Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F5FCD4542611F1A9B6E515CF1D38B0.roa
File: E3F5FCD4542611F1A9B6E515CF1D38B0.roa (raw, json)
Hash identifier: EQjHz50IMBLE1jrlCiORRrRjJLoT/Gv0lceNa9XjcNI=
Subject key identifier: 04:58:75:F2:3F:C6:67:C3:72:79:D1:EE:B1:40:30:75:81:35:67:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F5FCD4542611F1A9B6E515CF1D38B0.roa
Signing time: Wed 20 May 2026 08:35:44 +0000
ROA not before: Wed 20 May 2026 08:35:39 +0000
ROA not after: Wed 19 Aug 2026 08:35:39 +0000
asID: 402169
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117936 (0x1ccb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 08:35:39 2026 GMT
Not After : Aug 19 08:35:39 2026 GMT
Subject: CN=6a0d7260-bf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bb:7e:af:91:28:2f:26:59:5e:5d:6e:c3:37:
64:c6:97:ef:f2:33:e1:51:7f:57:f4:d9:a4:7e:ed:
32:70:a5:fa:91:e1:78:81:1b:4e:07:73:e8:dc:70:
38:89:e3:2d:50:1d:da:dd:52:fd:71:d4:48:92:53:
d0:b5:f8:08:89:1b:54:c6:3b:6f:80:85:15:19:d2:
13:49:69:b1:5f:2c:49:f7:a8:b0:55:99:a0:57:0f:
15:ae:2d:c0:75:ff:bd:97:d1:a4:b9:dc:cf:b1:1a:
be:66:30:04:95:86:43:01:c7:ca:74:9c:c4:a2:ef:
e4:27:f3:67:27:ea:4c:aa:fe:21:25:69:51:65:3f:
37:a6:ad:c7:c3:f4:12:aa:29:39:cf:b8:fe:fc:5a:
50:3c:56:b7:52:55:1d:41:73:fd:57:fc:05:c7:90:
df:cd:bf:f1:34:be:29:ee:31:12:08:79:1f:99:66:
91:4a:39:b1:0c:d7:45:96:85:10:04:bc:7d:b6:48:
13:9e:39:d7:55:6c:ce:f3:2c:93:bb:e2:7f:65:c5:
10:be:f8:a3:64:71:e3:87:9c:92:78:ab:33:4b:60:
b9:f6:36:ec:57:e6:d9:5b:cd:c2:73:d5:bb:49:f1:
3e:a8:d2:56:23:12:1b:2c:fb:d1:f2:49:a0:99:c1:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:58:75:F2:3F:C6:67:C3:72:79:D1:EE:B1:40:30:75:81:35:67:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F5FCD4542611F1A9B6E515CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:27:a9:ce:ab:d9:2c:f8:a6:6f:09:ee:06:ae:bf:8f:c3:15:
d2:66:fa:21:07:04:ab:5a:e8:fe:be:1d:ba:3b:d7:db:e5:e8:
cc:79:a6:cb:ff:a7:cf:3d:49:a4:31:d2:72:a6:ab:c7:d9:54:
e2:e0:d2:d5:d1:2b:55:0c:90:ec:4a:65:d7:3b:26:b1:5f:5c:
59:06:35:29:62:ce:80:5c:36:6e:b2:3b:80:2b:62:49:19:e4:
1d:e0:34:ac:d0:5a:ab:46:cd:cc:53:32:be:80:fc:57:78:44:
37:19:a4:95:05:4d:34:ad:b9:95:56:7d:5e:cd:82:03:87:ea:
2e:df:ad:df:88:0b:09:67:16:b8:c5:cc:b1:96:31:64:f6:7c:
8a:95:4e:8e:74:6c:fa:e0:fb:15:e1:42:17:9d:00:1a:0d:f9:
f5:a6:c8:3c:e8:15:04:2e:06:5f:e7:dd:63:29:5c:e3:8d:a2:
3c:44:b7:65:3c:32:bb:93:ed:f5:a5:fc:f3:ae:1e:a9:eb:6a:
27:e7:6d:76:39:7e:95:f2:70:1e:57:a0:68:55:bd:70:bc:cd:
20:6c:6b:c3:6c:c4:36:08:35:13:68:91:f5:83:0f:48:af:5b:
07:bd:a3:1b:e5:73:ae:e5:ea:37:4b:29:c1:60:6a:d1:1e:87:
eb:12:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:47 2026 by rpki-client