Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA5EBDA61A111F1A7D41A18CF1D38B0.roa
File: 2AA5EBDA61A111F1A7D41A18CF1D38B0.roa (raw, json)
Hash identifier: 0RoDUelrrG47k+PryTkYo1z8M13tNSvaSt9fzuujf5o=
Subject key identifier: 23:A8:C2:31:C1:C9:5A:1D:C2:CC:8A:CA:8C:8B:D5:5C:92:BC:C6:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D224
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA5EBDA61A111F1A7D41A18CF1D38B0.roa
Signing time: Sat 06 Jun 2026 12:13:46 +0000
ROA not before: Sat 06 Jun 2026 12:13:41 +0000
ROA not after: Wed 02 Jun 2027 12:13:41 +0000
asID: 140659
IP address blocks: 154.197.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119332 (0x1d224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 12:13:41 2026 GMT
Not After : Jun 2 12:13:41 2027 GMT
Subject: CN=6a240efa-f5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:c8:48:02:b5:50:aa:50:a2:f7:36:e5:50:
b1:96:1c:23:c1:66:23:57:57:63:c6:74:9d:a3:5e:
be:6b:45:e8:8c:26:ce:cb:4a:d8:10:49:12:ae:d6:
8b:81:0e:56:fb:38:8b:1b:01:9c:30:76:f1:11:57:
5b:25:a1:b6:72:16:70:16:45:99:15:5f:00:a3:37:
1d:df:e5:1d:db:bc:00:17:9a:e9:b6:8c:17:37:07:
06:17:10:c0:60:a8:78:24:c8:fb:e0:2c:07:42:8e:
9e:8d:64:2b:d7:f4:aa:d3:6f:d9:4b:bf:a8:85:14:
83:b8:6e:e6:ef:d2:46:7d:1b:b6:01:c3:d9:04:0f:
09:d3:40:4a:25:35:e0:8b:61:f0:b6:52:17:a2:0e:
9f:ea:0a:87:a8:08:99:7e:22:14:f4:51:3d:d7:5e:
7f:8f:e4:fd:96:27:a5:09:2d:06:a2:b7:19:26:6c:
9b:0b:ad:f8:a2:c7:dd:d0:b5:23:65:4c:96:ed:45:
ef:28:4b:be:1e:51:c0:6d:12:f9:9d:e5:cd:01:43:
be:b5:fa:bc:39:80:b9:08:ba:39:d9:2a:c1:f5:65:
60:16:ad:9d:76:b4:af:1f:19:0d:e1:64:cd:7d:2a:
4f:e0:ae:ef:83:a4:46:39:05:39:d0:6b:95:b9:e8:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:C2:31:C1:C9:5A:1D:C2:CC:8A:CA:8C:8B:D5:5C:92:BC:C6:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA5EBDA61A111F1A7D41A18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.63.0/24
Signature Algorithm: sha256WithRSAEncryption
82:eb:ad:d2:a4:38:a0:60:3f:7f:6b:fa:f8:a4:da:81:29:dd:
5a:0a:f1:14:b7:fa:14:0f:7b:ad:fd:02:37:da:0e:cf:fe:48:
c6:de:32:ed:ef:3a:28:69:f6:c9:0d:50:ba:e8:14:cd:f5:ee:
17:ce:89:cf:2b:43:eb:39:2b:ba:b2:ad:a3:56:26:bc:16:65:
7a:36:d3:fe:72:cf:7c:5b:2a:ee:dd:56:b0:f6:4b:e7:82:f1:
69:e1:3a:e5:0c:d1:79:a4:68:fc:fa:0b:75:d5:33:e7:b7:59:
ba:71:42:c1:32:31:22:d5:52:3b:17:24:24:a5:cc:60:9c:46:
51:2f:89:ff:96:79:9a:c5:9e:b5:cd:46:56:1a:c3:f2:1a:7b:
c7:59:73:17:3d:91:7a:85:4a:1f:5d:e1:de:c9:fb:81:ac:a7:
46:33:98:19:a9:ff:4e:6a:3d:c5:52:93:a7:25:96:96:29:be:
8b:09:18:37:c9:09:f3:73:b1:d4:eb:a1:86:e2:aa:44:a4:b3:
ee:5c:0b:c4:f2:4b:b6:6a:f6:db:3f:83:b6:50:43:97:53:29:
54:9f:cf:4c:e9:84:a0:de:fe:61:c6:bd:d6:b9:49:e3:3d:c9:
d9:ae:8e:8f:c5:60:91:0f:73:0d:78:a5:60:99:59:8c:1c:58:
d1:08:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:27 2026 by rpki-client