Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AB81A143C9211F180CE4BEACE1D38B0.roa
File: 2AB81A143C9211F180CE4BEACE1D38B0.roa (raw, json)
Hash identifier: y/+MPIJGCWViY/OPbnJ4RMZACFMm0GmTaehWa81Kpc4=
Subject key identifier: DF:51:0F:00:08:D4:FD:AD:11:DB:3E:E9:53:D4:38:35:0F:24:51:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C618
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AB81A143C9211F180CE4BEACE1D38B0.roa
Signing time: Mon 20 Apr 2026 08:23:11 +0000
ROA not before: Mon 20 Apr 2026 08:23:06 +0000
ROA not after: Wed 27 May 2026 08:23:06 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.68.0/24 maxlen: 24
154.206.69.0/24 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.70.0/24 maxlen: 24
154.206.71.0/24 maxlen: 24
154.206.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116248 (0x1c618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 08:23:06 2026 GMT
Not After : May 27 08:23:06 2026 GMT
Subject: CN=69e5e26f-34a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:ef:c6:40:3a:1e:c9:69:fc:52:b2:58:c1:
a1:b4:7b:54:89:93:3e:e5:11:3b:78:12:ae:cc:25:
2b:f1:6c:a3:ae:8d:95:70:7c:15:30:20:46:de:38:
62:64:8a:8f:37:1a:78:97:66:2c:dd:1a:c1:c9:74:
6b:94:c0:29:4a:a7:41:29:c3:6a:d1:1d:ee:ba:5a:
72:11:4a:37:52:87:63:d4:0d:bd:c6:6b:24:9b:a4:
4c:6f:b4:86:5b:a8:f1:78:6c:15:75:70:fb:e7:c6:
7e:5c:93:e9:c1:19:5d:09:82:98:85:bf:86:15:8a:
f1:67:ab:8b:a1:2c:a9:90:b7:40:76:de:a0:e1:3b:
8d:62:98:d8:0a:aa:4c:1c:3a:54:ab:aa:11:c9:8b:
15:5d:7e:79:b3:bb:b1:b9:bd:0c:44:a2:6a:0a:de:
b1:eb:86:f7:36:1a:00:60:29:82:4b:ff:0e:5d:9e:
55:af:c8:cb:87:73:7c:23:f1:cc:58:1f:44:3b:31:
a1:4a:cc:32:b9:5e:b7:b4:a7:f6:cf:ba:10:88:94:
a8:26:de:09:83:b3:22:01:5b:f1:72:ba:98:2c:f8:
7e:fd:99:81:64:db:fb:06:ab:f3:cd:97:72:55:a6:
10:cb:c8:ef:9d:18:75:73:34:a7:60:bd:4a:e6:74:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:0F:00:08:D4:FD:AD:11:DB:3E:E9:53:D4:38:35:0F:24:51:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AB81A143C9211F180CE4BEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0-154.206.66.255
154.206.68.0/22
154.206.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:42:48:0a:bf:93:fa:a2:ef:ef:96:0e:bd:3b:31:bc:bc:a9:
fe:d9:99:a8:ee:15:75:91:90:3f:1a:ae:41:9e:38:3d:d9:46:
f3:52:5e:44:1a:86:ba:a2:db:5c:a7:fb:42:4a:d5:ec:53:0d:
5b:b5:2a:eb:f7:8f:d0:05:96:a8:04:e3:93:35:bf:10:0b:bc:
82:b7:fb:57:e9:84:0c:04:db:0c:26:4c:dd:53:29:78:e1:36:
cb:29:5e:78:07:6c:74:6b:32:b0:98:d4:7d:7b:e0:d2:6e:8f:
f7:07:f5:62:2b:34:27:8b:fd:91:57:f9:65:b9:7c:b5:c9:63:
70:e6:8e:36:f6:f9:86:0b:4d:3b:71:44:0f:07:e5:4e:a9:47:
29:97:b7:30:78:eb:72:f3:60:b7:39:f8:05:d1:f1:a9:77:c4:
47:40:7a:ba:95:18:a2:12:a7:54:66:7d:73:5c:88:fb:15:71:
10:89:b4:0c:dc:dc:f7:eb:83:81:a9:fc:b8:9a:ef:5b:d1:aa:
7f:73:ef:60:8b:21:40:df:fa:75:74:30:6d:28:5c:82:26:3b:
5b:3b:e1:0a:a2:96:59:ab:3b:c3:e0:9b:2f:ff:00:7c:47:46:
68:d0:7b:76:55:97:ed:5b:b7:82:60:b2:dd:71:fb:3d:3f:ff:
ac:a8:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:57 2026 by rpki-client