Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C7B6786553B11F18ADA0FA9CE1D38B0.roa
File: 2C7B6786553B11F18ADA0FA9CE1D38B0.roa (raw, json)
Hash identifier: fc+elfguzBXEAPTmixmzQXeHk9jplC/X5FZWJMebwIc=
Subject key identifier: 0A:25:7C:77:76:A7:FE:D7:DB:ED:03:33:E1:83:BC:48:61:BC:1A:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C7B6786553B11F18ADA0FA9CE1D38B0.roa
Signing time: Thu 21 May 2026 17:33:27 +0000
ROA not before: Thu 21 May 2026 17:33:22 +0000
ROA not after: Wed 01 Jul 2026 17:33:22 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118175 (0x1cd9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 17:33:22 2026 GMT
Not After : Jul 1 17:33:22 2026 GMT
Subject: CN=6a0f41e6-ca50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:ad:93:15:c7:87:4a:37:52:0e:ca:08:27:
25:df:fe:aa:b2:64:18:cb:39:d6:fc:92:be:08:74:
87:c7:3f:21:58:45:e6:27:6e:6d:bc:5e:51:50:3a:
fe:50:0b:11:e1:f3:ad:30:5d:54:13:44:ad:2c:2b:
bd:20:90:47:a5:4f:b2:72:e0:9e:56:56:9d:bf:b4:
56:d5:56:21:1c:f5:1d:59:a5:85:d9:c9:f9:db:86:
4d:20:58:09:94:92:a1:63:b7:5f:81:cb:8d:8a:ec:
96:27:03:00:f5:f6:6a:d1:20:90:f7:e7:d6:1f:74:
cd:8a:e8:5e:f3:7e:ba:e5:d3:bd:7c:d2:01:68:40:
fc:60:99:a8:a4:81:18:a4:b4:25:4d:ba:64:2d:b1:
6f:fa:76:3f:4b:6e:f5:c4:23:1a:26:da:7b:ac:f8:
83:16:0d:46:2a:96:dc:87:9f:cf:76:99:ec:cd:91:
cf:71:f1:2d:70:8e:ae:85:e5:17:54:54:49:92:ec:
43:b5:b1:8c:df:f4:5f:d3:09:31:4b:3f:81:94:bb:
2e:79:4f:e1:d3:93:22:95:6a:65:a6:50:50:cb:3f:
d1:bc:17:80:d7:78:f5:47:9b:ec:39:bc:10:91:77:
58:5a:35:51:40:7c:d4:26:9e:c6:84:19:62:c8:ec:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:7C:77:76:A7:FE:D7:DB:ED:03:33:E1:83:BC:48:61:BC:1A:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C7B6786553B11F18ADA0FA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
Signature Algorithm: sha256WithRSAEncryption
7c:cc:82:00:3f:b4:22:5e:e7:e7:52:b2:f4:f1:5d:dd:6f:b7:
5b:32:9d:b5:3c:9e:3d:81:55:df:bf:5b:e7:f3:98:bc:5d:73:
23:0f:d6:31:6d:76:1f:a8:10:e8:48:78:87:80:e3:13:ca:0b:
ef:aa:52:4d:db:a2:5b:1c:bd:86:2a:98:5e:2a:ed:4d:e5:42:
db:ec:5d:0d:4f:09:03:53:81:28:1e:2e:57:1e:f7:b8:f3:a2:
fb:bb:89:fe:7a:84:5c:fe:09:af:81:92:61:cf:1b:b3:1e:a7:
54:b6:2b:85:0c:7b:de:88:4f:bc:35:d4:4c:1c:f8:df:5c:6c:
a2:ec:6a:5e:a1:4d:d4:32:69:b2:cd:c6:d4:81:04:09:83:cc:
f0:47:22:98:3c:69:46:e5:ee:47:2c:1c:f4:3a:39:a5:c1:45:
21:73:6d:4e:aa:7b:c6:9a:74:94:12:c7:cb:8c:25:d3:e2:95:
5d:ff:b0:43:fb:24:2c:22:35:d4:19:b8:74:0c:5f:1f:9a:12:
12:f8:02:4c:cc:18:82:de:be:2d:81:0e:c0:d4:74:28:0d:e2:
12:af:b6:5d:3a:17:12:ce:d3:c9:0b:d1:45:a0:bb:d2:33:ec:
8f:f3:61:b8:33:c3:1c:36:94:ce:22:31:81:08:e5:f4:b3:6e:
56:39:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:25:59 2026 by rpki-client