Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D1B6A2B5711F1BF64FFC0DAE4EC9C.roa
File: 2A5D1B6A2B5711F1BF64FFC0DAE4EC9C.roa (raw, json)
Hash identifier: ugkwQB0LzRjevSLIpt+FmzQUbLEQCftR+SbG1KkD5oQ=
Subject key identifier: AD:40:3E:CD:36:20:31:F6:81:6C:DE:FC:6A:92:17:9B:1C:6A:E4:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D1B6A2B5711F1BF64FFC0DAE4EC9C.roa
Signing time: Sun 29 Mar 2026 10:08:00 +0000
ROA not before: Sun 29 Mar 2026 10:07:55 +0000
ROA not after: Tue 25 May 2027 10:07:55 +0000
asID: 137510
IP address blocks: 154.205.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 Apr 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115106 (0x1c1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:07:55 2026 GMT
Not After : May 25 10:07:55 2027 GMT
Subject: CN=69c8fa00-7630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:41:0f:7f:6d:35:60:56:4f:6c:98:f3:70:
98:fb:2e:4b:1a:eb:39:55:3d:1f:e2:d4:75:c3:34:
3f:b2:3a:7d:78:a3:c9:33:d9:cc:32:0c:f4:5b:0a:
e7:c4:fb:fd:82:19:20:7d:5d:91:01:67:49:0b:8d:
cf:47:b4:6a:2c:70:a0:18:fd:d7:6f:97:01:c5:45:
43:41:16:7c:48:c8:31:0c:bf:43:d0:c5:4d:37:1d:
c5:3d:b1:6b:7f:4a:52:1c:f8:3e:3c:e5:26:08:1b:
42:26:b9:8e:d8:f2:f6:bd:13:28:0f:17:a8:73:4a:
15:ac:98:79:59:14:8f:32:f3:58:70:3c:93:33:34:
a4:42:d4:d0:c7:97:77:4e:aa:37:bf:95:b4:64:e3:
75:d0:b2:af:3b:4b:93:cf:74:b6:22:c5:32:c0:f2:
66:64:9c:9d:35:68:9f:77:e3:23:2d:c5:bb:59:4b:
97:14:78:43:a4:59:df:4b:b4:17:0a:ad:c7:d6:ec:
ca:69:b5:cf:8b:bc:ae:1a:7f:a0:42:f3:60:31:e0:
23:3a:e5:0f:0e:65:44:3c:93:f3:ae:e8:1e:23:dd:
8b:3b:3c:42:07:ab:67:47:3f:4b:4a:2a:5b:62:f8:
9f:f8:cf:01:22:22:1d:5e:30:c6:ee:8f:ef:7c:c8:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:3E:CD:36:20:31:F6:81:6C:DE:FC:6A:92:17:9B:1C:6A:E4:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D1B6A2B5711F1BF64FFC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.187.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fe:ab:3b:11:6c:61:2d:44:90:73:0c:b5:6b:0d:d6:23:b3:
8c:44:55:22:80:91:c9:dd:e2:2c:da:f4:75:73:10:9e:71:89:
6f:a0:64:53:80:4e:4b:d8:6f:91:5d:c5:5c:5e:0a:3a:71:ec:
38:e2:9a:48:09:99:7f:04:15:e0:4b:81:3d:16:11:41:58:db:
36:3e:f7:e9:97:c5:c5:9f:80:9c:73:b6:51:f3:96:f5:09:05:
4c:17:b4:24:e2:ff:db:cd:1f:6d:4d:26:14:fb:e2:e1:7a:d6:
9a:09:f5:0a:67:28:97:f9:ff:c9:0a:ee:33:7d:5a:72:f4:fd:
c4:6c:50:17:60:17:e5:9f:24:ec:e5:6e:6b:12:88:9a:16:d1:
8d:90:83:f4:c0:40:f5:41:d7:e1:a8:c6:09:3f:15:10:92:45:
11:82:fd:31:44:8e:89:86:b4:ac:03:38:e7:63:1f:aa:d5:4e:
0c:d2:12:11:b6:23:71:49:43:ce:da:f3:39:d7:f1:04:ad:b6:
a9:25:66:62:5d:e0:d5:0a:a0:27:88:c9:1d:28:7c:c2:9c:62:
a4:a3:6c:b1:5f:7a:f2:0a:eb:d6:68:13:55:d1:26:f1:fe:57:
a6:c1:f0:af:d0:73:87:1a:08:ae:57:0c:42:f6:19:90:37:74:
b4:84:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:29:54 2026 by rpki-client