Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B928F4E794311F1B8E111F7CE1D38B0.roa
File: 2B928F4E794311F1B8E111F7CE1D38B0.roa (raw, json)
Hash identifier: zSxNUyl/hsu0KENFOiVzULYh4zlBPnW061UvCqd9MqA=
Subject key identifier: EE:E0:B7:0D:30:14:4D:8A:53:CE:DB:07:4F:67:72:1C:88:0F:96:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D73E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B928F4E794311F1B8E111F7CE1D38B0.roa
Signing time: Mon 06 Jul 2026 14:01:23 +0000
ROA not before: Mon 06 Jul 2026 14:01:18 +0000
ROA not after: Sat 01 Aug 2026 14:01:18 +0000
asID: 401783
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120638 (0x1d73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 14:01:18 2026 GMT
Not After : Aug 1 14:01:18 2026 GMT
Subject: CN=6a4bb533-3c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:8a:91:b0:de:ee:72:ed:f5:4e:9f:b0:e7:
d7:6d:96:43:b6:58:b3:bd:c8:25:ea:ab:e2:9a:a3:
7f:de:d9:e5:24:b4:47:b0:23:8d:91:21:7f:8a:f8:
1c:17:ae:c0:c8:34:bb:a2:5a:77:cb:2e:c2:61:d9:
a1:e4:1e:40:f7:77:07:2b:3a:d7:ee:cf:cd:d1:51:
3b:5f:53:12:32:8a:59:d4:29:8f:65:77:34:29:32:
8e:80:bb:8e:bf:21:65:c1:0a:9b:90:14:2f:f3:16:
e0:a1:3a:ec:2d:ae:14:66:09:55:95:06:33:18:b5:
fd:3c:91:c5:32:ce:f4:28:bf:29:8e:4b:3d:0e:2e:
12:04:33:66:7a:da:4c:89:e0:72:74:58:f1:ef:ae:
e4:8b:bc:af:f1:07:ae:a5:5c:db:2e:d4:12:69:a0:
6f:af:a3:23:9e:7e:02:aa:2f:2d:d3:0d:6e:06:06:
6c:23:ba:bc:f4:1d:db:47:ac:04:79:5c:3a:9a:4d:
de:93:0d:59:cf:a6:89:20:34:30:00:f2:5a:c0:5e:
33:e8:fb:40:88:83:d5:d4:0c:02:4b:55:00:cb:dd:
ec:dd:0d:ad:58:e1:13:51:ea:48:01:50:c0:63:14:
04:65:1e:99:27:70:b0:f4:ff:1f:07:ef:87:eb:3b:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:B7:0D:30:14:4D:8A:53:CE:DB:07:4F:67:72:1C:88:0F:96:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B928F4E794311F1B8E111F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:14:05:22:44:e3:35:4d:f4:6a:08:cd:a9:92:e4:c2:49:9c:
d3:ea:0e:9f:0b:cd:a7:1c:7a:42:14:93:5c:2c:66:32:6b:55:
91:18:1f:1e:71:e3:ea:4b:2e:98:10:69:10:e2:90:1c:94:72:
b3:2b:6b:25:c3:d4:46:f2:37:14:4a:d0:27:5b:6a:25:e9:66:
07:86:47:ce:ae:62:f5:c1:0a:fa:62:87:c7:23:7c:f8:ff:28:
2e:c7:f8:44:d9:49:78:c4:8d:a5:39:8c:17:5c:5f:22:95:3c:
40:41:2a:5a:2f:92:f9:4c:56:99:fb:45:99:76:05:7b:ba:f7:
f7:4a:8d:1d:91:eb:32:6f:ed:b4:e1:ed:6c:8e:b0:64:e1:f3:
cd:57:60:3e:e3:09:61:e5:fe:62:07:56:60:22:c2:2e:a6:e7:
ad:1c:c3:3a:0b:42:51:fa:ed:75:2b:1d:3c:a0:fe:ce:45:7a:
84:55:fc:71:1e:3c:72:45:de:37:47:09:5e:e8:a6:bb:b5:30:
7d:98:17:ce:81:7b:b9:1e:58:83:8e:a5:24:2a:43:e6:21:b5:
89:b5:3d:c2:ce:ec:4c:13:be:f4:bd:08:fd:97:c7:d7:7a:59:
91:d9:d6:03:23:46:28:fa:81:aa:00:7a:f1:9c:ae:e7:0a:40:
7b:0c:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:10 2026 by rpki-client