Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE57238451EC11F185967208CF1D38B0.roa
File: DE57238451EC11F185967208CF1D38B0.roa (raw, json)
Hash identifier: h3DYCue8a9fOmOINknARFKWoMdolsbDiT9jl6IaF70g=
Subject key identifier: A7:B4:63:4B:B0:12:E0:D3:0A:95:9C:00:9C:D3:1B:DE:D2:37:4C:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE57238451EC11F185967208CF1D38B0.roa
Signing time: Sun 17 May 2026 12:35:21 +0000
ROA not before: Sun 17 May 2026 12:35:16 +0000
ROA not after: Wed 24 Jun 2026 12:35:16 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117818 (0x1cc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 12:35:16 2026 GMT
Not After : Jun 24 12:35:16 2026 GMT
Subject: CN=6a09b609-4389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:79:c1:b3:4a:61:aa:c7:5f:94:5e:4c:43:
f9:79:62:a2:5d:dd:8b:72:8c:11:0c:9c:3e:d0:85:
a4:03:15:d3:ff:81:6c:47:be:9f:d8:21:b0:ab:57:
e1:83:72:03:7b:aa:3f:b7:44:e9:9d:04:90:aa:8d:
fc:73:f4:da:c4:be:ed:e0:bc:ad:e9:b5:65:d6:9e:
ce:4e:95:56:04:3e:ad:e2:84:2d:e4:bc:ca:cd:7f:
79:4f:0e:42:fb:17:35:87:00:44:0a:12:b2:6a:e9:
91:91:da:ea:e7:d2:15:ba:24:ab:31:44:c6:f9:52:
01:53:4a:37:f9:2a:1d:c9:21:c2:50:bb:31:d2:4d:
b6:42:ea:e2:76:b9:a4:19:27:6e:94:fd:c9:d0:b1:
12:ff:bc:a8:c9:c7:fc:72:58:36:e7:90:3c:d0:d7:
75:a7:4f:40:14:73:cf:94:ad:97:61:2a:c7:34:78:
dc:9f:43:8d:aa:5a:46:01:55:45:04:b0:74:2c:2e:
8b:f3:b9:58:7f:6a:80:d3:26:3b:a0:cd:68:b9:d3:
28:97:2b:d7:d9:53:00:44:8d:5b:a7:11:92:2f:bd:
fb:86:34:d4:29:a8:62:50:ba:05:f8:d3:e7:4e:db:
f2:94:b6:1e:6d:5c:f4:50:fc:96:7c:0b:3c:0b:f8:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B4:63:4B:B0:12:E0:D3:0A:95:9C:00:9C:D3:1B:DE:D2:37:4C:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE57238451EC11F185967208CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5c:a9:86:1d:2a:6c:44:fc:02:a3:24:77:11:5a:16:49:29:
4a:55:75:87:3a:66:74:b8:23:b4:4e:4a:a4:7d:be:98:60:3d:
15:f9:bf:1e:bf:99:62:b0:3b:1a:79:a8:8c:23:86:64:2c:17:
fe:d3:10:47:1b:0f:9b:c5:87:8e:82:e4:d7:59:7f:27:14:b6:
ef:78:e5:fa:b0:d3:be:a6:cf:12:62:3b:b9:cf:95:0b:d0:4f:
e3:0d:3c:7d:2b:df:3d:ba:d3:33:02:e8:d4:34:76:86:76:8f:
9d:3b:14:41:7d:ee:1c:08:a4:78:ea:23:cc:40:10:b3:12:93:
67:f8:c5:b8:56:66:f8:ec:f8:20:1e:87:ca:e3:90:66:7f:03:
2c:25:c4:51:d2:30:6d:20:01:19:00:48:3a:aa:e2:7a:90:65:
b3:70:17:cc:29:a6:c4:cf:e0:65:8e:bb:96:a3:cd:8e:6b:ea:
8f:1a:8a:7d:a2:ef:24:b7:d1:aa:3a:51:3f:da:fd:f6:93:4d:
6b:28:9d:e2:bb:f8:94:ef:cb:c5:1d:5e:75:ec:bb:dc:a1:8c:
3a:6f:fe:0d:55:15:88:f3:fb:51:e9:2c:2f:6b:f1:9e:ae:70:
7d:2b:31:74:f2:02:a9:b3:e7:0a:39:75:f8:d1:9f:1d:b7:f0:
8e:27:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:53 2026 by rpki-client