Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2788DA3E574211F1A5609111CF1D38B0.roa
File: 2788DA3E574211F1A5609111CF1D38B0.roa (raw, json)
Hash identifier: Zmil5wHN3Mbic1rNwSmYfEcWpGJt2qaO/TOYoAyuNx4=
Subject key identifier: 1A:39:91:6C:82:C9:1E:F1:30:13:EF:2B:7B:C9:3C:E8:26:39:C4:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2788DA3E574211F1A5609111CF1D38B0.roa
Signing time: Sun 24 May 2026 07:28:27 +0000
ROA not before: Sun 24 May 2026 07:28:22 +0000
ROA not after: Mon 29 Jun 2026 07:28:22 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
154.221.32.0/23 maxlen: 24
154.221.32.0/24 maxlen: 24
154.221.33.0/24 maxlen: 24
154.221.34.0/23 maxlen: 24
154.221.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118437 (0x1cea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 07:28:22 2026 GMT
Not After : Jun 29 07:28:22 2026 GMT
Subject: CN=6a12a89b-b594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:15:78:d5:11:e6:a8:d1:81:fc:be:28:89:f3:
ca:00:d2:c6:5d:ce:89:03:14:49:41:5c:10:bc:4a:
14:44:72:fc:20:e7:cb:55:5f:6a:bc:e2:b6:58:a0:
88:40:9a:55:57:10:32:26:56:4a:e4:db:ed:6d:7a:
ac:5e:7e:00:32:ec:92:c8:f2:04:f4:7f:66:62:b4:
21:43:2c:eb:5b:3b:77:11:88:32:61:81:cd:bd:9e:
a8:c3:24:1c:07:54:49:58:aa:3e:3a:c6:a9:7e:3b:
32:49:09:8a:9c:58:29:f8:1b:70:b0:7e:88:c0:e2:
c3:eb:1b:12:84:d5:41:b4:3c:e3:8f:ed:7d:b0:ff:
79:d7:46:53:01:b2:9a:74:74:c4:b5:50:fe:4e:e2:
5e:3b:de:fd:2b:95:3e:ad:0c:68:5e:1d:ef:7c:e8:
49:26:8a:01:73:47:4e:f5:69:df:ab:6f:ed:28:ec:
8b:1e:d3:49:7f:a5:42:4f:f2:5a:74:77:f0:0e:49:
1d:9b:e9:79:6d:9b:e9:7e:dd:40:39:5e:37:b6:0d:
6b:27:32:1f:1f:8f:85:cf:8e:b7:48:39:9d:9f:15:
e9:bd:45:1f:24:9c:43:7b:9e:08:79:26:e6:b7:2c:
1a:32:2d:35:85:be:54:98:39:42:a9:b5:2d:2b:83:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:91:6C:82:C9:1E:F1:30:13:EF:2B:7B:C9:3C:E8:26:39:C4:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2788DA3E574211F1A5609111CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
69:06:72:03:c5:b0:67:d5:6d:12:09:b7:3a:e6:b5:1f:ef:23:
75:a0:95:f7:92:37:2a:0e:b9:ff:bf:69:39:7f:78:d4:6f:e2:
9c:81:b0:82:ba:b5:f8:38:fd:c8:20:e3:a4:6e:99:b2:d7:39:
cb:fa:9a:74:ea:c6:0a:9b:66:23:4c:4b:58:6b:62:56:57:7b:
b4:bf:9b:53:3e:a2:3c:13:28:d1:30:c8:3b:8a:78:81:33:cf:
e4:39:55:3b:4a:c1:2c:49:94:42:3b:5e:de:13:d2:33:dd:f4:
05:7f:2b:8a:8a:dd:5f:22:e6:a4:d5:b7:cc:58:1e:97:c5:8b:
d8:fb:f8:52:dc:01:41:e3:e6:1b:38:ba:a7:fa:f4:5d:b3:19:
bb:14:15:5d:1c:e9:f0:04:f3:c6:89:00:12:1b:d7:e6:21:09:
e9:8a:4d:6e:55:d8:18:46:3c:5b:92:4d:dd:b8:96:84:f1:c9:
81:58:0a:ac:46:0a:72:f9:72:74:49:3f:a7:87:cc:fb:53:54:
a2:f3:43:79:50:8b:6f:f1:50:ec:98:96:38:ee:eb:ad:b9:37:
ef:c9:80:c2:d7:fc:90:e8:73:85:3a:a8:5e:0a:3a:3a:29:81:
56:34:cd:3d:f3:38:78:a3:a9:b9:00:39:a7:91:02:70:2f:59:
29:52:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:40 2026 by rpki-client