Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A66864E51EE11F1873F8E10CF1D38B0.roa
File: 5A66864E51EE11F1873F8E10CF1D38B0.roa (raw, json)
Hash identifier: LiQrftMasCyqGuc5JxmeAOE4t8+M7LYpfxAStoac10I=
Subject key identifier: E7:B3:58:0E:A0:B4:67:BC:81:D9:C9:AB:7F:3E:1F:64:91:38:5A:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A66864E51EE11F1873F8E10CF1D38B0.roa
Signing time: Sun 17 May 2026 12:45:59 +0000
ROA not before: Sun 17 May 2026 12:45:54 +0000
ROA not after: Wed 24 Jun 2026 12:45:54 +0000
asID: 55020
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117822 (0x1cc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 12:45:54 2026 GMT
Not After : Jun 24 12:45:54 2026 GMT
Subject: CN=6a09b887-bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:ca:4c:bf:b3:12:cb:c5:8b:21:da:39:f5:
af:61:6c:9d:52:c0:ac:c2:b7:7b:79:2a:e3:9b:1f:
5d:2b:81:90:9c:d7:c1:d2:3e:a2:7e:5c:3f:81:e3:
64:a6:9e:2b:6e:4c:0c:93:ed:d9:1d:a2:fc:0d:f9:
8e:b9:64:2d:1f:2c:1c:f0:c1:a4:dd:92:de:57:d6:
64:f8:58:60:2a:35:f6:14:7d:88:89:06:a9:63:28:
ad:47:5b:69:f4:65:c1:db:db:f1:d0:2d:24:99:d1:
c0:4d:56:5f:e7:c3:53:93:cf:05:24:4c:19:8d:6d:
a8:67:4b:d0:7f:7e:fe:db:ec:27:c5:3c:8f:06:5b:
5f:5c:f8:29:2b:f0:1e:94:6a:73:ba:6a:24:6d:56:
39:86:33:21:da:71:00:38:8a:17:7a:8e:77:cd:7e:
4b:20:35:df:cb:dd:44:6e:db:e0:e6:1b:0a:b1:a2:
e3:16:b6:53:ed:fd:f6:78:46:d6:78:79:00:ad:f5:
39:4d:aa:f0:cf:92:d1:23:12:b3:1b:0e:97:47:48:
4a:84:40:41:86:6f:6d:b9:30:0e:57:5e:48:50:1f:
57:f5:84:9f:82:eb:e8:4a:b3:d6:62:66:58:b9:de:
38:39:6b:52:bd:93:da:a9:0b:e6:cc:1b:15:a4:74:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:58:0E:A0:B4:67:BC:81:D9:C9:AB:7F:3E:1F:64:91:38:5A:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A66864E51EE11F1873F8E10CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:73:14:10:5a:ae:2c:8e:13:69:8b:af:64:62:3d:42:76:48:
5f:ec:7a:ad:3d:98:5e:ee:2a:89:91:d7:f7:91:84:a8:14:31:
41:89:ff:e2:a3:7b:64:46:47:1d:bc:f5:12:b7:df:1c:d4:66:
ea:55:d7:85:23:35:92:c5:43:d2:fc:dd:cc:9f:71:0f:d3:5a:
0b:70:e7:08:74:de:2a:1f:35:56:e1:e3:b7:27:c5:f3:b5:a9:
b1:85:a9:4d:95:fb:0d:8c:63:c3:a3:8a:e5:ce:4a:5e:37:d4:
72:97:77:24:fc:57:8d:4e:72:4d:00:cb:56:b1:a2:a9:9a:60:
cd:91:4a:65:fe:a6:2a:ec:53:a3:db:b1:f0:f0:ea:02:91:eb:
c8:1c:54:1d:ab:de:a9:60:59:74:03:97:e8:cb:93:0c:7c:82:
46:cc:fb:b1:27:0a:f2:aa:74:51:c9:9e:97:29:79:5a:d6:1b:
8b:c1:b5:6c:67:56:2a:41:ff:b5:9c:9e:04:25:e8:f2:80:4a:
9c:e4:24:19:ef:d5:ca:98:1f:f7:78:af:e8:cc:4b:6a:ab:5c:
bf:d9:3d:ab:a2:68:96:30:03:7e:ef:6a:2d:65:93:3e:ea:34:
83:d5:89:09:c2:1a:12:1a:ef:79:25:38:11:3e:4f:a2:fc:ab:
48:30:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:27 2026 by rpki-client