Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C09507A81C211F1B40F04B4CE1D38B0.roa
File: 2C09507A81C211F1B40F04B4CE1D38B0.roa (raw, json)
Hash identifier: O78O6pI/LYa4VRWYtPG8tLHX3wsVV2s8Y9CR6Q0jIHs=
Subject key identifier: 20:CE:A0:A3:23:7F:AA:8E:0E:20:A2:13:6F:79:65:FD:CC:D5:33:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D96F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C09507A81C211F1B40F04B4CE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:30:39 +0000
ROA not before: Fri 17 Jul 2026 09:30:35 +0000
ROA not after: Mon 24 Aug 2026 09:30:35 +0000
asID: 154376
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121199 (0x1d96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:30:35 2026 GMT
Not After : Aug 24 09:30:35 2026 GMT
Subject: CN=6a59f63f-6ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:9f:89:89:24:dc:8c:57:23:10:91:91:19:
de:cf:54:41:31:8b:e4:b0:51:60:14:f5:a7:7e:e2:
9a:75:e2:ee:d1:3b:3e:ed:d7:05:5a:25:11:7a:ad:
43:fe:9e:7c:4e:05:d7:6b:d9:0f:d6:9f:e8:0a:d7:
18:e6:94:c5:6f:29:ca:fb:bd:f0:ba:0f:50:80:b6:
01:39:97:6b:63:98:9a:de:f5:4c:98:a0:f6:1b:8c:
47:dc:0e:5a:d5:3f:96:b8:36:35:3e:8c:6b:7c:8c:
d0:5c:6d:6e:b9:7b:91:a7:6f:57:bb:f8:19:d0:5c:
d3:f8:fe:27:05:d2:d8:32:f4:ad:8e:aa:76:91:f9:
e3:dc:a4:b8:85:a0:04:8b:d1:6a:8d:c7:a2:68:32:
21:e4:13:44:e7:77:37:c0:61:f6:04:32:b8:a5:cc:
04:29:f6:17:0b:e3:a4:f6:78:f8:09:dc:02:78:eb:
30:d3:58:19:0e:ad:ea:2c:bf:69:55:d0:e4:55:75:
98:c9:84:ba:ec:9c:66:7e:62:55:88:3e:62:53:12:
f2:7d:33:21:84:39:bd:79:3e:2d:3d:a1:61:6a:20:
c1:5f:21:bc:55:f8:fe:b4:2c:d5:c3:44:4e:3b:f2:
47:07:72:51:79:a5:3d:ef:d8:f5:91:cd:be:4d:40:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:A0:A3:23:7F:AA:8E:0E:20:A2:13:6F:79:65:FD:CC:D5:33:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C09507A81C211F1B40F04B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6c:4d:bd:c3:34:23:cb:2a:97:48:1c:5b:d8:65:dc:a5:a2:
ce:1e:34:ff:77:8b:55:4d:8c:07:a8:e4:41:ae:82:09:1d:12:
59:35:ba:d8:a8:d4:03:aa:7c:c2:da:f5:a1:83:03:89:82:fc:
1d:df:e1:d7:65:ad:1e:19:45:48:a4:b2:25:a8:c7:5d:9d:37:
ca:f7:10:e4:ab:15:ad:cf:24:f3:4c:26:51:07:75:a3:6e:bd:
18:57:ba:1e:ca:4e:04:88:7b:15:36:89:6e:9c:c9:15:4c:c3:
98:d5:be:57:c7:80:e0:8b:b3:8a:34:4c:e0:9f:32:45:13:36:
06:58:5c:17:93:dc:8b:57:66:1a:40:60:57:3c:35:67:0a:69:
c9:5b:da:63:13:00:82:d5:d7:36:56:c4:d1:89:26:01:d2:80:
b3:4f:55:fd:d6:6b:f7:ba:92:8e:7f:47:12:0b:6a:ca:86:05:
20:d1:77:b2:f0:91:ed:3c:6a:5a:ae:22:33:fb:69:a2:49:06:
de:74:e3:ff:f8:84:1a:d9:97:d8:ba:f1:ad:e2:b9:a9:be:ff:
49:92:af:b1:3a:23:78:49:6c:09:3d:67:5c:59:86:60:f1:60:
16:d6:e7:9f:84:ed:14:4b:2f:f7:80:e6:9b:10:22:e0:d4:5d:
96:7a:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:41 2026 by rpki-client