Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28818B7881B511F1BE0336E7CE1D38B0.roa
File: 28818B7881B511F1BE0336E7CE1D38B0.roa (raw, json)
Hash identifier: iIXCDx8EQ3f9h2mjgNX8aT/yyAKCQXOdYKMOLFf2D2E=
Subject key identifier: 2F:36:A2:8B:E3:84:D1:45:51:12:DA:99:6D:54:70:F1:2D:76:33:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D94F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28818B7881B511F1BE0336E7CE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:57:30 +0000
ROA not before: Fri 17 Jul 2026 07:57:26 +0000
ROA not after: Mon 24 Aug 2026 07:57:26 +0000
asID: 395886
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121167 (0x1d94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:57:26 2026 GMT
Not After : Aug 24 07:57:26 2026 GMT
Subject: CN=6a59e06a-e63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:ea:87:5b:c1:4d:82:6a:f8:dc:50:7d:ea:
c0:0b:55:46:29:a1:a8:27:28:57:01:ca:e4:72:d8:
9f:c2:95:9b:85:fb:49:87:14:78:ac:f9:fe:25:c0:
52:c2:c7:4e:02:25:6c:01:87:14:23:bb:69:fd:3c:
38:67:b5:75:d3:e5:c2:e8:99:37:31:cc:72:12:a2:
cf:10:31:cd:8a:32:94:db:2b:94:01:ea:e1:81:90:
42:96:bc:6d:25:a4:ae:4c:9e:d4:ed:81:15:1f:fe:
eb:16:fc:66:09:fb:f4:4f:01:ab:f9:19:d4:cd:88:
96:cc:71:e3:f5:ac:2b:7d:cf:8e:15:f6:a3:f6:96:
04:d3:e1:13:6a:68:e2:ec:54:9f:02:82:98:d8:f4:
e0:b2:75:e9:6d:7a:15:84:4a:68:43:14:b8:b6:58:
80:b5:63:9d:17:bb:41:0f:11:af:30:dd:f1:6a:69:
f4:e3:b0:13:97:c0:44:1f:63:b5:99:2e:05:f7:25:
99:56:ed:df:53:68:cb:b3:51:9e:9b:b7:68:fd:5f:
a6:8b:7f:c3:c3:3c:5b:9f:67:8e:e5:9d:3f:2c:e3:
5b:93:f5:ed:4b:19:d5:b3:71:44:1a:8f:39:d7:ec:
22:2e:3b:ed:4e:af:11:1c:42:28:d3:a7:39:15:2c:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:36:A2:8B:E3:84:D1:45:51:12:DA:99:6D:54:70:F1:2D:76:33:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28818B7881B511F1BE0336E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
d5:11:b0:cb:95:84:17:98:de:0c:06:b3:f9:8f:75:f8:f5:71:
1c:8d:b0:b3:8b:17:00:f8:39:a6:20:9e:2e:a0:3f:2d:95:51:
da:90:44:e1:56:88:17:df:2e:d1:67:2b:d6:56:8c:c9:c8:35:
6f:e3:41:d9:b0:37:25:0a:28:d3:47:64:c6:7a:70:12:56:01:
c8:fa:19:5a:eb:42:dd:bb:f7:0f:4d:7c:a8:10:09:82:68:05:
e7:5b:c2:71:56:e6:65:0a:00:5a:14:be:62:63:4f:b1:31:d5:
9b:53:c7:43:69:88:0c:39:2a:95:db:63:bb:38:35:30:86:8d:
36:44:f0:a3:c1:da:65:ce:6d:f9:20:c7:41:cf:64:fc:9b:f6:
88:3f:3e:c8:94:8c:62:b3:2e:04:98:ae:a9:7b:26:51:83:71:
5f:c1:40:97:5b:07:7f:1f:74:44:0b:39:06:30:45:c0:ff:98:
e8:e4:f8:ec:ee:be:46:60:09:db:08:61:18:bd:02:ae:a8:bf:
f1:4c:1e:24:a2:ba:30:6f:0f:aa:f7:81:c9:27:8f:c4:cd:c5:
4b:c0:89:a8:bc:01:dd:f8:52:b0:c9:07:83:6f:78:1c:2e:22:
f8:5f:e0:73:a1:a1:c5:30:97:33:01:09:91:d0:5d:d8:ff:fe:
98:b6:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:16 2026 by rpki-client