Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C5BE9403A7311F18D19ADE9CE1D38B0.roa
File: 5C5BE9403A7311F18D19ADE9CE1D38B0.roa (raw, json)
Hash identifier: xkHIrsGK9eIS/cd5GtHkBqTSQYcKEuwNQp/4ieW3JqI=
Subject key identifier: B2:C2:69:C1:1B:EB:11:32:95:4F:8C:66:9E:31:FF:2D:98:73:21:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C5BE9403A7311F18D19ADE9CE1D38B0.roa
Signing time: Fri 17 Apr 2026 15:37:37 +0000
ROA not before: Fri 17 Apr 2026 15:37:33 +0000
ROA not after: Sun 24 May 2026 15:37:33 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116199 (0x1c5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 15:37:33 2026 GMT
Not After : May 24 15:37:33 2026 GMT
Subject: CN=69e253c1-79b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:74:94:49:78:0b:ed:ff:69:8a:3f:82:7c:
a7:c0:8d:f6:70:f5:7b:20:6e:31:34:00:44:74:ca:
1d:b8:a9:3a:df:f6:95:95:87:ab:1e:7f:83:5b:bb:
f0:85:bc:4c:b2:92:d6:e4:26:e6:61:09:d2:db:1f:
ad:13:48:a3:af:fa:14:a5:b4:35:bc:ec:09:41:cd:
b6:5c:8a:cc:df:39:f7:fd:f8:9d:a0:d4:56:3c:ab:
eb:2c:1c:79:c7:dc:aa:32:03:58:b7:d6:9b:33:3c:
4c:72:f7:5a:9d:a6:2a:da:24:ed:a5:6b:65:3d:46:
79:5d:e5:e5:f2:d3:8c:30:94:13:3f:07:3e:91:b4:
ce:1b:39:38:a8:a3:4a:59:aa:4a:cb:64:c4:07:75:
ba:ce:ed:ba:5f:fd:d8:10:63:60:9e:e9:d0:d0:53:
0c:55:84:df:8d:03:9a:14:28:a0:be:48:e9:c6:85:
66:35:fe:d7:ed:4b:05:eb:65:89:a1:61:eb:8a:49:
35:6b:a5:9f:7b:aa:58:2f:f8:b0:9d:d1:1b:61:3b:
73:a0:f5:8a:18:9c:0b:33:2e:ff:bc:12:da:14:2b:
88:2e:b5:a0:d8:e7:dd:fe:04:a2:9e:0c:00:b1:7e:
59:30:3b:05:31:21:1e:8e:67:38:75:0e:15:c1:bf:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:69:C1:1B:EB:11:32:95:4F:8C:66:9E:31:FF:2D:98:73:21:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C5BE9403A7311F18D19ADE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
14:0f:f5:65:56:83:f4:44:ac:e9:97:b0:a1:a7:d4:21:cb:67:
fd:a2:5d:f5:e4:8d:c3:39:7d:24:00:31:63:87:e2:ea:5e:b8:
1d:d5:5b:8d:d4:e8:71:fe:8e:ff:b6:8e:8c:ff:e6:2d:e2:d9:
f1:ea:56:7f:d5:05:87:de:1c:fa:dc:f6:40:d3:66:11:e7:4d:
42:0b:55:b0:13:66:d3:d2:88:ab:dc:43:18:7b:15:8d:05:12:
d2:c8:73:bc:7c:61:f4:37:78:94:0a:ff:39:3a:84:aa:56:b3:
b7:f1:4e:45:bf:fe:22:85:5b:1b:6d:03:40:2a:5c:ac:66:47:
86:6b:60:04:a4:45:d3:85:ec:0c:b8:a6:af:c9:f3:84:e2:09:
59:2e:90:b1:02:d6:16:ff:6b:ab:2a:11:8c:70:1d:d4:9c:2c:
6a:fb:80:24:fb:9a:b1:f6:48:bb:61:e2:c8:ba:3d:d4:2a:03:
c1:01:04:2e:54:3c:fc:1f:bd:29:2a:1b:40:58:c5:aa:8b:47:
89:d8:e1:4b:ac:3d:b5:00:95:49:fc:02:9d:4f:84:db:8a:7d:
79:74:22:e2:77:a4:2e:06:73:6e:6c:32:b0:b2:ed:57:96:db:
2b:f8:cd:98:9d:e2:1c:51:25:a0:0c:dd:81:27:d0:a8:31:ae:
51:16:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:03 2026 by rpki-client