Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FB1919C38AC11F19BBDB715CF1D38B0.roa
File: 2FB1919C38AC11F19BBDB715CF1D38B0.roa (raw, json)
Hash identifier: gCSPqQ3VaGDtkTe71/mV4L7rfOgYh/15oRiUV45fZDQ=
Subject key identifier: E3:7D:5E:62:21:32:28:6F:16:7F:B6:0B:6B:D2:23:3A:4C:70:7B:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C556
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FB1919C38AC11F19BBDB715CF1D38B0.roa
Signing time: Wed 15 Apr 2026 09:19:21 +0000
ROA not before: Wed 15 Apr 2026 09:19:17 +0000
ROA not after: Fri 15 May 2026 09:19:17 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116054 (0x1c556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 09:19:17 2026 GMT
Not After : May 15 09:19:17 2026 GMT
Subject: CN=69df5819-0699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:b9:89:90:87:b4:5a:24:80:d4:6d:47:cd:
91:55:fd:e9:2e:00:c3:bd:39:52:66:d5:ee:bc:5e:
d6:50:39:97:3a:92:e0:91:6d:f9:1e:b5:68:5e:14:
6e:16:8b:af:c3:45:7d:f7:e5:bd:f8:94:ba:fe:4c:
db:98:6b:66:d3:88:ba:3c:18:7e:f2:f7:49:68:f6:
b2:43:54:d2:da:58:fe:49:13:6a:67:54:53:24:ac:
07:05:9f:4c:25:04:55:8e:62:e2:27:c3:50:d9:2b:
7e:0c:ca:99:fc:d1:f6:d2:fb:eb:16:6c:0c:68:63:
ce:c2:98:fd:f1:56:9f:64:f1:fc:d7:be:e3:ce:e7:
c4:a6:43:9e:15:74:ae:9b:18:14:37:42:b6:4b:75:
d9:cb:a4:56:9f:a1:a2:1a:3f:a0:85:05:35:33:f9:
2a:78:9e:1f:86:d3:5e:11:f3:0a:4a:00:f8:7b:34:
dd:3f:69:2c:a9:03:88:cd:a5:5f:c7:9b:3f:0f:63:
6c:2d:77:5b:92:22:5f:1e:f8:93:0d:ee:c7:73:04:
81:73:00:bc:56:70:85:84:e5:59:64:b7:3b:72:66:
5d:3d:1e:53:2e:fb:f7:8f:23:a7:42:36:d2:0d:7e:
a8:a2:96:39:93:f6:bb:83:3b:ad:c4:24:27:00:e6:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7D:5E:62:21:32:28:6F:16:7F:B6:0B:6B:D2:23:3A:4C:70:7B:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FB1919C38AC11F19BBDB715CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a6:fa:41:8f:d3:86:01:56:9e:eb:43:37:30:12:8b:72:7f:
bb:0f:c0:34:a4:92:e9:87:21:02:79:c0:f5:57:30:7c:ff:66:
e0:c6:46:b2:d0:77:f7:84:96:c2:cd:45:ce:94:66:7b:13:8d:
8f:00:a0:36:4a:18:c2:d6:7e:ef:1b:fd:0f:d0:50:d8:2d:fe:
c8:37:06:f9:73:4f:7d:83:40:0d:c6:8c:9e:a4:7e:52:9f:d1:
82:2f:3d:46:65:06:d4:57:03:90:0d:19:c8:8b:52:f7:56:54:
c5:a9:37:04:2b:30:4b:1e:1f:92:28:d5:fb:d4:66:3c:0f:4d:
59:7a:f0:f4:ad:09:77:c1:e8:4a:d7:40:77:81:09:2c:d4:9f:
ca:ae:a7:81:83:63:66:2e:85:1e:9a:8b:52:93:f2:42:44:5b:
f7:77:51:f4:74:bd:02:7c:e8:ca:6c:0b:48:79:e3:1e:b6:d0:
dc:ba:e4:b8:93:7f:e2:83:8c:87:7b:e3:da:34:c6:c6:f1:60:
ae:c0:6f:4a:ed:db:8b:05:44:ed:2a:61:28:ab:8d:8b:ae:f2:
b2:cf:b3:91:e3:61:54:89:e7:11:08:c4:90:5b:24:a7:6f:73:
85:5e:c3:c4:ac:7c:0b:99:bb:75:e6:ca:1a:ae:97:ad:07:79:
83:7f:1f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:40 2026 by rpki-client