Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4C0C1B6584211F19D5F43A3CE1D38B0.roa
File: D4C0C1B6584211F19D5F43A3CE1D38B0.roa (raw, json)
Hash identifier: HIljPNs19+QoX34ZbCKLyrDl87bsujP/toh0QOOYKXI=
Subject key identifier: 0A:71:A0:AF:64:B0:0A:50:E3:28:16:4F:34:6B:37:7F:DF:D3:44:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4C0C1B6584211F19D5F43A3CE1D38B0.roa
Signing time: Mon 25 May 2026 14:05:49 +0000
ROA not before: Mon 25 May 2026 14:05:44 +0000
ROA not after: Wed 19 Aug 2026 14:05:44 +0000
asID: 139923
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118663 (0x1cf87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 14:05:44 2026 GMT
Not After : Aug 19 14:05:44 2026 GMT
Subject: CN=6a14573d-3a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:5c:5a:93:6d:b8:37:58:fe:2b:80:6e:c6:
2c:a5:1d:e7:b5:85:9f:83:28:e5:2c:47:59:b8:2d:
f7:f5:c8:11:b0:73:f5:8c:de:ba:7b:82:ed:74:de:
78:b3:85:70:09:9c:93:fc:17:3a:69:95:f3:f4:76:
bf:55:48:28:1e:29:1f:50:0a:fb:fb:f2:8d:f1:58:
22:75:eb:cc:be:5d:f6:90:8a:a7:b5:4f:65:49:5a:
f0:91:48:3b:b3:08:e0:74:4e:3d:a9:a1:4f:20:7b:
58:a6:aa:38:aa:7d:13:d1:f9:49:56:6f:c3:8c:2d:
ef:b1:1e:72:ee:fe:fc:c2:09:e9:66:70:04:92:b4:
00:d1:de:8f:2f:c6:2f:63:1b:0e:f1:96:46:91:d3:
8f:30:f0:25:57:43:e7:ee:a7:e5:0a:38:a0:0c:81:
46:84:3c:3b:c1:6b:cd:be:23:0b:47:84:a9:78:14:
2f:84:34:c7:ee:a5:cc:f6:18:a6:ad:0d:24:d1:c7:
3f:ca:ef:b8:f4:a8:5a:6e:37:a9:d4:a0:7f:5b:f6:
57:de:cd:a1:1b:27:c0:e5:d9:ac:e7:28:1d:e3:aa:
fd:87:b7:38:a6:7e:e8:72:71:e4:0f:0b:61:b1:4d:
d0:24:34:52:13:05:9a:3f:f0:70:d9:2e:e4:14:2c:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:A0:AF:64:B0:0A:50:E3:28:16:4F:34:6B:37:7F:DF:D3:44:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4C0C1B6584211F19D5F43A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:51:93:ca:56:7f:76:98:5f:9e:03:e4:e2:10:b2:ea:a7:c1:
6e:4a:7e:6b:6d:a7:62:a0:93:3c:a4:2b:2c:4d:ea:95:3c:17:
59:72:e4:67:56:a2:4c:22:fe:37:a9:61:f2:07:3f:b9:ec:db:
32:7f:f8:32:78:09:5c:b1:0e:be:98:59:ad:00:69:71:a6:6b:
d0:a6:30:26:43:a3:fa:25:f0:10:81:0f:d4:c2:d8:bb:ef:0e:
71:46:d0:37:dd:e3:90:2f:1c:84:5a:a7:25:d7:ce:3d:05:9f:
b8:95:b8:35:8e:14:d8:9f:3e:39:55:be:fc:9e:a5:6c:cb:03:
7c:fc:c4:2f:18:04:01:07:fb:47:bb:7c:b1:86:81:76:37:61:
1b:9a:37:ef:89:81:ff:9e:63:93:c8:68:c5:4d:84:f9:45:65:
64:fc:9f:69:78:b5:6a:79:d1:7c:df:fc:63:c0:4a:87:42:de:
89:ac:99:30:0b:4b:52:59:f0:50:27:22:81:af:7b:14:79:3e:
94:25:b8:a3:50:cc:58:35:44:b1:95:09:d8:e8:e6:57:4f:79:
73:9b:93:79:89:5d:90:ba:a3:e7:03:65:06:5e:3d:1d:d9:63:
82:14:a2:87:16:5a:b8:a3:5b:65:cb:a7:bc:b9:f6:4b:8f:e8:
70:60:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:55 2026 by rpki-client