Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BAE114055D211F1BBDAC0C7CE1D38B0.roa
File: 2BAE114055D211F1BBDAC0C7CE1D38B0.roa (raw, json)
Hash identifier: ioBwVAGc2v5nPuEZ5MXunnuAPJGKmvP8pLZTuhtX/yk=
Subject key identifier: E1:E6:BC:6E:8F:54:85:6A:90:C8:2C:07:C3:44:18:C1:8C:67:8A:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BAE114055D211F1BBDAC0C7CE1D38B0.roa
Signing time: Fri 22 May 2026 11:34:19 +0000
ROA not before: Fri 22 May 2026 11:34:15 +0000
ROA not after: Sat 27 Jun 2026 11:34:15 +0000
asID: 63023
IP address blocks: 154.94.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118274 (0x1ce02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 11:34:15 2026 GMT
Not After : Jun 27 11:34:15 2026 GMT
Subject: CN=6a103f3b-6fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:e2:3a:fe:5a:47:88:2b:d6:2e:37:c9:5f:
36:50:37:00:62:1b:a9:77:40:12:49:83:2f:ea:9a:
f0:2a:8e:c6:ac:12:4d:a1:13:22:d5:fd:58:14:79:
a3:32:2a:9b:d4:43:32:5d:bf:c0:cc:2b:33:75:21:
06:8c:c1:d9:f0:88:ae:7d:b2:06:77:6e:c9:c8:4e:
01:8b:4e:a9:a8:01:fe:7b:91:90:f7:fb:82:a4:99:
0f:9f:cc:66:e9:cf:c8:4d:68:72:d5:74:93:6c:44:
a9:95:1f:ed:f9:f1:71:b5:60:40:64:14:93:3c:f9:
a3:78:d4:94:99:a6:1b:1b:db:b8:a9:74:4e:ea:22:
10:37:5f:e1:8f:70:fc:a1:d7:bf:72:8e:bd:85:ff:
84:75:6c:81:71:d6:b3:32:91:8c:45:88:a4:e0:dd:
40:2f:a1:2b:54:5f:c3:52:5e:5d:ef:ec:fa:d1:26:
86:eb:a3:17:e8:69:80:18:ba:55:77:87:4b:be:94:
df:99:3b:fd:92:20:5e:df:a4:31:eb:c2:02:28:35:
0a:10:f1:91:6f:56:09:76:fa:a3:13:b9:cb:96:37:
98:dc:83:ec:20:02:89:60:ac:2f:28:dc:c8:19:8f:
e5:51:28:ba:98:77:20:75:fc:e2:d6:07:dc:10:c7:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:BC:6E:8F:54:85:6A:90:C8:2C:07:C3:44:18:C1:8C:67:8A:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BAE114055D211F1BBDAC0C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ce:40:27:82:b1:de:7b:4c:69:12:3a:6f:8d:9f:b5:37:62:
73:1e:b9:57:7f:d9:d6:6f:d1:62:d5:00:d3:1f:88:9e:36:74:
41:dc:71:02:f9:a7:12:33:66:32:2c:30:75:13:ec:4a:67:44:
ec:44:ad:15:84:20:4d:a7:d5:0c:5b:ea:3d:fe:a1:44:cd:10:
15:fa:87:fe:64:4a:bb:78:7d:25:e5:18:f4:01:5f:1a:d6:5c:
9e:80:66:47:f9:81:00:f9:27:c3:63:9e:3e:da:21:18:66:ed:
e2:6d:01:32:1b:a6:38:bd:2a:29:8d:e1:cc:74:6e:f0:07:2c:
16:1f:24:f1:f0:fa:93:1f:10:8d:8a:bc:f1:49:c7:46:6e:f2:
8f:08:8c:94:84:ec:2b:36:59:c9:47:a7:47:83:51:56:ce:7f:
fb:a8:6f:51:8e:b2:94:f1:e7:ae:9b:6d:62:25:b3:1e:cb:3d:
8e:33:c8:5e:cb:84:b0:84:a4:90:54:67:f0:7b:f2:ba:5a:81:
c4:66:62:37:be:ec:3a:1b:79:7f:76:d2:dd:f0:b9:db:a6:ca:
82:b9:a6:6b:e3:8a:de:70:42:3a:09:8d:a6:77:86:f3:5d:80:
1c:8b:1b:1b:30:18:33:15:b7:4e:8f:7b:03:5b:67:52:42:03:
5e:96:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:36 2026 by rpki-client