Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EB9A648A5E11F19AED08B9CE1D38B0.roa
File: A2EB9A648A5E11F19AED08B9CE1D38B0.roa (raw, json)
Hash identifier: 4FTXBCU4jJtfkuJ6PcT+wW6J3Gs+mlr83r054BAog4k=
Subject key identifier: 03:AE:E4:55:C9:C3:B2:A2:DD:76:8B:76:1D:55:47:1F:A2:7C:52:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EB9A648A5E11F19AED08B9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 08:30:49 +0000
ROA not before: Tue 28 Jul 2026 08:30:45 +0000
ROA not after: Fri 07 Aug 2026 08:30:45 +0000
asID: 31404
IP address blocks: 154.82.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121748 (0x1db94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:30:45 2026 GMT
Not After : Aug 7 08:30:45 2026 GMT
Subject: CN=6a6868b9-f886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:e8:b3:87:8b:ed:39:75:bf:86:d5:d0:c6:
1c:12:62:52:cd:83:bc:f7:91:5d:7c:0f:71:bb:5b:
90:82:64:4c:f3:c5:a8:a5:1f:69:25:60:6d:64:c8:
f2:d0:23:2a:8f:ba:d2:6f:a4:4d:52:4d:3b:24:a8:
04:18:85:d9:70:51:82:75:43:74:5a:97:28:2a:7b:
cc:6b:7f:a2:a6:6b:5f:84:d2:b5:77:3a:df:4f:c8:
75:f2:13:06:fd:e3:21:82:d7:4c:2c:bc:39:67:7e:
48:7d:4f:81:5c:b8:7c:3f:57:5a:1a:d5:c7:dd:00:
24:86:4b:b1:b5:7c:62:24:c2:4e:52:0e:8c:76:cb:
9e:fd:d9:b6:f3:77:b8:3d:b9:d8:7d:b9:d7:e3:ab:
4f:28:02:46:d2:b5:f6:f4:ae:ea:50:b8:fe:9b:ce:
11:e0:d9:37:14:fa:5d:93:20:bf:cc:e3:18:b5:71:
00:03:5b:84:eb:14:6e:8d:cc:98:1b:70:1a:16:a6:
b1:20:e2:f4:d0:b1:49:35:45:03:d5:44:49:be:9d:
92:34:c1:08:a0:3f:63:90:a3:2e:68:9f:c9:31:d1:
c0:21:ad:a8:53:5a:a7:aa:31:98:59:83:a2:42:fb:
53:65:de:84:58:82:df:9c:af:95:e5:f8:15:68:89:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:E4:55:C9:C3:B2:A2:DD:76:8B:76:1D:55:47:1F:A2:7C:52:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EB9A648A5E11F19AED08B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.182.0/23
Signature Algorithm: sha256WithRSAEncryption
57:ce:f5:f9:53:aa:82:fe:8c:38:9e:c6:ba:b8:96:30:81:b0:
46:f2:3a:db:e1:78:98:93:87:74:73:45:4e:fe:c2:08:78:96:
b5:cb:6b:43:0c:d3:29:50:38:45:16:64:31:20:87:9a:65:95:
33:86:40:58:fb:fb:c3:eb:5f:d9:7b:62:c4:94:4b:06:40:bd:
f9:9d:dc:f8:1b:1d:dd:12:4e:57:2a:9c:f4:98:0a:29:d2:7d:
1f:53:34:90:bc:fa:80:4b:63:77:51:54:93:d3:bb:ac:91:b6:
90:2e:63:d5:59:3e:48:13:df:43:7a:db:b5:fd:d8:f5:f5:5a:
8a:d8:b7:8d:f8:be:7a:94:4a:49:bc:80:48:44:8f:f9:1d:1e:
4b:20:3e:89:77:26:79:90:8d:87:29:e2:07:3e:15:44:be:78:
1c:23:84:2e:7a:d9:b0:bb:f5:b6:d5:19:b0:8c:83:75:c1:7e:
ca:4c:7b:06:eb:4a:36:d9:f6:d8:45:16:bf:ab:bf:82:d6:91:
34:0f:38:7e:fc:75:50:f5:d1:45:6c:54:51:bc:f6:79:a1:f7:
7b:7e:0a:d1:60:00:f2:82:95:bb:fd:dc:84:a3:05:be:51:55:
52:90:5c:ed:99:a4:65:cb:4a:09:49:bb:e8:a5:72:ba:69:d9:
f5:13:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:16 2026 by rpki-client