Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28931574707A11F1BEBE7A1ACF1D38B0.roa
File: 28931574707A11F1BEBE7A1ACF1D38B0.roa (raw, json)
Hash identifier: nx2ul0afek9heurcRN6bmo7dT7E/0Z0pthH5D3lUsNo=
Subject key identifier: A5:EC:0B:A0:94:CF:5E:B7:52:F2:88:27:43:FC:A6:74:F2:2A:85:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D52C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28931574707A11F1BEBE7A1ACF1D38B0.roa
Signing time: Thu 25 Jun 2026 09:42:20 +0000
ROA not before: Thu 25 Jun 2026 09:42:15 +0000
ROA not after: Sat 01 Aug 2026 09:42:15 +0000
asID: 202656
IP address blocks: 154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120108 (0x1d52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:42:15 2026 GMT
Not After : Aug 1 09:42:15 2026 GMT
Subject: CN=6a3cf7fc-3aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:6c:46:ab:22:a1:3d:c6:0a:11:1a:fe:d0:
fd:e3:a1:3b:c1:7d:91:3b:8f:a7:b1:d9:fc:17:5f:
25:e0:49:46:10:0f:26:92:8d:79:5e:3c:30:82:33:
8a:31:37:9e:ec:24:4b:04:14:45:47:32:3a:f3:db:
2e:82:31:50:56:e5:79:9b:49:49:4d:80:6b:01:11:
2c:fe:21:8e:62:59:33:6e:8b:36:53:88:88:9c:a1:
0e:11:3a:a9:43:9f:ba:f2:2d:f6:79:26:09:4c:42:
9e:73:a9:09:0a:ce:19:b6:ff:a2:94:77:c3:b6:11:
46:65:06:29:9f:3d:8f:a6:aa:ab:04:11:91:7d:e3:
4c:5d:bd:d8:cf:0c:39:70:32:6d:ab:06:31:a1:dd:
d9:1c:b9:35:e8:39:24:11:ba:23:f2:6e:35:38:dc:
6d:55:90:15:98:22:23:77:50:f5:36:f2:c8:91:8a:
f7:16:8d:9f:c1:68:5a:41:b4:cb:c3:0b:f9:7f:ab:
85:a2:d2:03:5e:b2:07:bc:c1:d6:f4:1d:9e:eb:02:
b1:d5:95:9f:38:bd:b1:a3:4b:95:9f:2b:fe:fa:2e:
0c:72:2d:53:6b:5e:58:ba:7c:2b:a1:7b:65:c5:55:
8a:5d:f0:f2:e3:bc:66:cd:8c:1b:31:92:00:fa:4d:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EC:0B:A0:94:CF:5E:B7:52:F2:88:27:43:FC:A6:74:F2:2A:85:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28931574707A11F1BEBE7A1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.230.0/23
154.203.250.0/23
Signature Algorithm: sha256WithRSAEncryption
15:c0:28:bc:a5:3a:99:f8:22:bd:c6:dc:9d:52:88:2e:c2:fd:
0e:76:65:20:9e:4d:c9:e6:b0:03:1b:db:3d:f0:3c:86:ed:3c:
53:40:6c:35:5f:cb:76:f8:dd:37:dc:a1:57:89:e8:ce:af:dd:
35:c7:42:e8:37:c8:34:89:d5:c3:1a:b5:6f:06:7b:4e:c8:13:
1c:c6:15:03:47:b6:ee:ea:26:55:77:d1:9e:b1:4c:03:32:84:
bc:74:47:9d:3a:fc:12:a0:54:16:90:7e:41:61:7b:e0:4a:ec:
15:26:6a:81:95:ef:e4:0d:50:7e:82:ce:25:78:5e:2f:83:85:
b9:72:37:71:aa:9b:5b:24:9a:52:1f:b2:e5:b1:81:68:ab:96:
1f:c5:43:d5:98:4b:5d:f0:41:c6:a0:41:6c:e7:1c:44:39:ba:
ef:d6:1c:50:ff:b3:5a:8c:01:07:b9:4d:f8:38:fe:d5:5e:7b:
97:fa:43:a3:36:f4:d1:51:18:e9:3f:19:65:1a:dd:6d:5f:c0:
fa:c7:35:72:d9:24:58:99:2e:b6:2e:f2:6f:63:c9:9d:90:4e:
2d:d0:22:1a:f5:f9:c9:a5:a1:de:24:8b:58:9e:d7:dd:72:94:
00:94:8c:7c:cf:b0:bb:4e:a8:1b:06:80:5e:05:64:f9:cb:59:
c4:33:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:51 2026 by rpki-client