Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1589CC4C8B11F1B2EC09D0CE1D38B0.roa
File: CE1589CC4C8B11F1B2EC09D0CE1D38B0.roa (raw, json)
Hash identifier: y9TAGQoG1zUSkaU18GXRpJmqq1rd7uOlnCfh8/f21BM=
Subject key identifier: 5E:85:29:03:A5:2F:21:E8:20:DB:B5:49:BE:B6:72:AA:B2:53:91:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CACD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1589CC4C8B11F1B2EC09D0CE1D38B0.roa
Signing time: Sun 10 May 2026 16:17:57 +0000
ROA not before: Sun 10 May 2026 16:17:52 +0000
ROA not after: Wed 10 Jun 2026 16:17:52 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117453 (0x1cacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 16:17:52 2026 GMT
Not After : Jun 10 16:17:52 2026 GMT
Subject: CN=6a00afb5-83f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:82:f0:43:1f:5d:f9:88:b1:40:2a:d4:60:
7b:e5:1e:b8:98:8a:cd:20:1b:40:f7:d2:ae:41:65:
56:44:db:b4:94:5f:52:d9:4e:28:dd:18:3b:22:69:
da:69:24:19:38:44:f7:98:b3:c2:d8:ad:a6:b7:7c:
f9:49:69:05:d8:40:18:61:65:c8:6e:b9:88:71:20:
93:41:5c:ad:0b:d2:bd:ee:9f:aa:f6:67:af:66:c9:
12:bc:f0:dc:3e:74:3a:9d:29:e7:26:1b:61:20:03:
66:ef:3f:b8:2b:37:72:86:be:43:2f:45:c8:57:c2:
e6:c2:96:bd:33:a5:16:cc:f5:77:6d:3c:ee:f3:81:
4b:e1:62:80:17:67:2e:23:ec:94:96:1c:78:9d:2c:
02:43:00:b1:93:c5:2a:52:b6:19:30:2c:d7:c2:bf:
48:bf:35:dd:5f:17:12:33:b3:90:1b:58:2a:11:3c:
23:54:db:4d:a1:7e:d8:9d:be:14:99:1e:2b:8a:04:
7e:78:ad:cc:48:e8:84:ce:1f:45:39:e7:91:df:43:
18:70:95:c4:2c:74:59:f6:4a:c6:a2:a0:e2:34:ca:
1c:96:d2:81:49:9a:26:9a:b2:09:88:c8:51:88:9e:
19:69:52:69:66:82:4e:dc:d3:4e:03:45:c1:03:60:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:29:03:A5:2F:21:E8:20:DB:B5:49:BE:B6:72:AA:B2:53:91:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1589CC4C8B11F1B2EC09D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1a:4a:82:d1:c3:92:e8:a7:91:c6:3e:1b:38:22:38:45:bd:
ce:6b:f3:36:1e:b2:85:24:27:82:3b:2f:ad:8b:db:88:97:04:
0e:7a:1d:a4:4b:0d:6e:2c:50:03:46:de:99:a3:62:94:68:73:
65:ca:25:21:35:00:72:4e:de:a9:7b:57:34:c0:57:e8:13:28:
a2:83:78:46:bc:88:59:c2:80:ab:d7:25:1f:2d:19:5a:7b:bf:
c6:fa:ae:b8:d3:82:a4:f9:d4:91:15:53:e6:b6:6d:2b:06:b4:
22:db:43:a1:00:48:30:96:9a:b8:13:ca:ed:b0:23:6c:fc:bb:
a7:7b:fd:a4:7a:0a:1d:7f:7f:04:bd:c9:32:30:35:02:fb:3e:
ba:1c:c2:4a:5a:7b:1a:1c:af:21:3e:49:9d:d5:b6:ae:bb:1b:
ee:51:29:1f:a3:64:9e:35:a4:13:52:85:bc:4e:45:ee:4d:5a:
3f:45:f0:86:e4:7e:01:b4:9e:f4:7d:5e:12:c6:9c:6b:df:1c:
71:73:24:5b:ca:f0:93:81:18:ce:d0:44:50:5b:83:61:93:1a:
e0:b1:66:9e:d8:a6:11:7d:58:bc:ce:ad:77:94:6a:93:39:50:
7c:c8:0f:d8:35:11:4a:72:68:94:32:29:65:7b:3b:38:38:34:
54:08:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:55 2026 by rpki-client