Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0272C828673111F19C0B1ADBCE1D38B0.roa
File: 0272C828673111F19C0B1ADBCE1D38B0.roa (raw, json)
Hash identifier: duZN1gBslHdY1413noUyR8s9d4OZmqbb7RwkaTeD5Ms=
Subject key identifier: DB:31:8E:39:3E:C8:33:A0:E1:C0:E2:24:BA:28:3A:39:BE:59:2F:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0272C828673111F19C0B1ADBCE1D38B0.roa
Signing time: Sat 13 Jun 2026 14:06:02 +0000
ROA not before: Sat 13 Jun 2026 14:05:57 +0000
ROA not after: Fri 28 Aug 2026 14:05:57 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119469 (0x1d2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 14:05:57 2026 GMT
Not After : Aug 28 14:05:57 2026 GMT
Subject: CN=6a2d63ca-9f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:f9:7f:49:ba:23:95:82:0f:db:37:b0:ff:
60:ab:e9:26:cd:ea:9f:d2:c6:84:9f:7b:ea:01:ab:
2e:57:88:25:46:92:7a:9d:35:10:23:af:ff:6c:9e:
5d:f7:2f:d3:be:13:4c:a0:bb:77:a1:da:1f:be:f9:
64:aa:80:06:8d:34:1c:15:5a:13:9a:32:c2:6f:a5:
f3:6e:54:3a:95:d5:30:ac:9e:de:26:c9:eb:0c:26:
c2:ab:69:3f:2e:bd:cc:47:f9:13:85:d0:31:74:fc:
9a:78:2b:04:26:1f:d4:12:04:4a:40:3d:7b:fd:c1:
8f:ee:36:94:08:d3:b5:7b:e5:2f:30:5f:a9:b3:3b:
f3:78:75:be:1d:76:c3:f5:cd:96:71:e5:dc:2a:f5:
23:99:2e:14:28:ae:a5:37:ed:39:b7:f6:39:15:f0:
08:1c:a3:8c:2c:e1:b3:44:b7:b7:62:98:96:ff:b2:
4a:81:a2:7a:4f:2b:bf:f6:d2:32:56:65:83:0d:33:
3a:20:f5:36:2a:4e:5f:e2:73:9d:e1:6d:d2:9b:eb:
d7:31:25:e5:50:c4:df:9b:6b:9b:de:6d:fd:d7:86:
18:ec:92:b7:41:ba:d4:ae:75:d7:ce:26:28:41:f0:
07:48:c6:98:3d:42:e6:95:77:d7:1b:c9:b4:fd:26:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:8E:39:3E:C8:33:A0:E1:C0:E2:24:BA:28:3A:39:BE:59:2F:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0272C828673111F19C0B1ADBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7e:ff:82:ca:05:c8:92:3d:b0:85:5e:90:57:87:5e:76:de:
a3:91:87:32:6d:3c:f8:99:48:0b:c1:f4:c9:80:ff:82:83:ac:
cc:24:e2:49:a9:b5:8f:ff:20:e7:38:ec:25:0b:1b:a2:ca:0f:
d5:17:80:dd:04:f5:da:4f:d5:91:3a:dd:eb:94:4c:d1:a7:cd:
64:5f:9e:dd:7e:4a:4c:56:97:0e:52:03:1f:2c:a0:11:94:aa:
30:98:56:8a:5a:95:c6:c9:b5:5d:82:e8:02:25:0c:f9:a4:c4:
c1:5b:b9:74:2c:ee:d2:3f:97:ab:17:ae:b4:2a:84:bf:6c:40:
56:a1:bd:c0:82:4f:0c:d2:ff:82:15:82:cf:12:48:af:ac:04:
14:fe:0c:ad:db:32:0e:ad:5f:2d:71:54:fa:2c:51:6d:d9:98:
d9:86:3c:27:69:4f:20:c8:ab:ae:10:ca:7d:c1:bc:13:48:a1:
0c:0d:e4:4c:86:ae:46:e5:37:af:8f:f7:b5:5d:4a:99:36:1b:
0c:c9:e8:bf:57:68:ef:62:f6:d3:22:aa:8d:a2:23:81:31:08:
15:c7:45:aa:17:b8:a3:d5:4b:c9:13:b1:20:1b:97:92:c0:c5:
2b:97:59:7b:2e:0b:41:5f:ad:82:8a:b0:c9:05:74:5e:b7:7f:
02:98:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:44 2026 by rpki-client