Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962DCD0651C911F18DDFFBB8CE1D38B0.roa
File: 962DCD0651C911F18DDFFBB8CE1D38B0.roa (raw, json)
Hash identifier: oKALlAFJs85opKrKlEGySYj6xOfrJBgNVr2Q/Guq/8w=
Subject key identifier: 48:FF:33:9F:61:19:11:DE:83:A0:A7:0E:E8:38:BE:26:39:F4:50:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962DCD0651C911F18DDFFBB8CE1D38B0.roa
Signing time: Sun 17 May 2026 08:22:48 +0000
ROA not before: Sun 17 May 2026 08:22:43 +0000
ROA not after: Wed 24 Jun 2026 08:22:43 +0000
asID: 395886
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117794 (0x1cc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:22:43 2026 GMT
Not After : Jun 24 08:22:43 2026 GMT
Subject: CN=6a097ad8-7576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:e6:25:07:a7:14:7b:b1:d0:4b:87:87:25:
c9:1f:90:d7:a6:38:dd:86:26:9c:34:88:d1:72:a0:
37:53:70:ff:a9:1e:3c:74:c9:90:69:7f:65:dd:b6:
c3:48:80:21:60:d2:b3:2a:0a:e8:55:42:02:27:98:
69:66:4b:3b:70:85:4c:cc:73:ac:5a:83:e6:7e:51:
74:ee:89:de:22:b5:20:85:68:ab:e3:ea:56:86:55:
5a:16:1d:a0:45:b6:ff:b2:31:13:f2:13:a1:79:6e:
d5:88:1c:ac:79:5d:f8:3b:50:3a:c1:24:c1:2b:e4:
fa:60:32:9d:64:6c:34:76:8f:d0:ae:37:2f:99:9b:
40:30:eb:d1:34:d6:c3:38:f2:1f:c7:54:91:e3:a4:
06:ec:1a:41:64:06:18:aa:96:1f:ad:26:db:cb:13:
cc:bb:77:07:43:21:aa:19:e1:da:3b:79:56:f2:26:
83:0f:9a:c8:61:b5:90:7c:ef:da:eb:72:8d:b2:a9:
a3:1d:62:7e:b3:09:00:97:6d:28:1f:bb:37:c2:92:
0b:75:94:d6:d8:29:4a:93:55:55:40:8c:fd:72:05:
1c:94:7a:8c:d6:43:95:a1:45:e4:eb:f4:15:99:0b:
50:c4:fb:9b:f3:da:9c:f1:e1:93:a7:29:11:18:19:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:33:9F:61:19:11:DE:83:A0:A7:0E:E8:38:BE:26:39:F4:50:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962DCD0651C911F18DDFFBB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
16:bf:a8:57:7b:ad:1c:ca:c9:ce:5a:a9:81:83:90:f6:27:73:
69:aa:89:da:69:f4:95:8e:09:6e:fb:7e:b4:e2:4a:cb:03:5c:
0c:99:39:a8:38:5d:83:f1:92:93:6f:ce:65:3d:b1:4b:95:5b:
dd:c3:60:7f:63:3d:07:b5:4d:ac:31:d0:03:08:6a:ae:7d:0a:
2e:b3:df:e5:7b:15:8c:23:c9:b1:1f:86:4a:f8:44:1d:af:e1:
32:ec:31:7f:ac:94:6f:c4:cd:70:cb:ef:30:d0:21:4d:4f:5e:
7e:f4:8f:97:6e:fb:a5:3e:88:dc:37:f0:1a:81:3b:4a:96:d3:
b4:e9:eb:06:2c:84:94:cf:3e:1b:a7:55:e1:60:74:df:36:42:
70:8b:dd:c8:4c:4f:39:6b:c6:56:12:b0:25:0b:4a:5f:7c:02:
65:fa:85:aa:17:9d:0a:dd:33:2f:8d:c5:79:b2:da:09:16:ae:
5f:f6:d4:67:28:c8:7e:d0:cf:13:f5:6c:8e:99:e4:97:2f:9c:
69:cf:5b:b9:4e:8f:e7:d7:9a:c3:75:64:19:92:5f:df:cb:98:
b1:2a:98:bf:8d:9c:23:70:1a:be:c5:6f:a9:47:c2:d5:7b:0a:
14:aa:da:dc:f8:76:26:47:57:a1:bb:5f:45:48:98:1f:a5:c8:
b5:b4:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:07 2026 by rpki-client