Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3204F4A739711F1B4DA100ECF1D38B0.roa
File: E3204F4A739711F1B4DA100ECF1D38B0.roa (raw, json)
Hash identifier: y9lWI2hvD2+4LFCuh9HsppgriSfc9tq+6HFm1pH55PU=
Subject key identifier: 5C:09:41:B2:AD:8C:CA:85:E6:6D:89:5E:AA:81:89:1E:E6:D4:D0:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3204F4A739711F1B4DA100ECF1D38B0.roa
Signing time: Mon 29 Jun 2026 08:52:41 +0000
ROA not before: Mon 29 Jun 2026 08:52:36 +0000
ROA not after: Thu 06 Aug 2026 08:52:36 +0000
asID: 49505
IP address blocks: 154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120300 (0x1d5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 08:52:36 2026 GMT
Not After : Aug 6 08:52:36 2026 GMT
Subject: CN=6a423259-b667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:c7:a0:bc:ec:38:c2:5c:1d:58:03:91:ab:
b5:9e:83:ce:b1:34:12:d9:7d:5e:34:7d:3f:d4:8c:
9d:69:ec:12:04:9a:4a:8e:fd:17:c5:80:34:61:ac:
0d:b7:04:d0:27:dd:67:98:20:01:75:99:b4:11:0b:
6e:49:90:c7:6a:a0:ac:29:6b:96:85:0d:64:04:62:
78:14:86:d4:fe:b8:ee:73:7b:18:3a:9f:ed:b4:b7:
9b:38:1b:48:f9:1e:eb:2f:2a:58:b0:55:e2:15:6e:
42:7b:4e:c0:21:69:21:72:b1:5c:52:29:c3:dd:25:
1f:aa:67:23:47:55:b5:3f:ec:56:1c:4b:50:48:c3:
c1:6d:13:aa:c7:2b:fc:b3:6b:98:b8:fe:89:19:fc:
db:3a:b0:9d:df:b0:44:27:0d:04:2e:ec:db:16:e2:
f5:6c:75:74:53:f8:4d:0b:46:31:b9:8a:96:ba:6b:
72:99:4e:2c:7f:c8:53:1f:28:0c:e6:29:34:a7:ba:
ac:d2:7f:27:13:9e:73:93:2e:aa:82:ca:9a:25:2f:
28:2d:28:2d:0b:a5:d1:2c:a4:5e:23:ea:b0:9d:ff:
ae:41:7c:ce:3b:07:79:04:4e:61:58:40:19:cb:4d:
22:90:07:f1:58:aa:d3:83:09:d7:97:96:91:da:ff:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:41:B2:AD:8C:CA:85:E6:6D:89:5E:AA:81:89:1E:E6:D4:D0:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3204F4A739711F1B4DA100ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.17.0-154.211.19.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:ea:0c:9b:a2:67:99:77:09:af:84:b5:32:fb:bb:79:cc:45:
79:a0:37:ea:d9:51:5a:ad:49:61:6d:01:99:18:cb:b9:3e:c5:
02:c9:61:20:3c:e9:0c:db:a9:f7:7c:e7:95:af:74:1c:ea:ca:
1d:b3:76:17:a6:82:33:3b:b2:d5:20:12:61:06:af:b5:95:d1:
01:2d:44:e7:59:f8:93:dc:ee:ca:56:3d:cb:2c:f9:ce:13:5b:
a0:e2:0c:9c:25:29:3d:ea:83:61:ce:82:c6:d8:23:94:87:4f:
57:e6:fc:0b:31:1c:e9:0d:d4:3f:60:d1:42:8c:ba:0d:9e:6d:
39:98:87:ba:f5:47:68:ea:10:1b:ec:a9:0f:e5:9a:87:9d:46:
68:c0:00:b9:4b:fc:73:bd:fd:26:23:5c:f1:4e:6b:51:29:6d:
55:2c:b3:64:da:3e:28:05:f7:4e:b0:af:e1:38:88:4b:c6:ad:
62:07:2c:9d:0c:84:3a:4e:7c:c5:2b:2f:87:b9:99:8a:fb:f6:
d6:2f:09:66:d4:04:cd:0d:77:62:50:a8:49:f1:b1:a8:8f:a5:
1e:e0:4a:d7:d5:87:a4:8a:b7:b6:de:dc:2d:47:30:d8:a0:43:
a3:23:e2:59:5b:40:03:22:53:fb:28:78:99:d0:d3:3f:44:bc:
c2:f0:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:37:18 2026 by rpki-client