Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DEB7E86755B11F19358CABECE1D38B0.roa
File: 2DEB7E86755B11F19358CABECE1D38B0.roa (raw, json)
Hash identifier: aUi2ovE0z+EZccapvteJsyk7PYigf9FwlQc7TilY6ww=
Subject key identifier: D2:AE:10:9B:F9:DD:0A:4A:84:D0:FB:3D:EB:7C:F9:51:E4:59:EF:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D63E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DEB7E86755B11F19358CABECE1D38B0.roa
Signing time: Wed 01 Jul 2026 14:43:10 +0000
ROA not before: Wed 01 Jul 2026 14:43:05 +0000
ROA not after: Thu 08 Jul 2027 14:43:05 +0000
asID: 139065
IP address blocks: 154.194.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120382 (0x1d63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 14:43:05 2026 GMT
Not After : Jul 8 14:43:05 2027 GMT
Subject: CN=6a45277e-fa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:37:44:cd:17:a7:73:31:b1:fe:85:f7:f6:45:
49:95:3c:a5:03:08:93:ba:71:ea:c5:92:b2:5b:d7:
32:6a:27:f2:a7:4a:14:ac:4e:e1:b2:1f:38:f8:bd:
34:42:cc:97:03:14:cd:6c:77:62:7f:02:88:de:c0:
b0:a0:57:a5:4d:27:f0:70:74:65:03:6a:cf:54:51:
95:52:87:da:95:a0:12:90:29:ac:89:12:4c:8d:c2:
d1:6c:4d:7d:f6:ec:b7:c5:03:84:75:32:1f:9f:92:
03:44:e2:ed:34:fb:a5:5b:1a:96:c7:e7:ad:72:43:
2a:09:68:32:c6:9c:b4:0b:b0:b8:f9:60:2b:ff:39:
6d:32:15:73:3c:f4:7c:28:df:0d:e7:c3:80:93:81:
da:8e:bb:58:83:7f:e4:9e:57:1e:ca:b2:58:bb:78:
d7:01:f1:3e:16:87:82:45:50:3b:72:a9:96:f7:a7:
5a:6c:42:d9:33:b5:31:80:b5:cc:af:2d:d7:b5:4c:
6f:3b:b8:ec:bb:1d:70:97:b1:76:2e:7f:53:c9:7a:
c5:10:42:d3:d1:82:6f:06:fd:7a:2b:26:3b:ba:26:
99:4d:e6:1d:92:ac:dd:4f:b5:31:71:17:e0:4d:70:
db:76:e5:94:1b:2e:ca:0f:63:84:1f:56:0e:4c:b9:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AE:10:9B:F9:DD:0A:4A:84:D0:FB:3D:EB:7C:F9:51:E4:59:EF:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DEB7E86755B11F19358CABECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.28.0/22
Signature Algorithm: sha256WithRSAEncryption
43:d6:d4:64:cb:a2:aa:f6:a8:5c:5b:a9:34:8c:f1:c1:ec:48:
b1:41:cb:81:4f:d7:c8:fe:b5:45:4b:ac:82:ed:e4:d4:32:03:
20:cd:af:4e:c3:a3:db:79:b6:0c:79:44:ec:b9:30:15:31:fa:
b3:e2:62:6b:a5:51:33:99:10:0b:f7:8f:17:dc:1c:32:62:f2:
ca:aa:40:e1:fa:6a:04:9c:a4:75:af:ff:08:d6:4b:52:fc:13:
0a:7d:7e:ee:70:29:82:97:33:b2:37:11:a1:7c:a6:64:8c:3d:
6b:a6:76:cc:9a:67:a4:db:8d:d4:ea:37:93:34:f2:12:1e:96:
a0:ce:86:6e:00:1e:db:8b:5a:2c:3a:9d:fe:e3:4f:22:87:cf:
0a:88:73:ac:9c:64:79:4f:00:0b:82:41:61:bf:f9:ec:55:9c:
79:4e:7a:43:49:b0:a7:a9:1e:99:90:8f:16:94:2e:59:ae:e1:
b3:fb:94:7e:f0:68:64:c3:a6:7d:07:cc:bd:63:fb:4b:fe:2a:
34:b2:aa:d6:aa:ba:cb:67:f7:50:ce:e3:17:24:21:62:19:68:
45:1a:e8:24:85:74:cd:46:5a:fb:2c:38:ad:ee:43:99:da:cc:
e9:55:0f:6b:a4:0f:57:cf:3c:2f:e9:27:14:79:f6:44:57:d1:
8d:3f:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:23 2026 by rpki-client