Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E67FB64A7D11F1842780C3CE1D38B0.roa
File: 28E67FB64A7D11F1842780C3CE1D38B0.roa (raw, json)
Hash identifier: lVIEKC9e/MHxbHL1iXpMO4COJOMROuyUPDrp1SXvKwU=
Subject key identifier: E6:90:13:E8:A0:48:F0:31:7C:72:A6:41:10:8E:C3:C8:6F:05:62:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E67FB64A7D11F1842780C3CE1D38B0.roa
Signing time: Fri 08 May 2026 01:28:04 +0000
ROA not before: Fri 08 May 2026 01:28:00 +0000
ROA not after: Wed 07 Jul 2027 01:28:00 +0000
asID: 328608
IP address blocks: 154.200.197.0/24 maxlen: 24
154.200.198.0/24 maxlen: 24
154.200.199.0/24 maxlen: 24
154.200.200.0/24 maxlen: 24
154.200.201.0/24 maxlen: 24
154.200.202.0/24 maxlen: 24
154.200.203.0/24 maxlen: 24
154.200.204.0/24 maxlen: 24
154.200.205.0/24 maxlen: 24
154.200.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117277 (0x1ca1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 01:28:00 2026 GMT
Not After : Jul 7 01:28:00 2027 GMT
Subject: CN=69fd3c24-a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:9d:8a:f2:02:0e:99:29:69:a2:8b:a2:03:
61:67:f9:7a:45:dc:bf:47:c1:44:7d:34:89:c8:28:
7e:b6:79:64:66:dc:5f:45:00:45:9c:34:87:b7:10:
61:bd:fc:90:1c:7c:24:fe:b7:aa:0e:86:a3:e4:9e:
eb:b9:6f:78:44:e7:80:9d:19:3a:e6:ae:70:c6:be:
18:96:03:d8:5f:eb:dd:55:22:5d:de:33:8a:2e:96:
4c:86:41:8a:d6:d7:0d:e6:7b:66:12:b9:7c:08:8a:
e5:70:47:27:aa:9f:11:31:6b:1d:bd:9a:f0:61:e5:
84:a9:f5:bd:14:93:b0:88:0a:74:a8:18:69:e2:6e:
a1:f3:00:dd:b5:c9:6c:3b:61:16:65:c9:cd:65:d4:
cf:f7:98:06:c0:86:74:db:5a:50:2f:ff:2b:a5:46:
a5:27:f5:b8:8e:a4:ca:65:77:c2:88:d4:12:b3:b0:
a7:a4:a8:c5:d9:33:14:14:10:c4:4e:b8:c4:d1:ff:
27:45:95:11:79:fe:80:e9:1d:91:56:58:f6:38:e7:
be:31:88:97:77:3b:94:b4:1f:66:8e:ef:4d:e8:4f:
35:cc:1f:dd:ad:a8:ef:20:42:ed:05:b4:77:27:a1:
f2:e0:03:50:10:5a:fb:a5:bb:19:cf:fb:14:ed:bc:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:90:13:E8:A0:48:F0:31:7C:72:A6:41:10:8E:C3:C8:6F:05:62:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E67FB64A7D11F1842780C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.197.0-154.200.206.255
Signature Algorithm: sha256WithRSAEncryption
65:d3:be:d6:5a:64:70:b9:f2:22:96:7c:e7:59:51:89:99:73:
c6:91:7f:e3:6b:3d:f4:0d:fe:dd:62:ed:b2:fd:95:73:0e:62:
ba:68:8f:01:0f:99:58:77:20:49:72:cf:46:be:3e:8b:d8:08:
3b:35:52:8e:82:a5:46:79:17:ec:f5:9b:ab:65:2d:cc:57:66:
7d:c1:8c:5f:ba:67:c5:2a:09:73:8e:2b:7f:1f:db:e8:ee:e8:
9e:ce:78:b3:4b:6d:39:0d:cb:03:d9:01:ad:a9:86:53:65:32:
5c:e9:ef:df:47:d4:1b:6c:0c:ab:15:68:9b:18:40:85:c2:74:
ba:e0:54:b6:00:23:a4:eb:dd:db:97:c4:d6:a0:f8:a0:43:ea:
7e:dc:8f:dc:54:ba:de:75:5b:68:f5:ed:14:d5:12:22:28:b3:
86:e1:65:a5:09:ba:8b:39:31:5d:c5:75:83:d8:6b:10:f8:36:
c4:24:2f:92:9b:ce:9f:d2:01:45:f0:6b:e3:c5:d7:83:79:16:
20:02:ce:98:61:66:e3:0f:ad:2f:10:2b:af:cb:c8:d7:91:90:
97:63:7b:14:4f:45:96:93:4f:c1:d2:df:6a:ad:cb:9e:16:90:
b6:42:b7:a1:d5:7f:1f:28:ea:bf:99:1d:11:15:fd:c3:c5:d9:
2c:1f:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:32 2026 by rpki-client