Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1951EA42E611F1B3CBEAA9CE1D38B0.roa
File: 2A1951EA42E611F1B3CBEAA9CE1D38B0.roa (raw, json)
Hash identifier: 3v9zbw8XEAmN4KX+dZpakGdwwIXI8rUMIFdYDSjvcLc=
Subject key identifier: 8D:AE:31:E2:AB:E3:CF:87:4A:EA:9C:8F:76:BF:B1:DD:3A:0A:3B:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1951EA42E611F1B3CBEAA9CE1D38B0.roa
Signing time: Tue 28 Apr 2026 09:39:34 +0000
ROA not before: Tue 28 Apr 2026 09:39:30 +0000
ROA not after: Wed 03 Jun 2026 09:39:30 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116655 (0x1c7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 09:39:30 2026 GMT
Not After : Jun 3 09:39:30 2026 GMT
Subject: CN=69f08056-881e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:17:12:98:f5:8e:ed:a9:17:20:48:ec:4e:
c0:90:75:3b:b6:ba:d1:91:42:b5:02:08:62:b3:38:
8f:e2:c0:df:bf:15:52:b1:fc:01:6c:0e:2b:c4:12:
bb:a6:aa:98:18:70:da:90:f7:bd:73:49:63:6a:76:
c1:6f:e6:c2:6c:5b:8c:48:21:35:14:0f:bf:fa:b2:
3f:a3:fc:66:5f:4d:5a:1a:c6:11:de:dd:2d:a1:fb:
61:8e:b3:95:cf:e7:e5:74:7e:6c:4e:e6:c0:66:cf:
11:40:01:4d:99:25:52:2c:80:4c:8b:de:45:b0:85:
1f:69:4a:e0:9e:d2:f3:66:40:ac:87:d9:1f:3e:b2:
a9:5f:df:1f:20:b6:4e:0b:16:f9:51:00:9d:46:a3:
28:71:d3:f0:ae:e7:cf:9e:c7:df:40:3f:10:67:5e:
22:2d:ad:6f:7a:9e:12:cd:83:75:5d:d4:ac:d4:15:
48:a6:e4:cd:4c:86:c5:f9:6b:9e:0a:a5:da:dc:ab:
7d:34:b2:4a:72:3b:1b:6c:af:bc:b1:3b:43:05:03:
a3:c9:8a:13:5d:d8:96:79:12:94:52:55:1d:49:e1:
96:83:e2:84:e2:07:d1:16:d3:51:66:b7:e5:ce:ad:
83:a0:34:46:72:27:16:9f:b6:9f:9a:54:0b:8e:bc:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:31:E2:AB:E3:CF:87:4A:EA:9C:8F:76:BF:B1:DD:3A:0A:3B:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1951EA42E611F1B3CBEAA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
Signature Algorithm: sha256WithRSAEncryption
53:2b:c7:30:96:3e:0f:b9:db:7b:dd:5b:af:e1:ca:28:78:f8:
fe:f2:a6:63:0b:ed:82:a6:00:db:f4:cb:f3:f4:30:40:31:03:
f1:87:96:da:64:3b:8f:f8:16:81:e1:7f:8a:ba:6b:05:30:39:
88:29:f4:48:00:81:48:7a:cf:d3:ca:b6:26:ad:97:d7:38:25:
32:c3:6a:68:dc:cd:5b:34:db:7c:da:f8:bb:2f:f7:9c:6f:1c:
93:c0:90:ec:03:06:c6:be:26:bf:20:4b:ec:00:58:74:8e:3a:
66:1d:b5:8b:73:6a:d2:a3:ba:29:c3:21:7b:16:9d:9d:3a:93:
34:1b:a4:24:bc:7e:b0:bf:eb:5f:5f:27:d7:72:bd:1d:7d:30:
92:0b:b7:7c:a7:42:a9:de:4f:5b:8f:d7:b5:21:ec:46:f4:d8:
d1:9c:a3:67:c0:96:fc:4b:7f:75:b6:4a:5a:33:ea:80:e3:cf:
10:c9:56:01:55:82:4d:3d:f3:a5:f1:f3:ee:28:85:74:1a:29:
cc:fe:8b:b6:8c:c5:df:45:61:7e:6f:04:df:e5:61:2a:88:e0:
ce:80:2a:28:a1:06:c1:e1:0c:34:ca:16:2b:34:b2:2a:ab:da:
af:43:91:71:e5:fe:ac:a6:b9:33:79:8c:74:dd:f2:63:e0:eb:
74:bf:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:50 2026 by rpki-client