Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5E6B2002E7011F1A6B3CFD3DAE4EC9C.roa
File: C5E6B2002E7011F1A6B3CFD3DAE4EC9C.roa (raw, json)
Hash identifier: b8Jc5jqr4+K8s8z0XWiYGlBqm4WW4B/3oXcWINEEXMI=
Subject key identifier: C5:5C:9F:C3:32:F6:36:A1:EE:5A:B5:01:0E:B8:58:9E:07:6B:37:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C213
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5E6B2002E7011F1A6B3CFD3DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 08:48:52 +0000
ROA not before: Thu 02 Apr 2026 08:48:47 +0000
ROA not after: Wed 06 May 2026 08:48:47 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115219 (0x1c213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 08:48:47 2026 GMT
Not After : May 6 08:48:47 2026 GMT
Subject: CN=69ce2d74-46cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:0c:c4:b9:c7:9b:4e:64:4d:c5:18:25:ee:
7c:37:67:38:a3:0e:4d:41:e7:17:9a:2f:c8:c0:81:
a8:a1:5d:6f:f8:4f:66:a5:1b:97:c8:4f:0e:08:28:
90:78:90:8f:42:97:1f:25:55:90:f1:40:a0:dc:08:
14:7b:84:d7:1c:ba:45:87:1e:57:36:2b:24:b0:bd:
6c:5a:4c:8d:dd:7f:48:bc:0d:86:d8:d2:fe:09:e0:
1f:fc:15:43:2b:26:37:3d:57:61:86:b6:70:89:d0:
cf:d4:31:e1:6b:27:13:b7:e4:1d:34:70:6f:be:66:
ca:d1:09:06:9f:56:c5:f5:74:89:78:14:cb:d4:e1:
28:51:21:b8:db:fd:d2:05:d5:3c:c6:8d:b5:8d:f5:
f0:d3:72:15:95:3f:3c:7a:89:76:a2:1e:03:58:ba:
d8:11:0a:9c:52:73:6a:cb:47:58:ea:e6:a0:a4:a1:
8d:7f:a4:cd:94:be:1a:34:cd:62:d1:ff:f9:ce:b9:
91:51:c9:6f:ef:00:4e:59:b2:ff:5c:7f:5b:f2:a7:
4d:74:87:d9:53:78:85:30:6e:a1:b4:7b:50:39:6f:
d8:1c:53:58:fe:70:e2:96:8c:6e:cd:92:4a:bb:3c:
82:dc:77:3d:b8:9b:73:7b:0d:ae:e3:4e:8a:e7:79:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:9F:C3:32:F6:36:A1:EE:5A:B5:01:0E:B8:58:9E:07:6B:37:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5E6B2002E7011F1A6B3CFD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
Signature Algorithm: sha256WithRSAEncryption
93:66:e6:37:aa:a8:d3:6a:39:af:2a:fe:df:62:9e:d8:75:41:
27:d7:f6:9e:29:23:f3:08:2f:79:83:04:2a:f9:c4:fd:3d:85:
77:a8:25:82:e9:de:82:66:50:27:78:d0:f1:dc:6c:dc:06:c3:
7d:c0:b3:20:94:21:88:37:75:ec:b2:9c:74:9e:6f:25:9c:05:
3d:fe:77:1d:d6:27:4a:08:5b:12:13:de:05:c2:b3:28:56:1b:
6a:b3:8b:b3:60:28:2e:61:cf:ae:4e:34:41:c1:1d:60:45:10:
df:d6:86:ed:70:a7:27:f8:38:26:ee:6e:6a:54:e9:46:1e:20:
87:10:37:b1:dd:f1:d8:2c:cd:55:ec:43:66:9a:3e:ee:46:c5:
04:61:27:72:09:a3:e9:f5:29:28:1f:e9:ff:5e:72:c1:91:c7:
8f:5c:1b:53:b2:8b:e1:71:a1:62:b2:aa:7d:7f:c0:80:b2:85:
35:f3:7e:32:b1:32:e0:52:fb:d9:7f:e3:c1:6c:a9:84:45:ba:
0f:da:15:a6:05:fb:85:95:c9:80:5c:ca:d3:8d:26:89:bd:8b:
32:2f:d5:5a:f2:76:d7:6f:b2:08:f1:4c:c6:82:57:ad:46:95:
c4:79:35:89:5d:82:e9:f7:00:0e:49:c8:96:5b:fe:e8:1e:cc:
9d:ab:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:19 2026 by rpki-client