Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FD7F84801AC11F18550D3DEDAE4EC9C.roa
File: 5FD7F84801AC11F18550D3DEDAE4EC9C.roa (raw, json)
Hash identifier: 44wT2udGLfvoBDw6QsZa3TnFvRBcjkt9o5A56bsEN2w=
Subject key identifier: 5D:0C:0B:D7:8F:F9:D6:75:BF:B8:2F:F6:4B:10:56:4E:08:D7:B0:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B88B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FD7F84801AC11F18550D3DEDAE4EC9C.roa
Signing time: Wed 04 Feb 2026 09:32:08 +0000
ROA not before: Wed 04 Feb 2026 09:32:02 +0000
ROA not after: Tue 10 Mar 2026 09:32:02 +0000
asID: 20473
IP address blocks: 154.196.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112779 (0x1b88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 09:32:02 2026 GMT
Not After : Mar 10 09:32:02 2026 GMT
Subject: CN=69831218-c2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:5a:b1:ad:e5:6c:50:81:58:ea:bc:b2:b5:
0f:5c:47:62:f7:63:4c:58:67:28:eb:09:54:c9:a9:
50:be:b8:98:da:97:62:0c:25:92:f0:f2:90:d0:27:
a4:8e:75:ce:8d:69:c0:ee:ac:15:87:15:eb:17:06:
69:71:4f:34:df:cc:95:b4:0a:52:92:3d:c2:db:c5:
82:90:f1:d8:52:0a:a9:ec:4d:16:da:d7:d4:7b:4c:
8e:20:e6:48:21:ec:0a:02:02:6d:bb:30:a1:fb:ef:
eb:16:3a:26:36:a6:54:df:a7:0b:2e:6d:0c:8b:a8:
ae:d9:0d:a9:05:4a:d4:9d:d6:9a:8a:30:60:6c:7d:
ac:28:26:06:eb:ca:26:12:d9:9e:c0:d3:a2:1c:b4:
72:0f:74:4f:c0:4a:92:6d:db:b8:8e:68:23:80:b1:
c6:3f:88:ed:35:cc:73:cb:46:86:8d:9c:f8:35:14:
18:bf:97:ef:e6:68:a3:8f:35:49:81:1c:6f:c1:e3:
a1:45:50:4e:07:63:67:5a:10:62:a9:31:71:7c:55:
9f:8d:57:41:2b:69:32:53:93:db:5f:7b:58:4e:62:
89:56:4f:0f:0e:81:70:fe:bc:d7:38:0c:36:df:ee:
08:47:e5:9e:a7:ed:11:4a:19:93:c3:85:9b:17:cd:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0C:0B:D7:8F:F9:D6:75:BF:B8:2F:F6:4B:10:56:4E:08:D7:B0:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FD7F84801AC11F18550D3DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.131.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d6:1c:53:1e:56:7b:3b:f9:90:50:95:82:a0:59:e4:51:ce:
ac:0a:81:d7:4b:39:f0:63:a2:78:a2:79:de:c2:1e:26:14:10:
58:eb:be:45:eb:c3:1b:eb:eb:46:9c:2d:47:07:5b:73:d7:53:
f8:d6:32:94:57:d9:fe:a5:11:6d:09:b3:14:d2:3f:41:e6:81:
d7:fa:57:ac:53:8e:31:f6:d3:84:cc:2a:b8:5a:f2:e8:fc:7c:
10:5f:b1:a8:04:03:b2:0b:71:48:e2:ff:83:15:56:01:43:93:
e2:65:98:f0:88:b1:66:b9:c8:14:e5:74:d6:d7:f4:dd:76:8f:
cd:82:c8:3d:97:40:15:f0:0a:ad:9c:21:22:4f:29:5b:76:16:
01:00:21:ba:31:ae:0b:40:06:87:17:62:dc:1a:cc:0c:45:d9:
25:61:a6:9c:08:80:79:48:cd:56:32:b4:9f:54:d9:0c:21:47:
3a:a8:8d:aa:11:fa:8a:93:69:c7:f6:f6:e4:75:69:a1:09:c6:
57:2a:73:4f:d8:72:7f:08:1f:d0:fb:7e:49:19:9d:0f:b9:24:
c2:33:01:fa:a7:32:5e:43:e4:6f:ec:1b:a8:37:67:f4:b7:f5:
90:a6:60:73:9f:ad:1e:fb:13:0d:59:d2:48:9b:ec:65:87:f0:
f8:2d:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:07 2026 by rpki-client