Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00EC28D2854A11F180BE52A6CE1D38B0.roa
File: 00EC28D2854A11F180BE52A6CE1D38B0.roa (raw, json)
Hash identifier: ElFySd67ssNZ8je8VL+QC1d0qelEEr3AjYp/Ryhn0ZQ=
Subject key identifier: C0:5A:A9:86:8F:59:F4:58:70:A0:DA:D2:B4:E4:C6:73:DF:58:24:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00EC28D2854A11F180BE52A6CE1D38B0.roa
Signing time: Tue 21 Jul 2026 21:20:32 +0000
ROA not before: Tue 21 Jul 2026 21:20:28 +0000
ROA not after: Thu 27 Aug 2026 21:20:28 +0000
asID: 138915
IP address blocks: 154.93.84.0/23 maxlen: 24
154.93.86.0/24 maxlen: 24
154.93.92.0/24 maxlen: 24
154.93.98.0/24 maxlen: 24
154.93.99.0/24 maxlen: 24
154.93.102.0/24 maxlen: 24
154.93.126.0/24 maxlen: 24
154.93.127.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121526 (0x1dab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:20:28 2026 GMT
Not After : Aug 27 21:20:28 2026 GMT
Subject: CN=6a5fe2a0-b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:5a:51:5b:a8:c7:f4:a1:7a:54:67:68:9e:
d4:52:e3:7e:4d:92:70:d9:d6:cd:8b:c2:a1:7f:fe:
d2:5b:ea:88:93:5b:0c:1c:e7:a9:aa:bf:cb:8e:4e:
07:ff:6b:a7:d4:5c:ea:0a:72:1b:e0:9d:5f:5a:9a:
12:d6:49:68:c9:24:7e:d3:aa:d4:d9:0e:3b:53:34:
56:b2:f1:fa:71:1a:c1:df:09:eb:be:b1:83:7f:9d:
53:f5:5c:62:2b:5e:4e:a1:db:f0:a4:17:0d:8d:60:
a5:2c:44:bd:2d:48:bf:71:02:d6:5e:bf:34:2e:9d:
34:c9:e7:2f:57:59:32:88:3c:8e:17:84:e6:e3:56:
d4:45:10:85:3c:70:14:7c:cb:02:54:61:58:2b:a9:
f4:be:18:59:e2:6a:c6:0c:8e:22:f6:6a:91:4c:2c:
3a:71:a3:3d:77:52:1c:f2:a9:e8:27:4b:3b:84:f9:
70:1d:d5:d7:a9:ed:90:a2:68:5b:1b:48:7a:31:53:
3f:6d:fd:e8:24:d7:f2:ca:0e:4b:6f:38:96:1d:32:
c7:7a:86:b9:51:23:50:f1:c3:f4:b0:b7:bc:34:5f:
af:79:46:2e:01:76:d2:d9:41:39:86:e6:3b:e5:b6:
e1:bd:f6:36:3a:3b:fd:ac:62:b7:5c:64:d3:ab:a5:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:A9:86:8F:59:F4:58:70:A0:DA:D2:B4:E4:C6:73:DF:58:24:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00EC28D2854A11F180BE52A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.84.0-154.93.86.255
154.93.92.0/24
154.93.98.0/23
154.93.102.0/24
154.93.126.0/23
154.94.66.0/23
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:fa:4b:f9:cd:38:5d:81:fa:fe:59:99:e7:ba:81:b7:a9:38:
e5:bf:bc:a3:fb:98:07:b4:0b:47:3d:a1:7b:c4:fb:ac:8c:6c:
a4:96:64:80:22:aa:ff:65:b1:cc:4a:b2:56:52:e9:bb:35:b0:
47:08:2e:91:b7:3b:3a:28:3e:68:86:da:3f:b8:12:33:50:50:
fc:da:86:46:40:61:f0:6a:5b:48:9a:ac:55:53:c8:cc:66:61:
b1:98:08:f1:76:5f:2b:0c:c5:da:0a:1f:ef:4e:8b:ec:a1:6f:
55:10:4f:b1:38:44:fb:82:55:8c:bc:90:2c:08:f7:39:13:68:
11:35:97:91:7e:53:2d:c6:08:a8:79:4d:e6:f9:2a:0c:25:77:
cc:39:78:e0:9a:1b:12:79:50:c3:84:ca:17:b3:06:59:9b:5a:
44:4a:ae:49:e1:d3:f9:9c:25:1a:8a:98:08:f4:67:40:4a:f2:
13:51:61:9f:0d:41:dd:5f:ef:96:c6:ec:b4:d1:d6:4a:a4:41:
74:62:3a:16:aa:be:1c:a9:61:6d:ea:9c:6a:86:21:70:af:8f:
e4:5e:85:97:35:b0:f7:78:3f:35:ed:6d:6a:2d:9d:87:76:64:
30:1d:dd:a2:84:d9:6e:72:f7:2a:f3:b8:ba:8e:ff:51:18:7d:
7a:fd:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:26 2026 by rpki-client