Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8E017269B211F1B6312412CF1D38B0.roa
File: 2B8E017269B211F1B6312412CF1D38B0.roa (raw, json)
Hash identifier: P+Gvo+e3sqer5ButDy0XJ84xdvxf6A6JnR9/nLwoy1Q=
Subject key identifier: 0B:66:4A:76:89:22:45:B9:E9:9E:DB:D0:A4:8A:6D:2C:95:4C:A5:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D383
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8E017269B211F1B6312412CF1D38B0.roa
Signing time: Tue 16 Jun 2026 18:35:38 +0000
ROA not before: Tue 16 Jun 2026 18:35:34 +0000
ROA not after: Thu 24 Dec 2026 18:35:34 +0000
asID: 6453
IP address blocks: 154.81.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119683 (0x1d383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 18:35:34 2026 GMT
Not After : Dec 24 18:35:34 2026 GMT
Subject: CN=6a31977a-7ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:e4:b2:bc:e7:04:8b:a6:5d:b5:0e:28:0b:
e5:9f:2f:99:98:20:ce:92:df:54:d4:05:a7:b8:fe:
68:08:0b:5c:38:db:83:92:53:a3:2e:00:d6:6d:d0:
a9:28:18:62:95:17:f0:e5:f7:c4:21:bf:c5:f9:94:
e8:c2:66:d4:c4:31:0f:36:6f:d1:52:25:45:b1:ba:
15:33:c1:31:94:36:c2:44:76:39:a1:01:0a:f7:a5:
79:39:32:55:13:70:57:40:a5:5a:6d:ce:ae:cd:57:
65:46:75:49:87:0f:20:f0:f9:3c:05:b2:2a:0c:6b:
bd:25:02:fd:7e:35:71:f3:ff:fd:de:4e:f8:bf:d9:
24:86:10:3a:ac:da:ab:e2:11:0a:6f:e3:f1:a7:40:
19:14:bf:2b:fd:5e:34:99:d4:90:16:60:24:cf:4d:
b1:26:2c:58:a6:ba:de:fe:64:31:73:fd:e2:24:bf:
88:1b:e7:05:d0:1d:86:6b:48:b9:42:8a:e2:7c:0c:
7a:b8:22:af:5d:4e:e5:c4:b1:e8:fe:dd:1a:cf:8f:
23:4d:2d:15:d8:08:5e:c7:dd:12:27:e8:f9:2e:cf:
74:85:77:32:1f:79:90:1d:69:46:0a:c7:f8:b0:36:
38:54:cf:e3:e4:4a:ae:4d:57:11:cf:02:28:bf:8b:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:4A:76:89:22:45:B9:E9:9E:DB:D0:A4:8A:6D:2C:95:4C:A5:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8E017269B211F1B6312412CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:82:c6:3f:0e:93:df:61:ab:f6:2c:0b:41:e4:95:07:e4:a9:
82:f5:98:43:57:c5:54:c0:ea:8e:0d:2e:66:44:38:99:14:ac:
64:37:50:63:58:61:d2:e1:2c:90:4b:27:61:8c:32:b0:f9:23:
a6:1a:5f:b2:5b:45:1f:ea:0e:75:1d:1f:42:24:e8:93:63:e5:
70:20:92:87:9d:65:64:57:7d:89:f4:1f:da:3e:09:d5:49:49:
de:33:b5:fd:44:80:dc:58:1b:48:df:a2:d6:a5:1b:07:59:9e:
67:3a:a8:0f:b0:f7:d2:ee:fe:50:90:89:5c:cc:24:09:3b:73:
1f:24:f7:b6:07:8f:98:12:de:e4:6b:13:45:73:91:67:15:eb:
68:e2:12:ee:62:e5:89:66:7a:74:00:8c:a7:8f:14:d2:bb:4b:
d0:a9:7f:62:f9:88:9a:14:ef:62:53:d4:0a:cb:53:d1:15:2e:
cc:03:78:50:f5:b2:a6:d8:7c:71:2c:11:a4:52:1e:50:70:78:
4f:cd:b1:65:d7:03:bf:a9:55:77:bb:67:7c:b6:71:c0:ed:b6:
ff:50:9b:eb:1a:61:c3:0e:34:15:65:72:02:69:3f:a4:9a:30:
54:3a:bb:77:15:6c:96:fd:d3:2c:5a:81:7c:60:48:cb:e1:cc:
ce:55:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:59 2026 by rpki-client