Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EA81206FC211F1947E48B6CE1D38B0.roa
File: 21EA81206FC211F1947E48B6CE1D38B0.roa (raw, json)
Hash identifier: TpTBEmT7yNHv7BN4TGVFyabq7tJnF5TvnBK5MuHU72A=
Subject key identifier: 8A:2C:19:4C:04:F3:D3:39:9A:78:8E:E4:ED:5F:A6:6A:76:A9:D6:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EA81206FC211F1947E48B6CE1D38B0.roa
Signing time: Wed 24 Jun 2026 11:45:01 +0000
ROA not before: Wed 24 Jun 2026 11:44:56 +0000
ROA not after: Tue 28 Jul 2026 11:44:56 +0000
asID: 211687
IP address blocks: 154.193.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 08:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120005 (0x1d4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 11:44:56 2026 GMT
Not After : Jul 28 11:44:56 2026 GMT
Subject: CN=6a3bc33d-45c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:6a:bc:28:3a:d5:24:c8:15:e1:98:e8:62:
58:e2:3f:d8:58:94:cc:40:6d:c3:71:e3:82:59:c7:
14:9b:bc:14:b7:a0:9f:c9:06:58:65:d5:9e:0c:55:
40:23:8b:db:df:ea:ef:4f:c5:5c:54:9e:dc:0b:4f:
0c:61:7c:12:5d:46:08:3b:40:40:c4:d7:55:45:67:
8a:12:20:0b:66:ee:fc:a9:9b:13:9d:13:9b:66:ee:
cb:e1:2d:5d:99:a1:e4:26:5f:04:7c:3a:44:c5:6d:
8d:68:7e:9b:ef:10:be:2d:b5:7b:3c:0a:ed:73:72:
bb:a6:93:fe:40:a3:0a:f3:39:9d:72:86:99:6e:af:
4b:21:6a:0e:f5:d8:70:2c:08:d7:8f:cc:23:13:a7:
77:18:24:5a:8c:4c:c0:27:5b:5f:cb:c3:1e:45:42:
95:0f:d3:6b:cb:d0:38:58:5c:24:99:96:0b:d1:5a:
c2:e5:6a:28:2c:6a:ce:2a:bb:ff:8c:2f:aa:29:a3:
67:10:48:c6:42:7c:30:81:d9:7a:8a:4e:0f:07:1a:
de:e7:58:49:2b:dc:b8:96:fa:a1:36:a5:0d:f1:27:
e7:ff:0f:12:13:a8:0f:01:f8:fc:a4:c8:04:d5:f7:
c5:a4:ae:7d:65:30:84:40:6a:41:28:74:f1:44:01:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:19:4C:04:F3:D3:39:9A:78:8E:E4:ED:5F:A6:6A:76:A9:D6:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EA81206FC211F1947E48B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2d:e0:e9:50:b0:60:12:53:d9:70:0a:1c:a8:d7:18:48:25:
c2:69:c6:eb:c5:31:bf:01:a5:17:ec:5d:41:cb:c5:64:a4:a5:
c7:89:29:3a:bd:3e:d6:51:e5:a6:dc:14:0a:1e:e7:3b:88:47:
08:e4:39:c5:5b:41:ba:07:c1:0f:9d:7d:58:ed:e1:d5:a2:03:
dd:c0:ff:64:89:02:80:a3:17:14:16:ed:06:b5:dd:d1:52:0c:
35:19:d5:b4:94:41:14:70:df:e4:d1:3f:4c:49:72:b7:9c:f7:
d3:58:87:20:c4:bb:21:bd:af:90:15:3f:d2:50:34:0d:64:79:
8c:cd:65:5e:e5:4a:f7:d1:97:83:b0:89:8d:89:59:fa:38:ec:
ea:af:87:50:2f:3e:77:42:26:44:cb:25:48:06:51:af:d2:1e:
b3:82:73:e1:d3:94:8e:e3:a9:88:9b:b7:53:ee:01:13:7d:a1:
cd:40:86:95:09:eb:d4:f8:e2:27:e0:ea:32:72:92:72:3c:a0:
45:1f:07:1b:d5:30:d7:79:a4:4e:58:56:de:5c:91:82:c8:6c:
7f:0b:6e:3c:a2:b6:76:b7:17:23:93:2a:5d:3f:07:95:2d:47:
bf:6d:d3:db:fb:ac:8e:fc:96:95:a5:a1:b3:65:a8:ba:dc:f7:
d5:4c:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:56:12 2026 by rpki-client