Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2510AECC8F0911F19C3C4DB1CE1D38B0.roa
File: 2510AECC8F0911F19C3C4DB1CE1D38B0.roa (raw, json)
Hash identifier: ZiR/I1xQOT4zGgwMNqSwXupOJrUxyqwmG8KHWe4FTMc=
Subject key identifier: C3:CA:F3:DA:29:1D:31:FD:45:73:E5:28:2A:E3:40:6C:F2:46:D9:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2510AECC8F0911F19C3C4DB1CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:01:27 +0000
ROA not before: Mon 03 Aug 2026 07:01:23 +0000
ROA not after: Thu 03 Sep 2026 07:01:23 +0000
asID: 215925
IP address blocks: 154.90.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121942 (0x1dc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:01:23 2026 GMT
Not After : Sep 3 07:01:23 2026 GMT
Subject: CN=6a703cc7-13b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:68:7c:33:02:e8:1c:28:2f:a2:c8:bc:e1:
b2:f0:07:ee:97:a9:24:2a:b2:a5:ac:aa:15:fa:45:
16:a2:ff:93:cd:4b:e1:df:ad:4b:4c:48:09:f1:19:
f3:17:f9:49:f1:3e:a6:b8:bc:0f:0f:42:a1:f5:11:
62:23:6f:35:b3:0e:4f:3a:71:5c:24:ee:1d:be:b9:
9b:62:d8:55:fc:eb:ff:da:be:14:09:25:f2:95:e3:
53:37:55:93:2c:86:ac:ac:38:73:7e:20:a8:e8:4f:
67:4a:2c:52:29:ef:bf:82:7f:3e:9d:32:48:a8:02:
1c:92:a5:b2:9a:30:4e:4f:b7:76:45:70:ff:c6:36:
1e:3c:2c:43:51:5d:24:53:d8:cb:79:76:7c:e7:4a:
2c:65:73:6d:86:17:42:53:72:9f:7a:9e:15:58:0d:
98:28:3b:6c:6a:3f:cb:6b:c9:be:05:f6:55:83:75:
9a:5d:de:86:ea:31:d3:9f:fb:60:ab:80:ca:34:ea:
7f:70:88:9b:f7:ba:0d:59:90:7e:5b:0b:49:c9:93:
3d:db:36:30:63:90:a3:e7:93:0d:2e:e4:44:5a:e4:
f2:48:ed:37:42:42:a8:01:47:34:d8:bc:e8:31:fd:
5e:54:59:bb:99:56:51:10:de:2d:98:06:0c:cb:c0:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:F3:DA:29:1D:31:FD:45:73:E5:28:2A:E3:40:6C:F2:46:D9:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2510AECC8F0911F19C3C4DB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:49:91:5b:f9:78:d3:ca:22:b3:66:de:ab:a2:73:bb:5d:43:
93:67:18:23:19:a2:13:45:84:f5:a9:01:01:80:3c:17:31:f1:
7f:2d:46:3c:8b:e1:bb:05:9d:73:95:76:0b:1b:a0:e9:14:2d:
44:88:a7:35:1c:41:33:a1:9c:ca:46:20:83:2d:df:00:46:6c:
87:b3:c2:da:1b:fb:3c:f6:17:74:aa:00:99:55:4e:60:98:25:
33:e8:9d:86:38:6d:44:19:89:c1:4d:9d:82:ce:a9:d1:00:b1:
bc:2f:8b:4c:90:d1:ab:ae:e0:e8:9e:6a:54:ab:e6:43:42:dc:
da:89:54:9f:8f:a1:d1:1d:af:98:c1:40:31:21:83:9c:9c:ce:
dd:39:93:bb:a9:dd:e3:7c:f4:7c:d1:6f:4c:96:43:48:0b:63:
89:db:15:e1:f2:dc:5a:76:44:b0:7e:c7:b6:fa:c4:f3:20:f5:
90:11:d4:be:c5:4e:7e:58:05:7f:3b:bc:8c:61:3f:d7:5b:12:
a2:8a:7e:74:3a:1f:02:de:ae:f8:3a:a7:3c:f5:f2:b8:8b:be:
5e:41:65:ed:42:76:c2:0b:7d:28:c7:1d:1a:18:96:34:e5:f8:
77:61:29:07:10:79:8b:1f:68:d0:42:78:67:ce:bf:6b:1c:01:
35:41:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:44 2026 by rpki-client