Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AF3EE881C511F1B825D9C7CE1D38B0.roa
File: 21AF3EE881C511F1B825D9C7CE1D38B0.roa (raw, json)
Hash identifier: xiqAa/kMbLxFGtjVCnTtux/lRI36lKLJjmB7ypdD+ME=
Subject key identifier: EC:9B:8F:01:DD:DD:7F:6F:DC:05:7D:21:21:40:30:64:81:50:A1:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D977
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AF3EE881C511F1B825D9C7CE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:51:50 +0000
ROA not before: Fri 17 Jul 2026 09:51:46 +0000
ROA not after: Mon 24 Aug 2026 09:51:46 +0000
asID: 54600
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121207 (0x1d977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:51:46 2026 GMT
Not After : Aug 24 09:51:46 2026 GMT
Subject: CN=6a59fb36-4855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:74:d4:85:90:26:bf:e2:2c:a5:ed:13:49:
fb:7c:75:d1:1e:02:b9:8f:5a:0c:ae:06:eb:31:c2:
a7:0e:03:bc:18:1d:99:f9:5c:47:16:d2:e5:ae:f8:
63:18:3e:13:f0:3b:0c:f3:8a:b3:0e:e7:4e:ad:b7:
da:17:7d:18:9c:dd:65:ba:6f:8a:66:a4:2e:73:95:
59:ec:81:34:d2:cb:58:15:35:6c:f4:3a:9a:58:0e:
7d:87:a0:51:79:31:1a:7d:eb:e1:40:e5:1f:9b:86:
00:aa:15:d3:54:ba:65:96:09:e0:79:3b:a6:c0:56:
02:b8:72:8c:80:5d:a1:13:bc:55:1b:d5:d8:c6:e6:
9d:34:a3:75:8d:39:11:eb:5c:d2:a4:4d:84:e2:cd:
a7:52:4e:47:51:f4:df:02:0e:43:c9:b7:8f:f2:52:
c1:a9:d6:e9:e2:9c:df:a8:84:91:a7:cb:2d:63:3d:
e7:a7:08:d2:8f:96:88:21:99:aa:cb:d0:54:f1:77:
be:ea:4c:eb:27:94:14:65:da:a2:04:96:b5:ed:df:
f5:e8:6b:30:53:f1:9d:45:90:23:43:af:38:43:cb:
b0:08:5a:30:0b:f6:12:18:1a:19:45:34:22:e1:da:
9c:68:66:f5:19:db:b0:2d:52:8d:59:90:66:f7:e0:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:8F:01:DD:DD:7F:6F:DC:05:7D:21:21:40:30:64:81:50:A1:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AF3EE881C511F1B825D9C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
55:8a:f6:4a:af:cf:88:c7:38:91:fa:46:b9:d8:d2:89:43:25:
7d:c2:9b:93:18:c1:c2:36:c6:34:66:3c:19:cd:2e:e2:1d:df:
b8:6e:e8:1f:ce:90:6d:f7:44:32:b5:00:aa:e8:71:cf:db:7f:
a5:f8:a1:9d:db:b1:64:dd:34:03:6d:3c:27:ff:5d:2c:1b:3f:
ad:17:31:b0:01:8c:c3:56:a9:c2:95:e6:cf:a6:cb:e9:2d:96:
a4:03:0a:b2:9c:9e:4f:4d:13:fe:09:52:1f:fa:4b:92:6b:72:
cb:3b:de:93:5e:82:38:fe:6c:d0:f7:26:74:b5:f2:cf:2a:c6:
0e:68:98:4d:ea:05:17:70:e4:39:94:12:42:7b:2a:de:bc:2a:
67:e5:9d:c0:f6:64:97:45:f4:f3:3a:fb:09:fc:a2:81:c9:78:
3f:79:63:26:ee:74:3e:1c:46:95:9b:2a:b0:11:2b:45:30:04:
80:c0:ee:2c:3b:ed:28:6a:91:35:3d:f4:4b:04:20:1c:47:fe:
45:43:b4:e0:9f:de:fb:7e:c9:1a:b7:b8:d2:aa:78:26:d5:6c:
c7:04:9e:0b:4e:e9:d5:8a:79:8f:b9:cf:d3:3f:04:42:fc:08:
d4:64:97:c4:57:93:19:27:60:79:4d:06:cd:39:3c:b6:86:01:
cd:ab:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:15 2026 by rpki-client