Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5F65470E5D9011F1B921FEE5CE1D38B0.roa
File: 5F65470E5D9011F1B921FEE5CE1D38B0.roa (raw, json)
Hash identifier: 9Q0XmSuu1UaKSYQf/M8f2Ub3i6hPHGdh0SNSZM2N/cs=
Subject key identifier: 38:AB:DF:F8:E6:AC:71:3E:44:70:52:F5:B4:49:36:76:6D:19:F5:7B
Certificate issuer: /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial: 0EE8
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5F65470E5D9011F1B921FEE5CE1D38B0.roa
Signing time: Mon 01 Jun 2026 08:03:28 +0000
ROA not before: Mon 01 Jun 2026 08:03:24 +0000
ROA not after: Sun 01 Jun 2036 08:03:24 +0000
asID: 37670
IP address blocks: 154.66.144.0/21 maxlen: 24
154.66.144.0/24 maxlen: 24
154.66.145.0/24 maxlen: 24
154.66.146.0/24 maxlen: 24
154.66.147.0/24 maxlen: 24
154.66.148.0/24 maxlen: 24
154.66.149.0/24 maxlen: 24
154.66.150.0/24 maxlen: 24
154.66.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3816 (0xee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AF, serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Validity
Not Before: Jun 1 08:03:24 2026 GMT
Not After : Jun 1 08:03:24 2036 GMT
Subject: CN=6a1d3cd0-ca67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:ec:52:a2:21:de:1e:3c:0d:03:ec:23:76:
57:36:b3:ef:0c:c8:48:85:23:a5:9f:b4:af:4d:97:
ff:95:0e:68:83:c6:c3:cc:39:c4:36:91:f6:dd:ea:
a6:38:3c:a6:97:da:27:27:55:4d:a7:dc:c3:6a:1c:
22:1b:d1:1d:bc:a5:28:d8:cb:a0:8b:09:75:3d:1d:
f7:82:45:ae:51:8f:70:a0:50:4c:56:91:c1:b2:e2:
e5:7a:19:5d:8f:ca:70:79:52:bb:4d:ea:2e:8d:4a:
cd:d8:21:44:3a:fc:31:56:2f:7d:9a:3a:64:fd:d3:
2c:bf:8c:13:39:41:7f:60:ad:77:a9:a0:5f:59:2f:
82:37:18:e5:35:ca:9f:a4:64:46:f2:41:30:07:37:
35:42:be:ca:81:5c:fc:84:fd:ef:e7:ae:1a:17:fc:
41:73:5e:b2:d4:2e:7d:78:38:bc:ea:59:cc:44:a8:
7f:2e:70:58:11:88:87:15:23:e9:44:41:0e:dd:17:
d8:48:e9:a7:75:4a:96:51:b0:dc:46:6f:c5:25:67:
3c:90:23:ca:55:d9:51:67:c9:ee:ec:90:37:e0:e1:
7b:71:0e:fe:3c:e8:7a:9d:18:0d:9f:ec:f8:1b:4f:
cc:2b:a9:a6:d7:ac:3e:53:41:4d:34:56:b2:64:db:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:DF:F8:E6:AC:71:3E:44:70:52:F5:B4:49:36:76:6D:19:F5:7B
X509v3 Authority Key Identifier:
keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5F65470E5D9011F1B921FEE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.144.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:1a:7c:1f:19:08:d9:98:61:38:dc:12:ab:2c:52:b6:62:aa:
62:ff:3e:9b:c8:97:f7:92:cd:d1:db:24:97:2c:fc:5d:58:5f:
72:f1:93:ec:a2:ec:ae:26:c6:0d:52:f3:32:f0:10:e5:ca:90:
ba:e6:85:60:24:99:b5:3d:05:d2:ab:4f:53:fc:69:b7:00:13:
b2:4f:2f:8b:f0:ed:c0:f5:28:18:34:de:93:d9:f3:74:d0:fb:
89:ee:db:cb:2c:75:5e:8d:37:c2:83:85:26:e4:3c:99:5e:7a:
a8:01:6a:0e:98:1a:58:ff:f6:c6:28:49:85:85:63:37:bf:87:
7a:e8:96:2d:2b:2b:46:c5:d5:18:c0:51:48:1f:d8:c4:9b:49:
42:00:47:e2:c6:7e:80:f8:81:45:a2:81:42:7c:f2:81:2f:94:
4b:c4:01:41:6a:9b:66:b5:92:dc:c6:91:a8:8e:bf:e5:fe:b7:
55:d8:60:21:a1:7e:de:9d:8b:32:e4:e1:f4:f0:0e:e0:da:ab:
24:9a:75:21:68:a2:b4:29:07:6f:d6:a1:78:b3:c5:3b:b3:27:
30:6a:b5:0b:1e:8f:10:6a:c1:40:dd:d4:20:10:38:6e:dd:2b:
9a:5c:b8:c0:73:c3:47:ce:92:5d:7f:22:2c:aa:1e:0e:ef:01:
6a:67:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:23 2026 by rpki-client