Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B78D93C6A4811F196166CADCE1D38B0.roa
File: 2B78D93C6A4811F196166CADCE1D38B0.roa (raw, json)
Hash identifier: FgyPrVoHCMqTzog/0sRbKktolSpGaKUh4j6GQ453IPY=
Subject key identifier: C2:1D:57:76:8E:45:A7:FE:FC:32:64:64:BB:3C:1B:86:61:46:FF:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B78D93C6A4811F196166CADCE1D38B0.roa
Signing time: Wed 17 Jun 2026 12:29:23 +0000
ROA not before: Wed 17 Jun 2026 12:29:18 +0000
ROA not after: Fri 24 Jul 2026 12:29:18 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119744 (0x1d3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 12:29:18 2026 GMT
Not After : Jul 24 12:29:18 2026 GMT
Subject: CN=6a329323-a9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:f3:5d:3e:b6:bd:1d:59:6b:d2:f9:62:a7:
84:eb:09:4f:75:ed:c4:66:a5:20:e3:7b:9f:57:5c:
68:c9:e7:35:2c:68:6b:ab:fa:d2:1f:04:0d:ba:20:
62:81:09:30:33:95:01:8e:77:34:69:4b:ef:bf:4b:
3c:e8:2e:4d:3e:3a:7f:c0:69:5e:08:44:d7:8a:00:
62:c4:1c:3a:2e:0e:dd:f1:24:14:56:1a:36:aa:8a:
5b:0c:64:2a:2f:2f:1e:4d:f9:22:65:b9:cf:e9:05:
eb:23:a4:91:6f:82:cc:a0:26:10:0d:cc:eb:bf:e6:
de:d7:21:ca:fb:10:4b:77:dd:a4:e3:82:ba:4d:33:
d5:2e:d8:b3:01:f0:bf:c5:31:32:93:02:0c:48:8e:
b1:6d:85:4e:17:69:32:52:dc:17:2c:70:fb:c8:53:
75:fe:c4:0a:50:ce:90:1d:cf:3a:c7:15:fe:9d:1f:
c1:d2:f5:22:4d:09:3e:9a:c9:1e:e1:80:90:94:ec:
a3:8e:12:d0:b1:0d:13:35:0c:f6:11:a5:e2:ae:07:
44:75:dd:1a:b8:1a:74:10:fc:83:e2:4f:54:b0:2f:
b5:e1:7b:d6:ac:f0:7e:24:80:06:c2:f3:b2:cf:27:
54:6a:67:9c:12:23:08:2e:63:66:b9:12:15:5b:0c:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:57:76:8E:45:A7:FE:FC:32:64:64:BB:3C:1B:86:61:46:FF:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B78D93C6A4811F196166CADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
d5:97:4e:a5:4f:2c:54:b2:c2:cf:48:a9:b2:c6:e1:4f:c2:11:
b1:bf:97:48:8c:a9:f7:e1:ba:fa:6f:a5:ab:fe:63:19:d0:e2:
53:4c:8c:3e:2f:61:32:0c:7a:53:de:e8:c8:cb:af:b4:6a:b8:
70:65:26:9e:a8:05:77:3d:e5:72:7d:82:ba:96:43:aa:fc:8b:
dd:7b:6d:2e:5d:ac:89:2c:f4:6e:7d:eb:01:c8:3a:10:76:53:
5a:ca:64:eb:6e:9c:16:3d:3e:32:20:68:60:db:96:ff:a6:bc:
62:1f:c5:d9:a1:b3:7e:74:ea:6f:3a:a7:f5:08:3f:f5:fb:fd:
29:1d:03:fd:15:96:70:ad:ab:ff:58:b0:2f:58:ad:45:ff:90:
52:58:35:ae:d3:17:01:1c:b8:90:77:bb:e9:5a:60:e4:10:27:
ce:66:00:0c:e7:5b:6d:1c:af:e2:78:98:d5:a1:92:15:cb:06:
46:16:1e:84:56:d5:8f:90:ef:a5:4a:fb:a4:19:ea:70:5d:c8:
85:41:dc:6a:05:ec:56:ec:f7:84:eb:3d:36:fc:ef:5a:f1:44:
f2:d5:ae:d6:04:ff:4f:6a:5a:ce:4e:18:66:52:35:03:bb:c9:
1b:23:ea:31:c6:18:cc:51:80:11:3e:67:1b:96:34:88:12:24:
ef:4e:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:01:43 2026 by rpki-client