Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DF9E57C82BA11F18A5B310FCF1D38B0.roa
File: 2DF9E57C82BA11F18A5B310FCF1D38B0.roa (raw, json)
Hash identifier: ZgAiOmh10NCiwFHj4P+Qetm5EHwwvU211XM8GGmprYY=
Subject key identifier: BA:AE:6D:AC:A5:AB:F2:11:9F:2C:C9:CA:F5:B9:0A:C3:20:6B:B2:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D986
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DF9E57C82BA11F18A5B310FCF1D38B0.roa
Signing time: Sat 18 Jul 2026 15:05:57 +0000
ROA not before: Sat 18 Jul 2026 15:05:53 +0000
ROA not after: Sun 16 Aug 2026 15:05:53 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 08:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121222 (0x1d986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 18 15:05:53 2026 GMT
Not After : Aug 16 15:05:53 2026 GMT
Subject: CN=6a5b9655-9537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:1b:93:97:99:f2:3c:af:94:23:1f:7c:c3:
c3:ae:2e:c1:9f:4b:6f:2b:d7:3b:2c:a9:77:28:bf:
51:72:8d:19:05:3d:45:01:dc:68:af:5f:85:0f:9f:
f8:16:64:6e:9a:e7:b7:39:dc:a9:af:c3:a6:70:8d:
f7:85:07:16:b2:c5:fe:8a:35:0a:28:6e:80:74:30:
57:28:6b:d9:a8:22:c0:73:4d:52:7f:d0:fb:a8:02:
0d:28:91:80:72:72:af:69:24:fa:f0:69:85:80:cd:
e6:0f:49:4c:89:c8:de:4b:68:00:8d:cf:73:19:dd:
79:17:72:bd:e3:e6:46:7a:fa:b4:3e:15:6c:92:a8:
dd:dd:2d:94:84:d6:e3:b2:a9:17:16:53:a7:9d:c5:
e4:24:5c:68:6a:32:de:4d:34:4f:76:fd:c8:8c:65:
0b:1a:6d:7a:7a:f2:06:c5:25:44:55:63:d1:b1:11:
30:a8:92:8e:81:88:5b:7c:17:d0:fa:22:f9:0e:bc:
30:c7:65:ae:34:22:1c:29:20:e8:b0:d0:62:4a:32:
db:5c:84:2c:c4:da:a6:5a:eb:d0:b2:a3:85:3d:db:
ad:5a:8c:7d:a4:bc:88:3c:d2:cf:de:9d:75:1f:13:
12:9f:60:b2:e1:a7:4f:74:37:04:a2:31:db:a0:d6:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:6D:AC:A5:AB:F2:11:9F:2C:C9:CA:F5:B9:0A:C3:20:6B:B2:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DF9E57C82BA11F18A5B310FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:4f:89:58:c8:c2:24:65:1a:bc:db:62:2e:ee:db:d8:ac:43:
4e:ee:2f:41:1f:08:43:c0:31:ac:21:7d:87:83:0f:89:c3:cc:
16:84:e6:c2:1f:d9:99:ca:b8:e8:60:f1:51:39:e6:f6:e8:ef:
1a:05:00:86:06:c9:1d:33:77:02:0c:61:b9:a6:33:2f:18:25:
b2:33:0b:c9:2f:8d:1c:ca:ce:aa:a5:ad:b2:a0:43:e5:be:31:
4c:ab:6a:ff:6d:5e:18:15:08:1f:62:af:c9:74:6a:77:72:b7:
c7:fb:85:56:dc:69:00:d6:b1:eb:e3:56:85:d9:a3:a5:ca:a6:
81:c7:9e:1a:36:81:b6:09:52:ed:18:e1:32:9f:4d:30:72:ab:
11:b6:7d:40:d1:78:77:db:90:ed:09:80:fa:fe:a7:78:08:2f:
a2:5a:a4:53:84:ae:a1:de:ae:ef:c9:df:e8:17:31:fa:a7:b3:
8a:a8:0d:fb:3b:79:6a:3f:74:f4:c6:de:5f:49:00:11:3e:09:
97:00:78:1c:60:bf:a2:51:38:81:2e:97:dd:ba:2e:be:b0:92:
de:cf:1f:30:f3:89:fd:a5:f2:17:ca:a6:72:df:68:42:5b:bf:
36:da:8b:8e:31:54:9f:d4:83:89:01:23:6c:01:c3:93:15:fa:
4d:cc:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:21 2026 by rpki-client