Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/273A11F4720611F1A41E7F03CF1D38B0.roa
File: 273A11F4720611F1A41E7F03CF1D38B0.roa (raw, json)
Hash identifier: ZGEdpoQ5rLn+5v8s/27JoENLb71Y/znqu1x4CrwcrA4=
Subject key identifier: EA:95:E0:A3:FF:D1:63:A2:25:CD:55:C6:44:F0:58:60:48:10:27:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D58C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/273A11F4720611F1A41E7F03CF1D38B0.roa
Signing time: Sat 27 Jun 2026 08:56:58 +0000
ROA not before: Sat 27 Jun 2026 08:56:54 +0000
ROA not after: Thu 30 Jul 2026 08:56:54 +0000
asID: 9304
IP address blocks: 154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120204 (0x1d58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:56:54 2026 GMT
Not After : Jul 30 08:56:54 2026 GMT
Subject: CN=6a3f905a-23a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:ea:8a:53:29:de:e6:d7:cc:16:cf:f4:3b:
fa:78:bc:11:e5:ce:30:ec:6f:39:75:d9:a0:2c:46:
01:35:52:77:66:9e:c9:c8:c9:75:92:5c:a8:63:a3:
19:12:25:f9:7e:d9:81:2a:12:49:60:bb:3f:63:81:
8d:c2:01:df:98:9a:d2:fd:fe:6e:b9:9d:d7:5b:52:
36:8e:75:a6:d6:f9:ce:f3:e7:69:81:3c:63:d5:dd:
99:71:14:cc:e5:98:0d:17:85:54:b6:db:29:05:5d:
8f:f2:70:00:70:b7:4b:25:8c:99:3e:00:2e:77:4b:
23:77:7b:bd:0b:34:ee:05:df:ae:c2:fe:e0:f8:8c:
97:5e:86:9e:e5:ba:91:ee:3e:92:b0:b1:29:e5:8f:
55:59:6a:36:eb:b3:da:f1:ea:ea:57:ba:35:2f:8f:
11:1d:70:d1:60:b7:d5:56:ae:57:36:6c:41:ec:17:
04:e5:fe:15:92:6b:70:e4:fa:48:a9:d9:b1:b3:da:
3d:37:0f:1a:b2:03:4a:df:e0:3a:d7:14:82:b6:07:
49:28:f7:bd:cc:fb:49:a4:19:83:8c:e1:d0:79:a0:
6c:8e:34:a3:e6:c5:f1:8b:88:05:73:27:e1:46:04:
5b:ec:1e:f6:6a:75:80:cb:f2:0f:c5:8a:09:e9:1f:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:E0:A3:FF:D1:63:A2:25:CD:55:C6:44:F0:58:60:48:10:27:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/273A11F4720611F1A41E7F03CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:dc:94:e3:77:16:2e:8a:2d:a8:d4:d0:a6:ca:ce:1c:e9:87:
e5:c9:93:65:62:b1:d3:6c:f7:bd:42:a8:a9:31:3a:b5:8a:f1:
71:15:40:8b:1e:e1:78:26:bc:7c:78:06:ac:dd:e7:59:30:8a:
f4:6b:53:21:b4:9e:26:39:71:b6:00:6f:85:f9:00:f3:f1:51:
da:57:38:c4:aa:93:12:5f:9c:3c:73:fb:5c:8f:ea:b5:0e:aa:
9e:9a:6d:80:1b:1c:a1:51:40:e4:cf:a2:2f:2d:f1:3c:52:fe:
09:52:95:ab:75:02:3d:68:13:49:f8:c1:63:3d:69:8d:ca:aa:
74:59:8c:af:a2:e1:f7:96:13:84:1b:ff:f0:43:0a:ee:34:1f:
27:b8:75:7f:eb:a9:07:c7:7d:63:7e:60:0a:1e:69:7a:87:f3:
03:7a:a1:69:47:40:92:82:9d:31:37:24:e7:8f:0f:97:63:8d:
de:a8:a8:47:37:17:51:99:08:0c:99:70:40:77:d0:d9:64:72:
df:97:f0:17:f6:78:da:f6:53:ba:8a:95:83:77:fc:ec:88:97:
de:f9:88:81:a8:42:5e:01:4b:be:68:d7:d8:9a:a7:7a:30:63:
c2:36:c3:c6:7b:e1:7c:1a:2f:96:9d:50:24:15:6e:24:92:23:
d6:12:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:19 2026 by rpki-client