Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E52B3660506F11F1BDA793F9CE1D38B0.roa
File: E52B3660506F11F1BDA793F9CE1D38B0.roa (raw, json)
Hash identifier: VCrjLU4NlNtQu7LFwcD9ixQZxwmROBkJWQ55XbIu0Lo=
Subject key identifier: A5:3D:A5:5E:DA:AC:24:D5:4A:D1:B8:57:D3:55:C8:4F:D7:90:71:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E52B3660506F11F1BDA793F9CE1D38B0.roa
Signing time: Fri 15 May 2026 15:08:14 +0000
ROA not before: Fri 15 May 2026 15:08:10 +0000
ROA not after: Mon 22 Jun 2026 15:08:10 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117702 (0x1cbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 15:08:10 2026 GMT
Not After : Jun 22 15:08:10 2026 GMT
Subject: CN=6a0736de-b225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:7b:39:cf:a5:79:0c:06:0e:b5:28:8b:43:
5a:e1:33:1e:75:7d:2d:78:19:3d:5c:00:8e:50:bb:
a0:a9:28:ca:4a:1e:47:e7:8c:a1:ad:85:24:78:e1:
82:cc:9b:8e:f7:ec:f2:cb:db:cc:97:c3:3f:d0:a9:
31:b1:5f:c6:b3:5b:00:7c:c2:b4:46:1d:4a:87:00:
3a:93:5c:88:a4:cd:26:6b:d9:0b:c5:f7:3a:d4:4d:
df:f0:33:a7:06:75:6b:68:fe:4d:e4:6b:db:69:38:
76:eb:2b:fb:01:1c:69:6b:eb:5b:be:dd:bc:d4:9a:
85:6d:02:4c:ff:f1:47:16:e8:d0:c1:6d:f0:2e:b6:
d9:ba:67:4d:ab:12:08:c7:d9:16:eb:1a:6d:ec:08:
92:22:80:f1:e4:4a:16:e0:19:e1:0f:07:af:3b:c4:
52:57:a3:6e:bf:dd:0e:8d:b2:b2:9f:68:2b:7c:80:
6e:65:ff:fe:27:df:5d:aa:50:99:8e:bd:27:87:1e:
8d:bf:76:41:8c:40:62:39:3b:bd:72:56:dc:7b:e8:
54:ff:12:9f:6b:b4:87:04:6b:94:d1:f0:b6:56:13:
92:66:10:ad:d0:44:84:51:38:f6:23:43:e0:db:6d:
b4:e5:fc:4c:e6:f2:69:cc:a9:23:93:86:ac:ff:7f:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:A5:5E:DA:AC:24:D5:4A:D1:B8:57:D3:55:C8:4F:D7:90:71:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E52B3660506F11F1BDA793F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:d6:a1:72:ed:75:79:98:e7:c6:09:04:2c:2e:30:68:bb:6f:
b5:e4:a9:56:b7:5d:e6:7a:4a:8c:ab:21:ab:2b:26:39:da:c9:
36:83:00:1f:23:b6:f7:1a:3c:92:66:ee:d8:b9:c3:23:1b:1b:
c1:71:b3:10:12:64:37:7b:31:04:ae:ee:71:c0:db:06:57:60:
27:ae:06:bb:26:f8:26:71:eb:23:57:c1:3b:ba:ff:6f:cb:69:
85:ba:c8:54:50:e2:0f:0f:53:a1:38:b1:c6:c9:96:c9:6b:df:
cf:76:e9:c3:3f:ec:35:c1:e9:a4:06:fb:0b:ff:0d:68:53:b5:
7d:2f:10:9e:e3:cf:4d:fd:9b:c3:32:32:7b:af:4d:7e:ec:7a:
50:ee:72:30:ce:dd:68:8e:a0:4a:e4:63:2c:b8:ca:45:85:bf:
d4:ef:f9:90:6a:73:c5:d6:17:4c:1a:99:8f:a0:69:8a:65:d9:
91:cc:fb:24:92:13:2f:11:4e:2c:58:cf:71:df:39:10:1a:0f:
ee:e3:ee:0e:17:32:2e:ca:3e:57:48:4d:0c:2b:d9:74:a9:6c:
e3:ba:79:eb:fe:49:ef:85:bf:0f:3f:da:3a:75:5c:4d:70:e3:
5b:70:f0:a1:a0:bd:7c:e7:e7:9e:f5:aa:f4:d2:67:30:b8:74:
b0:4b:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:46 2026 by rpki-client