a:0b:1b:a7:6f:14:59:
85:7b:af:a7:a6:c1:bd:1b:7d:32:1c:dc:8f:aa:4c:
5d:9c:29:08:09:40:83:39:90:2f:ab:49:d9:5b:81:
0d:b1:08:1c:d4:7f:03:6f:ee:26:15:73:23:bd:6b:
cc:d9:f8:4d:5a:6f:d6:73:75:35:cb:e4:55:75:b9:
08:a1:f2:f8:da:16:7b:71:a0:4c:12:15:b1:46:21:
7f:cd:4a:80:0d:06:58:55:41:94:ac:5d:50:52:33:
5f:7f:8e:fd:9a:45:fd:4d:5e:ae:99:34:95:ef:a1:
a6:03:61:c6:3b:c8:1d:85:8a:27:95:26:f6:a6:e4:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:DA:4E:43:29:D9:2D:47:C8:F9:7F:08:63:62:D2:48:EB:F7:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859EA3DA58F311F1944A4CDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.132.0/24
154.82.135.0/24
154.90.133.0/24
154.95.2.0/23
Signature Algorithm: sha256WithRSAEncryption
95:4d:f1:58:2b:35:e5:a9:60:00:c0:24:e7:19:fd:e9:fb:70:
a1:ba:e7:51:93:48:22:36:7a:40:6a:14:75:d9:88:fe:3d:82:
ca:47:3f:0c:d7:84:d6:f5:13:a6:af:e6:d3:89:7c:c2:36:2c:
4e:15:16:4a:21:7c:d1:36:86:f5:65:03:0d:df:34:ae:0c:9b:
9d:af:8a:ad:5f:73:4b:2d:49:d6:60:56:c2:55:7c:0e:7d:9a:
0e:a9:1f:22:43:75:5e:09:a3:66:9f:de:3e:20:eb:49:36:36:
c0:f1:4f:9b:d5:0e:fd:d1:ec:31:c7:70:5d:d8:43:d4:57:c2:
08:ee:b3:de:35:90:0d:f0:9c:ff:f6:eb:a8:36:66:8e:d8:76:
62:c2:e4:56:4c:5d:05:a0:19:79:66:f5:33:82:cf:d4:58:f4:
c1:4a:5e:4a:65:24:e8:36:df:95:30:f3:7d:9f:7d:04:6a:ef:
01:cb:78:96:d2:ff:af:35:03:56:64:62:a7:4f:0f:f8:85:59:
22:25:01:ac:b1:a8:b1:59:ef:be:c8:45:95:27:10:3c:52:27:
dc:67:33:fe:7d:96:6f:82:72:60:c8:c3:a3:46:b8:d5:d9:30:
74:46:e6:ad:6c:42:66:84:fb:8f:de:39:67:ae:f4:15:37:3a:
1a:20:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:20 2026 by rpki-client