Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A4B91F27C5011F1B0CD9BC9CE1D38B0.roa
File: 2A4B91F27C5011F1B0CD9BC9CE1D38B0.roa (raw, json)
Hash identifier: aAdNc5OlfQuj9w8drVimUePfXkvHSbeZgCzHy0IrWfk=
Subject key identifier: 06:D3:EA:7E:73:36:CB:66:15:4E:24:4B:26:40:41:30:1F:02:53:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A4B91F27C5011F1B0CD9BC9CE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:11:58 +0000
ROA not before: Fri 10 Jul 2026 11:11:53 +0000
ROA not after: Tue 18 Aug 2026 11:11:53 +0000
asID: 54600
IP address blocks: 154.193.192.0/18 maxlen: 24
154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120827 (0x1d7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:11:53 2026 GMT
Not After : Aug 18 11:11:53 2026 GMT
Subject: CN=6a50d37e-6a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:a0:f5:d2:87:88:0c:90:61:78:6e:53:fa:
27:85:c6:bb:fd:aa:7c:55:b4:6f:49:d2:ca:12:27:
2c:a6:0b:18:1b:d7:b0:57:f3:6b:e5:2e:22:ec:4f:
2e:0f:f9:eb:a3:b5:0b:9e:f1:fe:bd:a4:b7:3a:c2:
7a:33:05:9b:58:5c:0b:e2:fa:dc:d9:46:3c:a8:a6:
46:ca:d3:0a:0e:bd:2a:66:ac:79:a6:de:0c:6f:b5:
0a:cc:05:22:cc:85:ed:fb:38:c4:51:e5:37:63:ba:
29:20:69:ff:79:66:f8:02:9e:52:8d:64:b8:24:17:
a7:3f:c6:18:9b:9b:cf:c6:f4:0a:bc:15:a5:ff:50:
b7:8e:ba:27:c3:ba:89:72:bf:77:64:49:e3:50:ac:
0d:85:57:ac:d8:f7:6c:15:55:e0:89:00:af:ef:f2:
39:bd:5d:d8:8c:56:fb:78:c8:6e:ec:c2:d3:1e:36:
72:6f:21:8f:f5:4d:74:cd:33:62:d7:7c:31:37:55:
84:f1:98:bb:83:21:d6:a5:b2:cd:61:ed:b8:9a:0d:
1e:b4:d9:c8:7d:45:c0:a5:82:29:28:5e:68:81:8c:
c3:6e:8c:d0:d7:f1:19:76:36:1f:c7:b0:10:9c:8e:
d9:3b:7a:00:3b:01:d9:bd:48:86:16:33:dd:af:23:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:EA:7E:73:36:CB:66:15:4E:24:4B:26:40:41:30:1F:02:53:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A4B91F27C5011F1B0CD9BC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:13:10:c4:cd:01:fe:69:b5:1f:59:da:bc:c8:a0:23:d6:2c:
83:14:4e:b0:63:17:ca:68:c5:48:39:85:2e:78:0f:cc:68:29:
84:ef:62:41:18:90:70:b8:62:32:46:8e:dc:08:ea:bb:4f:c3:
ae:f3:41:04:ab:d8:c1:93:50:c4:f7:33:93:43:22:89:76:ac:
77:fe:01:d9:b1:77:90:a4:28:c1:eb:8c:32:f7:b7:a3:06:0b:
f6:7f:ec:17:26:b2:10:6f:7f:eb:16:3d:60:21:e2:08:4b:a5:
cc:21:74:d9:1a:3f:9c:e1:f3:f4:b1:e2:1e:df:82:11:4a:f0:
6e:35:ec:82:02:57:e7:1f:28:17:d1:98:71:89:44:43:17:89:
88:13:50:16:8e:ad:cf:6a:83:4d:3e:15:24:2b:8c:6b:0b:b1:
35:01:5d:fd:d8:dc:60:df:df:fa:2f:a9:49:73:45:95:9a:c0:
43:f1:c2:26:b7:6a:71:bc:3e:c8:40:8c:cd:24:d6:1c:46:92:
5c:64:f5:12:e7:d7:76:9b:b5:ed:b9:83:5d:92:97:bc:2b:f9:
20:1b:b4:65:df:af:66:4a:89:54:6b:59:b1:46:f6:19:d5:00:
f7:40:f4:e9:8e:a9:56:19:8a:5f:00:98:cc:7c:8f:05:c5:7f:
62:b8:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:21 2026 by rpki-client