Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FFB5AB284E611F1939822D2CE1D38B0.roa
File: 2FFB5AB284E611F1939822D2CE1D38B0.roa (raw, json)
Hash identifier: oNShiALP6v9iR32Qxc/vz+IFgJkBzNjFTBBVr1L32zI=
Subject key identifier: AA:57:72:C6:29:6E:C1:76:1B:A5:A6:C8:18:2F:55:7E:8E:F7:0F:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FFB5AB284E611F1939822D2CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:26:01 +0000
ROA not before: Tue 21 Jul 2026 09:25:57 +0000
ROA not after: Wed 02 Sep 2026 09:25:57 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
154.94.1.0/24 maxlen: 24
154.94.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121448 (0x1da68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 09:25:57 2026 GMT
Not After : Sep 2 09:25:57 2026 GMT
Subject: CN=6a5f3b29-3ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:04:64:6d:1e:32:fc:59:6b:28:93:7d:08:
d7:19:7e:0b:ed:18:3b:79:04:17:ce:72:6e:20:b1:
e4:61:2f:46:14:f9:63:34:7f:ba:c5:f0:89:68:47:
7e:12:ca:65:c4:86:69:fe:47:0d:52:60:3a:93:3b:
7c:3b:80:4a:88:d2:c0:2a:9c:7b:ed:c6:ac:db:de:
07:de:e6:c6:f3:a0:50:df:55:b8:e2:b7:dc:13:14:
3c:72:48:d3:97:90:a5:dd:6f:f8:0e:5e:95:a7:42:
5d:e7:00:b5:df:0c:df:42:f0:01:a7:a4:5f:ee:26:
63:c1:95:29:c6:2f:fe:e4:a2:56:1a:37:2a:91:3a:
f5:59:04:9e:d9:be:d6:47:3b:ca:be:62:ea:f1:35:
b0:cc:0a:16:60:9b:07:93:98:9a:17:b1:49:9e:4a:
d1:6f:cf:d4:c3:50:fc:97:92:58:02:e7:b9:a5:70:
3d:00:cf:26:9d:02:03:36:a0:57:0e:76:38:23:a7:
6f:d8:d4:3f:30:c5:e1:46:ac:53:72:21:58:99:ab:
ef:a9:b1:87:3c:f0:3b:58:f2:ed:83:3c:1c:4c:a7:
00:f4:d2:99:f2:67:9d:77:23:15:33:b6:04:a1:c7:
b2:19:f4:1c:41:95:20:97:b7:51:1d:90:92:d4:e5:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:57:72:C6:29:6E:C1:76:1B:A5:A6:C8:18:2F:55:7E:8E:F7:0F:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FFB5AB284E611F1939822D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
154.94.1.0/24
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ab:53:c6:34:cb:b9:5e:21:96:99:be:98:13:2b:66:86:7f:
8e:e2:2b:fa:a0:9f:dd:b1:82:b2:3f:14:d4:e5:c8:a4:70:7c:
97:cc:a8:a9:30:8a:f5:09:70:55:ee:d0:39:60:4c:81:11:08:
e5:ec:69:cc:c7:11:a2:7e:94:9d:56:c7:fe:bd:40:eb:06:e5:
74:bf:63:f5:a6:56:7f:4c:18:25:71:55:ef:53:59:07:d2:ed:
60:00:aa:34:97:33:ab:33:cb:34:0d:f7:bd:14:9c:3d:42:7a:
fe:a0:cf:e7:5a:4b:23:0e:80:1d:15:23:e5:8d:7f:02:71:4d:
4b:d0:33:29:a5:d2:d0:ef:10:5b:95:bf:a6:cf:bf:37:fb:4c:
7d:ab:bf:5b:1e:f6:93:75:c0:b4:24:9f:e9:0e:48:d1:ed:ea:
3a:00:6a:cc:b5:7f:1f:6e:aa:cd:d1:87:ed:ec:aa:81:fd:e0:
bd:77:08:51:50:45:1a:7d:f7:8b:65:b8:f3:27:f4:44:78:53:
d8:16:f9:ee:8c:f4:bd:19:a7:a9:42:98:2a:54:70:6c:a0:0f:
9c:40:b4:eb:52:7b:1d:75:ec:2a:b6:dd:ff:cc:aa:a8:6f:9a:
a4:0c:de:aa:0e:0a:ed:37:4f:51:1f:12:75:59:94:c1:37:f3:
a6:80:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:50 2026 by rpki-client