Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD4C0E0312111F1AE1E30EBDAE4EC9C.roa
File: 2BD4C0E0312111F1AE1E30EBDAE4EC9C.roa (raw, json)
Hash identifier: GRUulAwobdH4Yqc5IcLa+P/loG62Fk1bnoOq/17Mauc=
Subject key identifier: 3D:AD:69:19:71:17:3A:DE:8B:54:47:54:A9:21:5E:E4:23:C1:34:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C343
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD4C0E0312111F1AE1E30EBDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 18:56:37 +0000
ROA not before: Sun 05 Apr 2026 18:56:32 +0000
ROA not after: Wed 13 May 2026 18:56:32 +0000
asID: 200758
IP address blocks: 154.84.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115523 (0x1c343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 18:56:32 2026 GMT
Not After : May 13 18:56:32 2026 GMT
Subject: CN=69d2b065-bdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3d:4b:07:b1:e9:7d:e2:04:38:87:d7:60:03:
c3:d8:45:20:5a:a1:41:ac:f8:44:8b:68:02:1b:b3:
17:20:74:05:02:5e:e1:48:07:5b:f4:bb:ba:16:d2:
c1:c2:4e:f0:a1:a0:c2:dc:57:11:24:2a:f1:21:00:
0c:3a:5a:75:40:23:d2:06:8c:c2:11:7b:10:2d:65:
f9:14:1d:8f:57:bc:c6:c4:7a:d7:86:67:d3:36:c1:
a7:35:67:01:23:63:73:0e:7f:ec:fa:29:ea:33:f8:
ab:f1:31:b7:f7:ef:8c:93:a8:d5:d2:8d:ce:50:59:
75:40:e3:ec:56:f1:0d:e6:e0:ca:e6:da:46:84:a9:
ca:71:c3:27:b8:93:ca:b6:6e:7f:47:4f:ac:13:27:
40:22:04:66:bb:c9:e8:54:5f:bf:57:87:f7:df:54:
d3:20:01:91:9e:fd:e1:ff:18:c5:a0:e6:a8:87:87:
8c:d8:ae:41:56:99:7e:28:79:81:81:df:56:0c:c5:
47:b3:70:7e:90:ed:f3:0d:1d:2b:f1:7a:ae:f0:b7:
bc:f2:1e:6a:cb:d7:a3:61:68:58:4f:1e:cf:21:9e:
b1:3e:3b:a0:b5:c9:ea:44:c8:aa:d4:1f:cf:8e:b7:
82:56:dd:ae:13:e8:3e:2d:6d:ef:58:56:c5:91:a4:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AD:69:19:71:17:3A:DE:8B:54:47:54:A9:21:5E:E4:23:C1:34:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD4C0E0312111F1AE1E30EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.154.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:85:b9:ba:e8:73:94:e5:cc:3f:91:71:bc:65:11:41:db:7e:
fc:19:46:c8:26:1c:51:f5:77:73:11:8f:7f:d6:76:9b:ec:63:
73:f4:4d:0a:99:e4:58:be:ba:6f:a8:7d:ea:c4:8b:aa:64:1c:
93:54:55:ac:c3:58:28:81:4e:f8:c9:b8:84:1b:7c:4b:23:4d:
7f:98:4e:98:0e:3d:22:b6:95:95:d5:81:42:41:dc:99:18:43:
13:49:3f:1f:3e:49:24:30:df:63:30:b6:2f:d9:bc:66:d5:ff:
a4:bc:4e:e9:15:59:40:0a:4f:3d:25:30:cf:bc:45:2b:3f:25:
48:39:14:bc:97:8a:49:1b:69:76:e7:fe:8c:22:f1:d8:29:9e:
42:4f:f4:46:c0:87:70:33:a1:25:b5:c7:a5:f3:bd:79:14:01:
e2:11:bc:a7:92:37:05:5e:b9:79:36:34:e3:ec:c7:ce:19:e9:
4f:f6:73:c7:92:fc:da:61:18:3e:ef:13:48:8b:6f:c5:fb:d5:
d3:98:b4:fb:35:bd:ac:b4:43:10:19:7e:c4:64:3f:a0:14:5d:
59:8c:27:b3:93:fd:c0:c9:b2:ea:4e:a7:ef:ef:f3:8a:43:0e:
b1:98:d2:7e:f7:93:b3:74:bf:15:02:d6:b9:a9:71:b3:5b:4b:
95:ce:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:27:43 2026 by rpki-client