Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8869657C111F194F9C804CF1D38B0.roa
File: CEA8869657C111F194F9C804CF1D38B0.roa (raw, json)
Hash identifier: 1YDn3IGhZ6thBCviPsCNHpfzOfgNi2eAPCOu/7IATbw=
Subject key identifier: 50:DB:BE:4C:69:B3:4C:37:BA:2D:2A:09:6C:85:27:05:46:C9:79:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8869657C111F194F9C804CF1D38B0.roa
Signing time: Sun 24 May 2026 22:42:14 +0000
ROA not before: Mon 25 May 2026 22:42:09 +0000
ROA not after: Mon 21 May 2029 22:42:09 +0000
asID: 17561
IP address blocks: 154.82.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118540 (0x1cf0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 22:42:09 2026 GMT
Not After : May 21 22:42:09 2029 GMT
Subject: CN=6a137ec5-b8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:26:89:c7:a8:d3:02:e3:e2:eb:e2:d2:10:
93:48:94:55:9c:17:78:25:1a:17:c8:8a:e2:fa:50:
8a:d4:4f:13:24:d8:7a:26:8e:fd:80:6b:07:56:c1:
32:8d:aa:2c:bb:95:8d:6c:99:74:81:d1:92:27:36:
a5:a9:12:8e:cd:b9:2b:85:70:5e:f6:0c:9c:14:bc:
60:2a:df:68:42:16:a2:56:57:b4:d5:5e:1e:3e:67:
4b:06:a0:bc:5d:d1:df:4d:ee:e4:2c:21:1d:b3:38:
bb:cd:19:6e:a2:17:48:aa:de:de:80:41:29:94:17:
1a:62:dc:0d:8a:91:b3:34:a5:24:ab:09:40:11:07:
d6:ce:e7:8a:18:90:c5:54:8b:4c:d7:36:69:b8:4c:
53:a4:bd:78:f3:6f:c4:12:fc:b4:cf:0a:03:da:e5:
fe:63:ff:25:22:12:bc:b6:9d:ae:c0:51:9b:d1:65:
6f:d6:b9:5e:ae:61:75:a3:1c:67:7a:74:f4:bf:12:
c8:e0:25:50:d1:6a:5b:3b:0a:aa:f6:23:6a:f6:36:
4c:b2:ac:dd:76:2f:5e:2a:87:61:53:8d:a5:21:39:
99:d5:e9:89:31:da:24:d9:b3:dd:3e:9c:3d:68:f3:
6f:33:fc:1e:5b:28:c6:87:d0:89:a9:98:5e:05:ff:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:BE:4C:69:B3:4C:37:BA:2D:2A:09:6C:85:27:05:46:C9:79:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8869657C111F194F9C804CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:7a:d4:88:f8:5b:7c:39:03:bd:66:ca:2a:b9:99:99:f7:
89:cc:aa:9b:15:f1:8e:16:8c:89:24:c9:c9:fe:0e:3d:d6:ab:
6a:0b:b7:d0:a6:99:1c:00:ba:8a:0c:fe:0a:25:d2:06:e8:68:
1c:11:49:fb:52:34:b8:9e:17:82:a8:fd:ed:e3:f3:4a:9e:72:
fe:3e:1e:bb:4e:7e:f4:4f:fd:82:18:62:27:b1:6c:43:4e:03:
76:06:bf:f4:b0:28:1c:fd:d2:66:22:36:d3:67:95:79:3d:ef:
3b:51:ba:c5:70:11:26:5f:78:d5:e2:b6:ab:b2:14:1d:05:e3:
8d:f4:4a:dc:ed:a7:a6:cf:8e:f2:cb:36:2d:47:e8:ff:a5:15:
b5:c7:53:f2:ba:46:ec:9b:6d:d6:66:8b:ab:93:96:76:fd:99:
8f:b8:89:49:66:d5:20:d1:17:26:ce:0c:06:bd:b8:99:69:d9:
fa:1d:8c:46:8e:66:01:df:20:c6:89:e3:d7:2d:b5:a3:70:fd:
df:1b:c4:3d:db:53:17:ea:83:b1:57:e6:a2:7c:51:dc:df:b2:
3f:0e:67:e3:fc:62:a7:37:41:7c:9a:03:41:5e:2c:ef:ab:a4:
8e:99:05:8f:5a:aa:c2:3d:81:67:e0:79:ec:fc:7b:0c:ae:18:
df:0e:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:57 2026 by rpki-client