Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6E8842577911F1ACDA2DD6CE1D38B0.roa
File: 2B6E8842577911F1ACDA2DD6CE1D38B0.roa (raw, json)
Hash identifier: DRONFTb+Kd56fpAsyxD72omDZu/1FizVx2jRius/jFg=
Subject key identifier: 52:FA:0D:C9:82:03:C6:20:8E:EF:56:A8:5F:CC:6C:D4:AC:69:E9:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CED9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6E8842577911F1ACDA2DD6CE1D38B0.roa
Signing time: Sun 24 May 2026 14:02:16 +0000
ROA not before: Sun 24 May 2026 14:02:11 +0000
ROA not after: Fri 10 Jul 2026 14:02:11 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118489 (0x1ced9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 14:02:11 2026 GMT
Not After : Jul 10 14:02:11 2026 GMT
Subject: CN=6a1304e8-8dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:b4:4e:e5:f3:33:2e:7c:6c:61:ab:5e:bc:
24:ba:8b:0d:55:fd:6b:8d:52:94:9e:98:20:32:29:
12:d6:78:32:d4:72:2a:14:c5:36:ef:81:e3:db:41:
aa:b0:1a:db:b3:67:af:bd:e4:f6:ad:f0:67:62:15:
5b:e5:7e:10:5f:4d:84:86:92:24:b3:b3:28:b1:88:
97:4f:5c:b6:1a:b3:e4:64:1a:ea:49:cd:de:a1:9a:
40:3f:11:d7:71:b0:a9:c1:21:94:cd:91:c8:9a:9c:
ef:df:9e:ab:82:af:4c:8c:02:e0:f2:e1:77:b0:80:
07:0f:e1:8a:4b:4c:9b:49:e0:1b:08:ea:1f:4a:8a:
0a:a5:18:ee:bd:b8:ad:09:7a:5f:8f:84:cb:b6:1c:
8a:ed:33:c7:21:1b:56:b9:af:b4:1d:13:25:5d:57:
67:c7:25:18:8c:9e:87:62:69:ce:a9:a2:37:0b:61:
0b:87:95:39:c5:25:1e:83:0c:3b:44:5f:00:0c:2f:
0e:7e:ae:9d:41:ac:77:be:90:50:92:74:8d:fb:86:
ec:11:39:5d:f4:00:8a:fc:d2:85:11:e7:0c:75:d9:
34:11:aa:8a:05:bb:5f:d3:9a:82:12:7c:10:68:e9:
19:d8:6e:a5:54:8e:28:1e:73:4f:77:d6:04:a6:dc:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:0D:C9:82:03:C6:20:8E:EF:56:A8:5F:CC:6C:D4:AC:69:E9:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6E8842577911F1ACDA2DD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.197.60.0/23
154.197.86.0/23
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
d6:9f:0d:cb:eb:9a:cb:1e:de:cf:5e:a9:1a:77:c4:bb:06:bc:
5e:d8:52:a4:38:fd:69:50:da:ea:5e:2a:6b:2a:b6:c5:00:5b:
69:54:5f:15:ec:e5:03:cf:0b:ae:e5:27:49:f3:58:7e:b4:51:
65:c9:a8:84:15:72:1c:1d:56:b3:89:c9:cc:e7:f6:40:cd:2b:
92:80:f7:4f:8e:ce:79:63:f8:9f:d7:85:90:11:93:c8:7f:36:
53:37:6c:c1:17:7a:c2:3a:eb:62:17:c9:8e:ef:9a:83:e6:41:
c5:5e:7e:d0:24:7f:14:d0:82:b1:bb:8a:96:ef:5a:7d:d0:5b:
22:83:17:72:08:26:4d:5c:b1:98:73:dd:67:a2:a8:f1:e9:ff:
06:3e:21:a8:12:c1:52:88:32:b8:05:d1:46:fe:aa:01:00:04:
7d:a6:49:fc:77:ba:51:53:ff:2a:51:46:19:83:25:38:b2:ca:
38:43:f6:90:bf:db:35:e2:05:76:e8:9a:f7:d2:74:80:8c:c5:
ed:1e:85:b5:28:ec:ae:e1:84:ae:ed:ef:9c:08:b7:e7:81:5b:
81:18:dc:1a:09:eb:d1:df:a2:59:96:ef:b6:46:78:9d:e8:97:
76:ac:df:bc:75:87:3f:e5:03:85:d9:78:d6:5c:05:59:08:c5:
5a:e1:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:58 2026 by rpki-client