Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CF7ADAA579811F1B136D00FCF1D38B0.roa
File: 2CF7ADAA579811F1B136D00FCF1D38B0.roa (raw, json)
Hash identifier: 6toopFNrHlBlQ5ukRLaU0y7rCAcbgVYHWX886G/i7NI=
Subject key identifier: 51:66:4C:63:16:4E:9A:7A:D4:7F:04:07:F4:81:92:7D:46:BE:C0:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CF7ADAA579811F1B136D00FCF1D38B0.roa
Signing time: Sun 24 May 2026 17:44:13 +0000
ROA not before: Sun 24 May 2026 17:44:08 +0000
ROA not after: Fri 28 Aug 2026 17:44:08 +0000
asID: 401701
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118527 (0x1ceff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 17:44:08 2026 GMT
Not After : Aug 28 17:44:08 2026 GMT
Subject: CN=6a1338ed-f9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:b0:28:3c:b8:53:bf:02:90:68:dc:23:ba:
23:2b:48:98:0f:78:cd:b9:60:87:20:c3:2c:22:b0:
72:9d:3e:00:20:b0:c9:5e:74:08:bc:e5:c2:e4:36:
bd:48:21:a0:4b:02:df:44:84:86:6b:1a:06:63:8f:
2e:a0:4b:75:79:48:b7:4d:b8:4a:8a:65:df:62:b6:
54:1f:32:ae:93:2d:74:48:4f:6f:32:97:d7:e6:63:
b6:54:25:bd:20:26:95:36:c0:95:cd:9b:c4:cb:e4:
47:5b:3c:a3:c0:dc:8b:9f:3a:49:fc:06:09:b2:d8:
d4:e0:b1:de:14:1d:3f:6e:81:26:c6:35:5f:69:27:
c0:39:25:de:5b:72:ec:6a:64:38:dc:95:aa:ce:b8:
0d:a5:b3:de:2d:95:b0:df:5d:2a:d3:c6:a7:da:86:
33:c2:b0:6a:0c:c0:ae:e7:df:da:27:55:c2:8e:e3:
5a:9d:1b:c5:cf:e3:86:34:53:b9:49:c4:02:5d:2c:
7f:33:94:99:ae:3d:dc:a1:a5:fd:1b:4f:5b:54:2f:
3d:7b:79:bd:01:2a:a9:91:9c:25:b5:03:88:8c:8b:
51:95:a9:fc:45:50:78:9d:83:db:95:8b:d9:fa:e9:
a1:1e:47:84:09:28:af:95:5e:0d:96:ab:7e:82:eb:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:66:4C:63:16:4E:9A:7A:D4:7F:04:07:F4:81:92:7D:46:BE:C0:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CF7ADAA579811F1B136D00FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
91:e0:b2:15:0a:4f:e7:85:b5:07:8a:08:d9:3c:ab:6b:fa:e5:
36:e1:9f:ea:6d:7c:16:11:a1:49:2e:e9:1f:f6:4b:cb:17:61:
96:ff:c7:b3:3e:5d:6d:56:60:87:07:42:2c:e6:06:bb:91:c8:
ff:3e:01:e0:4a:c7:62:06:53:e8:6d:44:99:e8:3e:2c:33:fc:
5c:1b:b9:36:c2:3e:cd:8f:c3:5e:be:81:f0:95:d7:85:7f:02:
94:b0:a2:28:b0:77:fc:59:da:d2:a6:58:12:12:1d:cb:8a:42:
21:ad:64:81:84:0b:75:b2:ac:73:e4:2d:18:0a:3f:ea:c3:9b:
ca:f2:21:0c:d8:68:a5:53:7a:13:27:0d:79:b6:af:44:c4:e7:
3d:d7:79:ff:e7:d8:ff:95:c2:5e:3c:04:f1:ff:c6:f2:57:44:
d0:8a:26:19:f0:18:46:19:67:87:28:58:3f:e7:4a:18:d1:b3:
2d:1c:76:92:1d:e8:7a:2c:29:ba:23:32:62:79:d8:1a:e7:8a:
4e:69:fd:1b:67:a7:93:aa:28:90:26:34:c3:ce:38:1f:2a:a8:
ef:cc:20:cb:c1:de:26:e8:2f:31:a0:2e:f3:87:2b:06:38:09:
e5:d3:61:c3:3b:e7:70:6e:5a:bc:60:07:2c:b5:53:e6:e1:11:
2a:ad:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:21 2026 by rpki-client