Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CBEDAB62E7311F18FA146E4DAE4EC9C.roa
File: 5CBEDAB62E7311F18FA146E4DAE4EC9C.roa (raw, json)
Hash identifier: EjA4ztxJAs/Uc1GienrhqkSWwzMajh8JzqJzBKrXluk=
Subject key identifier: C5:D8:1E:6A:AE:79:8D:9E:20:A8:C3:D2:B9:27:C6:7C:8A:E6:02:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C219
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CBEDAB62E7311F18FA146E4DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 09:07:24 +0000
ROA not before: Thu 02 Apr 2026 09:07:19 +0000
ROA not after: Sat 09 May 2026 09:07:19 +0000
asID: 44559
IP address blocks: 154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115225 (0x1c219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 09:07:19 2026 GMT
Not After : May 9 09:07:19 2026 GMT
Subject: CN=69ce31cc-f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:61:16:11:07:7e:c4:e4:8e:20:02:a1:80:
b4:49:f9:fb:58:b2:01:7b:ba:0c:cd:96:73:59:ba:
74:ec:a6:f9:1c:6a:74:47:1e:15:f8:8a:43:38:a4:
c8:43:40:e1:62:da:0e:20:19:28:25:bf:35:de:24:
9f:6f:83:9a:af:a1:6e:94:65:26:93:c7:2c:db:8a:
01:3f:e1:7c:28:4f:db:49:84:a9:88:82:b2:5c:43:
b6:01:f3:1a:d3:85:c0:24:32:5f:c3:2a:6d:36:1f:
a0:e8:23:73:65:61:83:2b:a0:c0:c8:f8:5e:f7:b5:
aa:4e:17:d8:45:f9:2f:67:99:f3:91:bb:1d:fd:8b:
62:1a:13:1a:87:7e:0d:be:c8:17:2c:85:86:ea:48:
eb:f1:3d:39:57:94:50:56:83:bf:6b:26:66:fd:7c:
21:a1:36:7e:c3:26:3f:ca:74:5b:9d:f1:95:81:de:
ae:89:c0:9f:ee:8f:c4:50:40:8d:c9:59:a7:28:45:
99:02:2d:f2:d5:17:6f:82:67:3c:a6:8c:48:34:82:
cc:21:6d:3d:35:0d:4b:9a:e2:52:e0:c2:03:92:8b:
5d:30:47:f2:38:01:f5:44:35:34:2b:cb:1e:bb:03:
1c:91:f2:03:74:ec:a9:c4:19:7a:84:5b:91:5f:d1:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:1E:6A:AE:79:8D:9E:20:A8:C3:D2:B9:27:C6:7C:8A:E6:02:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CBEDAB62E7311F18FA146E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.82.0-154.219.91.255
Signature Algorithm: sha256WithRSAEncryption
58:95:bb:d8:26:3b:0e:84:e4:3f:57:a1:90:48:f7:3d:1f:dc:
31:e4:be:5c:9c:58:43:25:0c:df:37:2b:cf:38:67:c4:f9:42:
f0:46:15:41:34:ad:f2:fd:f4:2c:d3:05:64:00:bb:1c:13:4f:
01:9f:98:bf:0f:6d:90:ed:55:df:c3:06:f9:28:a1:15:d5:87:
a9:81:73:ca:92:5c:df:28:06:07:62:0c:8c:e4:cc:2e:a9:b1:
b7:9f:73:e7:a8:bc:5c:9e:36:11:c5:e7:6d:01:72:3d:f4:96:
13:4c:20:00:d5:2f:18:eb:1c:0c:4f:19:41:61:00:b6:8b:30:
cd:6a:9a:65:e8:1d:80:46:ff:c5:6c:69:7c:c4:48:25:57:e2:
83:b6:1d:fe:5c:eb:d4:a3:68:d2:96:12:b2:49:78:79:25:e4:
07:18:66:e3:3a:f9:0d:67:34:fe:a7:4c:c0:93:d4:04:d4:85:
73:dc:cf:97:84:41:2c:98:6a:0b:94:c2:81:eb:47:f9:53:4f:
04:ef:85:6d:55:ef:ff:04:0f:59:d7:79:f7:bb:87:79:a3:2b:
eb:c8:a9:03:b2:67:b5:f2:97:b4:fa:d5:3c:03:cf:11:21:c3:
da:34:b3:56:82:78:a0:0b:1c:5b:43:f2:a7:32:de:60:5d:f9:
af:21:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:55 2026 by rpki-client