Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8BC18C401311F1A24BE9E5CE1D38B0.roa
File: 2B8BC18C401311F1A24BE9E5CE1D38B0.roa (raw, json)
Hash identifier: v4Rtc+cmrMewsNpxB4R4y3VR682jks+XrE2lVGkw6Cw=
Subject key identifier: 78:6E:52:3A:E2:C0:DA:15:23:6A:2B:47:23:5E:68:A2:67:34:1D:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C756
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8BC18C401311F1A24BE9E5CE1D38B0.roa
Signing time: Fri 24 Apr 2026 19:24:11 +0000
ROA not before: Fri 24 Apr 2026 19:24:05 +0000
ROA not after: Sun 31 May 2026 19:24:05 +0000
asID: 62240
IP address blocks: 154.195.28.0/24 maxlen: 24
154.195.29.0/24 maxlen: 24
154.195.30.0/24 maxlen: 24
154.195.31.0/24 maxlen: 24
154.195.96.0/24 maxlen: 24
154.195.188.0/24 maxlen: 24
154.195.189.0/24 maxlen: 24
154.195.190.0/24 maxlen: 24
154.195.191.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116566 (0x1c756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 19:24:05 2026 GMT
Not After : May 31 19:24:05 2026 GMT
Subject: CN=69ebc35b-dfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:9f:d9:e8:cc:39:27:b7:89:80:89:eb:7d:
d6:5f:07:bd:de:80:8b:b4:a2:7d:ab:70:1c:38:3d:
66:cd:6c:34:b3:99:3b:be:b4:77:98:ca:5c:d8:f5:
b1:01:e2:96:b8:55:c7:f1:35:d7:92:a9:ab:6a:4b:
10:b2:80:8e:8b:b3:18:0c:94:74:01:57:13:84:f9:
07:f3:33:c2:58:ac:bc:7f:a1:35:28:f8:dd:07:50:
46:de:8d:bb:da:31:96:d1:67:36:b6:ce:c4:47:dc:
c6:c9:c9:fe:d3:8e:eb:9d:22:c2:4c:ae:87:cb:23:
4d:af:4a:c5:05:26:39:1e:61:1b:c0:38:c4:cc:b4:
24:58:d3:4a:d6:e5:45:a0:6b:27:5a:4d:fc:be:5d:
5d:c9:86:c4:d2:d6:68:8c:38:b7:7c:31:59:66:45:
dd:59:cd:9b:3f:19:cc:57:67:fb:53:68:1c:db:d6:
e9:19:a4:df:46:cf:db:8b:4b:39:12:c6:d3:82:d3:
39:f3:f8:5b:82:04:70:bc:da:4e:32:99:06:d3:b2:
25:42:85:a3:44:f4:9f:92:38:47:75:e4:32:42:7d:
bc:91:83:63:88:50:5b:cb:7c:c2:42:6a:96:e9:35:
5a:8d:32:18:dc:d3:41:d3:ad:d1:52:82:9e:ec:e3:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:52:3A:E2:C0:DA:15:23:6A:2B:47:23:5E:68:A2:67:34:1D:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8BC18C401311F1A24BE9E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.28.0/22
154.195.96.0/24
154.195.188.0/22
154.196.33.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2c:70:9d:d5:cb:87:7e:56:79:79:48:19:bf:03:24:fd:c8:
16:38:5e:c6:f0:ad:57:c2:f3:16:b5:f9:6d:ec:61:f6:98:be:
1c:1e:c0:6b:1f:82:74:c3:5b:60:1d:40:8f:e9:b0:ec:ac:bf:
60:74:ea:c3:c7:b9:ac:bc:33:84:67:46:79:52:23:82:df:28:
de:78:ad:4c:f9:ea:49:4e:28:ad:2c:cd:7f:39:a6:51:6d:64:
59:c7:b8:0f:1e:1d:bc:cf:af:11:02:55:9f:53:9c:d4:ae:58:
43:eb:30:80:46:71:6a:5e:42:f2:5e:b9:d4:35:49:f3:35:18:
c2:76:80:a2:0c:a4:e5:90:d2:b7:3f:bf:88:86:95:98:1f:01:
24:d4:e0:63:0a:d4:f0:9b:51:f2:4a:25:55:f8:72:04:e8:60:
a6:da:8a:bd:13:10:9f:75:60:78:3b:ea:8d:48:c3:7a:83:9d:
b0:14:60:79:87:99:a1:f7:82:89:e9:1b:0d:f5:c1:f3:7d:38:
c9:98:5c:95:0b:63:6c:78:21:44:5d:89:1d:18:71:2e:af:51:
ff:ec:ac:8a:08:b2:5c:2f:79:4b:2b:6b:4c:dc:a5:f8:a4:27:
a0:78:41:01:9e:a8:31:55:6e:de:e5:75:8e:0c:80:8b:e2:02:
52:53:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:50 2026 by rpki-client