Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5A2C10698311F191BF33FACE1D38B0.roa
File: 2A5A2C10698311F191BF33FACE1D38B0.roa (raw, json)
Hash identifier: dG+AQ7FRGMIxmNyFBjBLwPs1suQAgIjd11ONkNFWbdA=
Subject key identifier: 58:6F:48:30:1F:81:2E:DF:05:C5:AD:AC:74:1A:68:8A:D1:8C:C6:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D347
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5A2C10698311F191BF33FACE1D38B0.roa
Signing time: Tue 16 Jun 2026 12:59:10 +0000
ROA not before: Tue 16 Jun 2026 12:59:05 +0000
ROA not after: Thu 16 Jul 2026 12:59:05 +0000
asID: 17497
IP address blocks: 154.82.19.0/24 maxlen: 24
154.94.2.0/23 maxlen: 24
154.94.2.0/24 maxlen: 24
154.94.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119623 (0x1d347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 12:59:05 2026 GMT
Not After : Jul 16 12:59:05 2026 GMT
Subject: CN=6a31489e-0173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9d:2f:9f:a3:8b:ee:91:f5:c3:3a:57:40:f3:
b9:06:47:bc:43:4b:28:23:35:1f:fc:b2:3d:8b:c9:
fb:69:e0:68:f3:9e:5e:c1:19:6f:fa:0e:a6:86:9d:
59:c5:70:12:0a:8a:84:67:db:43:64:96:ae:6e:7c:
d9:c6:6e:39:4e:9a:08:3e:9a:d4:8a:f5:2e:22:17:
cb:48:33:24:8e:0f:9c:f1:ab:9d:8c:32:41:4b:a7:
e9:b5:47:1f:d4:8a:de:40:96:5b:90:5b:81:3b:1d:
52:6a:35:4b:ec:c7:ab:57:46:bf:05:a1:70:3b:07:
1e:cc:48:8c:29:3b:61:09:d9:81:15:0a:f1:42:3f:
ae:91:3a:44:14:6e:f5:9a:09:4d:f7:84:2f:33:45:
f8:31:95:63:b4:0e:79:03:c6:d3:7b:0d:7b:28:1f:
c1:15:2f:97:13:b8:96:8a:33:1c:28:d2:b6:2f:3b:
83:ac:14:9f:f9:e5:16:2a:69:5c:49:3a:b5:1c:74:
47:3e:91:b8:3a:00:63:bd:09:99:06:9d:20:cf:b9:
3e:dc:4f:45:c0:c5:cb:be:c9:69:8a:7d:4e:97:a5:
a9:15:2f:f5:d2:cf:07:eb:12:a3:f4:0b:99:5f:d0:
d7:54:0f:52:16:3a:49:27:5f:65:e5:f2:ea:a5:2b:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:48:30:1F:81:2E:DF:05:C5:AD:AC:74:1A:68:8A:D1:8C:C6:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5A2C10698311F191BF33FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
26:6d:7e:98:e3:8f:90:4a:c0:31:80:18:8e:9f:e6:82:85:24:
ee:2d:4a:1e:cb:0e:e0:46:bd:ff:d9:c7:f9:a6:af:5b:06:69:
c9:4c:84:5c:ff:df:ff:37:08:13:84:0c:ef:5f:f3:7c:36:da:
d4:bf:a4:2e:2c:da:8a:43:9c:b1:c1:ed:02:64:81:59:fe:f7:
bf:09:2d:d8:e8:04:79:24:96:14:0e:e7:9c:b3:cd:f0:a1:03:
fd:de:d6:d6:4c:8f:d2:43:96:ec:21:7b:48:92:b6:8e:28:89:
8d:f9:a0:8f:58:2c:52:56:07:06:48:da:a0:20:2e:ed:f4:ed:
1c:e4:d6:60:38:70:0f:71:64:3b:56:d4:5e:ef:50:0e:91:49:
e8:47:f6:79:32:5e:6f:71:23:e5:72:80:25:e1:82:09:d8:38:
e1:38:38:4d:6f:1a:99:e6:f7:2f:9d:9b:de:f4:6a:e2:f7:3d:
26:55:68:37:d9:4a:35:b9:df:ee:47:2a:e8:48:3a:94:a3:37:
b3:d1:07:ba:73:70:a3:0e:70:ac:26:e9:41:7b:56:0b:44:d1:
07:b0:e2:a3:8f:5d:3c:d9:ec:f2:9c:d8:fd:6e:3f:25:f3:6d:
5f:2d:dd:19:25:b8:e5:0c:22:46:5a:bb:e8:e0:cf:6e:45:2d:
d7:a1:ba:77
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAdNHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE2MTI1OTA1WhcNMjYwNzE2MTI1OTA1WjAYMRYw
FAYDVQQDEw02YTMxNDg5ZS0wMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA550vn6OL7pH1wzpXQPO5Bke8Q0soIzUf/LI9i8n7aeBo855ewRlv+g6m
hp1ZxXASCoqEZ9tDZJaubnzZxm45TpoIPprUivUuIhfLSDMkjg+c8audjDJBS6fp
tUcf1IreQJZbkFuBOx1SajVL7MerV0a/BaFwOwcezEiMKTthCdmBFQrxQj+ukTpE
FG71mglN94QvM0X4MZVjtA55A8bTew17KB/BFS+XE7iWijMcKNK2LzuDrBSf+eUW
KmlcSTq1HHRHPpG4OgBjvQmZBp0gz7k+3E9FwMXLvslpin1Ol6WpFS/10s8H6xKj
9AuZX9DXVA9SFjpJJ19l5fLqpStLCwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFFhv
SDAfgS7fBcWtrHQaaIrRjMbwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQTVBMkMxMDY5ODMxMUYxOTFCRjMzRkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlITAwQBml4CMA0GCSqG
SIb3DQEBCwUAA4IBAQAmbX6Y44+QSsAxgBiOn+aChSTuLUoeyw7gRr3/2cf5pq9b
BmnJTIRc/9//NwgThAzvX/N8NtrUv6QuLNqKQ5yxwe0CZIFZ/ve/CS3Y6AR5JJYU
Duecs83woQP93tbWTI/SQ5bsIXtIkraOKImN+aCPWCxSVgcGSNqgIC7t9O0c5NZg
OHAPcWQ7VtRe71AOkUnoR/Z5Ml5vcSPlcoAl4YIJ2DjhODhNbxqZ5vcvnZve9Gri
9z0mVWg32Uo1ud/uRyroSDqUozez0Qe6c3CjDnCsJulBe1YLRNEHsOKjj1082ezy
nNj9bj8l821fLd0ZJbjlDCJGWrvo4M9uRS3Xobp3
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:06 2026 by rpki-client