Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4311C629D911F1926B3CCCDAE4EC9C.roa
File: 2B4311C629D911F1926B3CCCDAE4EC9C.roa (raw, json)
Hash identifier: uJKU+PMICxWcxy7y+24U3FoEgH6SouoS12KFxg+WCj4=
Subject key identifier: 2E:D0:5A:0A:3F:67:B9:41:9C:91:A2:7F:7D:2A:88:03:43:FF:08:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C134
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4311C629D911F1926B3CCCDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 12:33:34 +0000
ROA not before: Fri 27 Mar 2026 12:33:29 +0000
ROA not after: Sun 10 May 2026 12:33:29 +0000
asID: 2914
IP address blocks: 154.83.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 08:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114996 (0x1c134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 27 12:33:29 2026 GMT
Not After : May 10 12:33:29 2026 GMT
Subject: CN=69c6791e-85c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:01:37:33:9f:29:ec:3e:2d:7b:81:d4:0d:
85:ef:82:33:89:09:69:d1:bc:06:01:9c:fa:23:f9:
11:23:e0:6b:49:52:fd:17:3f:6e:a1:f8:f3:39:b1:
a1:83:01:13:7f:72:c2:f3:f4:c8:5d:8f:c6:d5:cf:
ce:ab:2e:cf:8a:cf:11:79:c0:8f:f4:e5:6c:8b:06:
68:9d:4a:63:13:b8:b7:ad:ca:52:36:e7:32:2f:d2:
f0:cc:51:14:87:09:da:76:97:f6:8b:a2:a8:c8:8e:
56:8c:7d:b6:ad:de:95:12:ac:cd:3a:8f:ed:77:27:
ca:26:b2:21:ed:11:9a:11:7a:4e:6c:42:24:84:4a:
9f:bf:d3:88:87:b4:ef:fe:cc:99:db:b0:a9:d3:9e:
e2:90:a8:65:a1:4e:97:d9:54:4b:bd:89:42:e1:15:
0c:ba:c8:67:66:5e:9e:4b:80:b2:74:a3:ef:9c:41:
bf:0d:b0:a3:17:49:32:4c:cb:27:77:a9:3e:f1:58:
10:58:f5:ae:3a:6f:5b:4a:fa:b7:af:27:da:54:b1:
fa:19:eb:19:46:48:e8:96:e5:34:00:e5:7b:61:d3:
06:0d:81:1c:35:d3:56:c7:5f:58:6e:df:2c:1d:bd:
2b:8b:94:34:fe:2f:ae:d2:ab:11:33:00:54:07:aa:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:5A:0A:3F:67:B9:41:9C:91:A2:7F:7D:2A:88:03:43:FF:08:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4311C629D911F1926B3CCCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:82:6c:68:10:59:c2:82:36:e1:2e:66:93:5b:c5:90:20:a4:
c9:98:eb:3e:be:1c:ed:43:c3:b7:0c:e1:c3:38:b6:f8:4f:cc:
c5:ea:3b:44:74:8b:c5:bc:af:bc:8d:fe:bf:61:c7:22:9d:72:
6a:d6:d9:ba:83:47:35:a4:87:9b:19:b9:5b:65:3e:d1:40:34:
67:1d:d4:58:01:5c:7e:d3:10:7a:63:d7:51:a1:dc:8d:bb:d3:
35:10:62:73:25:20:81:29:f1:ad:3f:0f:e6:71:fd:1b:69:bb:
93:cd:25:e8:bb:59:2f:c9:c3:a9:b2:f9:c0:78:65:d8:86:ac:
1e:a4:13:87:43:59:b0:4d:7d:e8:57:3e:aa:6e:51:9f:cc:bb:
0f:0c:0a:16:01:bd:a4:f3:8b:ac:0f:7e:38:d9:0b:87:9d:9e:
84:02:93:94:c6:ad:17:7d:01:f7:12:cd:be:24:6b:15:43:d0:
e4:d8:e8:25:83:e2:ce:7f:3f:a8:5b:b4:13:59:5a:ca:d2:d2:
0b:9d:05:44:23:69:fb:88:b6:ae:a0:a8:80:35:ce:d0:60:ae:
53:44:ae:00:4c:03:ce:02:44:c3:9b:08:5b:f4:00:55:30:ce:
c4:95:92:7f:2f:7f:0e:07:b8:df:28:5b:e3:bc:a5:03:f9:a6:
70:3a:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:12 2026 by rpki-client