Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEE1C12A51C811F1B7C3E0B3CE1D38B0.roa
File: DEE1C12A51C811F1B7C3E0B3CE1D38B0.roa (raw, json)
Hash identifier: RQbqDsHlkBGImBXXX6G2syfpcgDsB/rRR7Uh+KlOsNs=
Subject key identifier: 5D:DF:2D:89:F7:8F:F9:38:F2:90:D1:B9:8B:12:01:47:3F:1D:AD:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEE1C12A51C811F1B7C3E0B3CE1D38B0.roa
Signing time: Sun 17 May 2026 08:17:40 +0000
ROA not before: Sun 17 May 2026 08:17:36 +0000
ROA not after: Wed 24 Jun 2026 08:17:36 +0000
asID: 154376
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117792 (0x1cc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:17:36 2026 GMT
Not After : Jun 24 08:17:36 2026 GMT
Subject: CN=6a0979a4-27d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:7f:e6:22:92:3a:74:b0:c1:3f:58:5d:a4:
14:64:52:68:ab:61:a1:b8:9a:d7:df:76:ad:64:5e:
47:d2:91:36:19:72:64:c3:8c:40:e8:e1:68:57:bd:
ec:ca:d1:64:8b:f7:83:be:c0:be:89:b0:e5:0c:98:
73:de:69:85:31:2f:fe:fa:aa:ec:cc:5c:91:0b:3c:
20:a0:09:54:c0:35:ff:0e:82:5e:10:b3:6b:c9:40:
5e:10:b6:1d:7a:2e:6a:59:d3:f9:16:ee:e3:a3:6f:
18:d3:85:10:d5:15:5e:eb:56:4b:81:32:c8:cc:b2:
72:bf:92:b2:91:a7:29:c6:9f:26:3f:6b:ee:4d:5a:
4a:1f:4b:af:f4:61:05:98:5e:a1:f5:5b:ba:fd:be:
0e:9c:7a:1e:83:ba:cc:b4:a0:18:0c:5f:2d:2a:ea:
0d:af:28:39:c2:82:95:b0:98:ac:15:40:f5:39:1a:
0b:e9:e2:df:82:4c:96:32:30:d3:f0:a8:2b:90:33:
8b:a5:a2:e5:2b:26:34:bd:8b:3d:95:1d:c6:6e:ce:
95:48:85:21:71:3a:f0:1b:63:04:66:33:eb:18:1e:
37:74:e5:d6:20:50:cd:a5:8d:2d:eb:fd:46:7d:a7:
df:38:1b:7a:3a:3e:08:31:12:06:96:d4:0d:1f:35:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:2D:89:F7:8F:F9:38:F2:90:D1:B9:8B:12:01:47:3F:1D:AD:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEE1C12A51C811F1B7C3E0B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c0:a9:fa:e8:4b:ea:bb:ec:9d:a1:69:cf:72:fa:ad:26:65:
d6:74:c7:a4:8b:76:23:28:6e:84:3e:d3:ce:76:b6:b5:6a:cf:
2d:e2:65:f0:ac:82:8e:32:fa:9b:b2:25:c5:9d:76:87:7f:5b:
22:52:4d:d5:2c:cb:9d:e6:5e:b1:a3:7e:f5:30:d9:fa:0b:ab:
f7:77:d5:6f:a8:95:25:95:cf:6f:c9:8f:89:87:99:9f:0f:da:
a8:3f:34:55:48:74:24:c6:62:a8:6a:b8:25:ab:15:b3:14:c1:
7e:94:47:6d:a7:ba:b7:af:69:9b:1f:a6:b1:49:b2:00:ae:d1:
b3:67:33:5c:22:12:67:64:91:53:82:e5:a1:47:1e:ea:12:b1:
8f:dc:f9:85:fb:ba:57:7e:2d:d3:51:af:d8:50:d6:d6:61:8b:
08:5e:cb:1b:21:30:fc:f1:92:aa:d1:f6:46:47:f8:86:9e:a3:
07:9b:6a:14:cd:21:4e:54:fb:f1:8e:9e:9f:62:c3:a8:1b:50:
8d:85:44:85:43:26:5d:49:b3:b2:a2:78:3d:dd:e5:67:66:b8:
73:3d:b7:c9:bb:e7:6d:c0:61:76:d5:17:f4:8e:e4:5d:ac:72:
c7:99:ce:ff:10:31:09:47:4a:2d:5e:3b:15:ea:1e:be:9a:90:
c6:50:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:02:40 2026 by rpki-client