Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5EA59BFA60AD11F1AF689ED1CE1D38B0.roa
File: 5EA59BFA60AD11F1AF689ED1CE1D38B0.roa (raw, json)
Hash identifier: cdEai7Ee3CZvUvc9U/SJDi4Blq+Yz12d2wfaw2JZgC0=
Subject key identifier: EA:6B:BF:26:1F:A5:89:38:08:BC:51:11:31:4B:12:F7:EA:B5:19:DD
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 089B
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5EA59BFA60AD11F1AF689ED1CE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:08:36 +0000
ROA not before: Fri 05 Jun 2026 07:08:31 +0000
ROA not after: Sat 05 Jun 2032 07:08:31 +0000
asID: 37239
IP address blocks: 154.72.56.0/24 maxlen: 24
154.72.57.0/24 maxlen: 24
154.72.58.0/24 maxlen: 24
154.72.59.0/24 maxlen: 24
154.72.60.0/24 maxlen: 24
154.72.61.0/24 maxlen: 24
154.72.62.0/24 maxlen: 24
154.72.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Jun 5 07:08:31 2026 GMT
Not After : Jun 5 07:08:31 2032 GMT
Subject: CN=6a2275f4-bda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:69:b7:16:70:11:23:37:5b:29:ee:f8:82:
5b:67:d5:ad:57:f4:f5:52:10:b7:80:7a:9a:0c:26:
1d:ce:a0:4d:a1:51:50:06:9d:2f:15:c2:83:a3:27:
22:06:6e:50:72:a6:58:a0:94:a0:34:8b:d6:e5:8f:
f0:11:40:b9:02:34:64:55:8f:63:2e:7e:26:10:1b:
70:9c:0d:a6:02:2e:28:f6:db:7a:6b:87:0b:a5:dc:
d7:e5:3c:e1:10:31:7e:92:e0:2e:89:5d:6b:d8:f8:
1b:72:b1:22:0e:cc:67:47:8f:d7:f7:27:65:3c:f9:
9d:d1:20:0f:95:d6:91:6d:ab:8c:fd:e2:a8:74:23:
a5:73:fa:6d:d4:d4:76:a2:59:cd:a6:29:25:c6:f4:
47:f4:32:5b:1f:c5:ea:77:69:41:57:41:91:9c:68:
7a:75:a5:df:e2:07:16:36:9b:bc:24:27:92:c5:f4:
cc:99:e6:91:a2:8f:f0:a7:d8:bb:5b:f4:4a:0d:8a:
af:14:f1:09:6f:aa:e7:06:04:e9:7c:84:03:3a:3e:
6f:22:fc:b6:be:db:eb:e7:2b:db:b4:f3:3a:f9:f8:
d1:1a:8b:f2:26:34:c4:6a:d0:05:11:f6:08:80:45:
b7:dd:61:47:99:2b:48:cc:2f:89:ab:2e:9f:d3:18:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:BF:26:1F:A5:89:38:08:BC:51:11:31:4B:12:F7:EA:B5:19:DD
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5EA59BFA60AD11F1AF689ED1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.56.0/21
Signature Algorithm: sha256WithRSAEncryption
12:48:4f:2f:cc:f6:dc:79:72:72:d8:f0:02:dd:79:af:fd:f1:
7d:4f:a0:97:4e:9e:9f:45:e8:7c:05:3b:eb:77:9e:a2:35:df:
a7:5a:49:a0:17:4f:19:4f:4f:c8:8d:2b:86:8c:31:ab:05:a7:
a1:f4:d4:bd:54:78:8b:7f:aa:57:e6:92:65:a0:b0:0a:47:35:
32:25:a7:3c:db:1e:e4:f0:17:45:19:3b:fd:0a:1d:b1:20:bf:
41:27:f1:84:53:a1:56:53:8c:7e:07:13:92:ba:4f:31:3e:e9:
53:55:7e:6b:5d:c3:19:a3:8b:b3:c6:37:65:3a:b4:22:48:28:
9d:65:f7:0c:f2:af:34:67:de:bd:53:e9:be:17:a9:98:79:b1:
af:db:fc:48:1d:cd:fd:53:65:e7:a5:6a:88:d8:6e:fa:ba:ae:
56:80:5e:83:cc:7b:fd:1b:ae:bc:ab:ac:02:04:60:71:d2:56:
08:8c:f7:c7:ee:a0:20:01:60:f9:f3:48:fa:7b:3a:58:6a:18:
a0:b5:ec:88:e8:88:f5:db:86:80:0e:24:44:a7:8b:54:b9:ba:
63:84:c5:77:2b:16:05:f3:5d:4a:67:63:4b:0d:29:6f:f0:53:
97:0a:50:96:de:2b:e8:b1:e2:cb:6d:8c:c4:6f:90:12:ff:f4:
19:65:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:30 2026 by rpki-client