Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A2C1F6A880411F1AFEE43DACE1D38B0.roa
File: 2A2C1F6A880411F1AFEE43DACE1D38B0.roa (raw, json)
Hash identifier: 4C/REipOU6p6q5JItZqd6bvE0crijtcZuZvEXh9JEVU=
Subject key identifier: BD:20:ED:4C:B3:03:12:3A:AE:C8:AF:29:29:92:E4:92:F5:2F:9F:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A2C1F6A880411F1AFEE43DACE1D38B0.roa
Signing time: Sat 25 Jul 2026 08:38:10 +0000
ROA not before: Sat 25 Jul 2026 08:38:06 +0000
ROA not after: Fri 28 Aug 2026 08:38:06 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
154.82.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121657 (0x1db39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:38:06 2026 GMT
Not After : Aug 28 08:38:06 2026 GMT
Subject: CN=6a6475f2-c9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:69:0b:53:c6:14:78:e7:96:18:a9:18:90:
b3:fe:af:1b:d0:59:60:6f:24:73:3c:77:95:27:f0:
08:c0:e7:6f:6a:b6:40:d9:fb:a3:c1:b6:10:3c:44:
a8:21:f5:57:82:a6:14:a6:a0:1a:69:6a:80:23:09:
06:07:a9:53:38:a8:51:40:9b:ac:fa:72:6b:65:60:
15:f4:c4:b1:2a:27:43:77:70:d5:e2:2d:7e:14:a6:
75:ff:62:29:c4:c0:19:6b:07:90:0a:e3:8c:51:22:
4b:7b:18:f7:f0:d4:e9:a4:7b:c0:a9:39:70:8c:c0:
e3:9f:96:79:5c:cf:82:d2:03:91:3d:ea:26:7d:a0:
75:7e:43:e7:00:b9:e3:fe:a8:f7:5b:72:42:6f:26:
91:04:b0:47:fa:c2:1c:76:fc:41:26:7a:b6:16:6f:
25:4e:e3:82:50:c1:2e:36:b3:3c:bc:5f:10:90:d3:
d3:8a:da:8b:ec:0c:da:c2:5a:c9:8c:b3:d0:17:df:
5e:0c:40:48:29:e1:b2:7e:e6:73:72:e2:77:8c:43:
38:a7:44:d8:fe:4c:79:de:ac:0d:5b:a8:73:13:38:
02:67:67:f2:52:03:35:21:82:91:3d:fa:d4:b6:b2:
98:e6:06:65:3b:3c:81:12:19:ad:cc:b2:6e:46:af:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:ED:4C:B3:03:12:3A:AE:C8:AF:29:29:92:E4:92:F5:2F:9F:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A2C1F6A880411F1AFEE43DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0-154.82.157.255
Signature Algorithm: sha256WithRSAEncryption
65:22:8a:64:01:43:f8:3b:4a:80:85:ea:e0:08:64:1f:eb:03:
17:0b:65:5e:ef:04:8c:61:36:fc:9c:75:ff:57:ca:85:8a:d0:
7b:19:a9:59:00:23:80:c1:60:23:9f:b7:b8:b1:bb:9d:bf:04:
11:d2:f1:6a:88:56:3e:ce:9e:d5:8c:b4:15:e5:26:78:1c:ed:
1c:03:c4:13:70:f9:7c:de:9d:6c:d7:3b:a1:13:b6:46:57:dc:
87:a0:28:68:bb:54:47:8b:95:63:c5:e2:92:32:40:ef:94:b4:
f3:0c:4c:d1:18:93:ba:6f:54:98:1d:c3:99:66:50:3c:c4:50:
70:25:bd:0f:a4:cb:49:bc:b3:c6:09:a4:72:e1:3e:6f:5e:16:
59:36:0f:03:64:30:fc:8c:79:33:26:78:b9:17:96:64:0a:e5:
5b:bf:d2:92:ea:43:9b:59:77:2e:2e:71:da:68:8d:a3:a7:3d:
66:18:35:57:50:e9:3f:ea:ec:0b:7a:3a:75:c7:4d:87:69:a0:
7e:83:3a:24:0a:c9:84:ed:f3:0a:a2:3a:7d:d1:14:c4:89:f5:
90:58:8e:0c:f4:c9:07:19:63:28:04:5b:bd:4e:80:16:3f:b5:
a5:df:e0:83:56:36:8c:c8:33:d7:f0:ff:1e:6e:22:14:4b:b4:
ec:3a:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:31 2026 by rpki-client