Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA30ED07D7211F198C3721DCF1D38B0.roa
File: 2CA30ED07D7211F198C3721DCF1D38B0.roa (raw, json)
Hash identifier: bc5ZiMYdqMAddn3a/mke0XP1QOAhLQSToOVg15eOi8Q=
Subject key identifier: C7:26:6D:00:B9:52:78:3C:91:4B:C0:09:E5:58:98:2E:13:19:2E:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D85C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA30ED07D7211F198C3721DCF1D38B0.roa
Signing time: Sat 11 Jul 2026 21:47:56 +0000
ROA not before: Sat 11 Jul 2026 21:47:51 +0000
ROA not after: Tue 10 Jul 2029 21:47:51 +0000
asID: 17561
IP address blocks: 154.198.218.0/24 maxlen: 24
154.198.219.0/24 maxlen: 24
154.198.220.0/24 maxlen: 24
154.198.221.0/24 maxlen: 24
154.198.222.0/24 maxlen: 24
154.198.223.0/24 maxlen: 24
154.198.224.0/24 maxlen: 24
154.198.225.0/24 maxlen: 24
154.198.226.0/24 maxlen: 24
154.198.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120924 (0x1d85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 21:47:51 2026 GMT
Not After : Jul 10 21:47:51 2029 GMT
Subject: CN=6a52ba0c-b78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:3f:91:f3:51:89:5c:11:5a:73:72:2a:ce:
d1:74:ef:98:27:c4:f7:35:0e:35:da:5f:36:4a:30:
9b:b6:1b:f4:3a:a3:d1:5d:90:80:16:bf:9b:82:06:
22:b3:b8:57:ea:91:92:06:aa:ff:8b:15:36:96:c4:
c1:64:b5:a2:23:ee:ae:fd:2e:1a:10:64:71:7f:f7:
05:ef:e9:45:dd:cc:5b:11:94:c5:6c:19:87:fe:28:
cd:9c:5b:8e:41:e6:a5:5d:04:b4:82:fa:fb:62:cc:
cd:ad:2d:27:52:89:18:77:af:12:b9:f3:04:81:3f:
93:a4:ad:e3:05:b3:95:e7:cb:43:3e:19:45:8e:6b:
d1:27:53:ad:bf:43:93:cf:02:61:1e:e3:2d:5a:e6:
8e:72:d6:45:a9:f8:20:df:18:c0:83:8a:ce:78:b4:
43:97:cf:4f:b6:59:fd:84:b9:e4:de:a9:41:5a:65:
32:18:08:b1:7b:25:2d:ee:4c:4e:31:56:63:cc:5a:
a7:2e:5d:13:5f:be:7b:16:23:91:56:3b:b1:e8:df:
db:10:ca:51:ac:4a:e4:e8:f3:da:22:0e:d2:62:0d:
d9:08:9e:12:a9:13:cd:f5:c9:43:5b:8d:c0:e3:12:
65:4b:be:c4:34:eb:a1:28:eb:38:cb:ed:77:65:3e:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:26:6D:00:B9:52:78:3C:91:4B:C0:09:E5:58:98:2E:13:19:2E:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA30ED07D7211F198C3721DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.218.0-154.198.227.255
Signature Algorithm: sha256WithRSAEncryption
34:34:29:ce:19:4d:67:fc:2f:03:50:ee:f9:cc:5c:e6:5c:ed:
b2:d5:df:2c:26:76:d1:8e:fa:b1:59:b5:7e:a3:da:e8:e3:26:
2c:97:e9:e2:62:87:cc:fe:3f:d6:31:6a:d6:29:af:f2:dc:13:
a1:f6:12:bf:e0:cd:9f:ce:59:f2:b4:2e:24:51:5d:9d:41:ac:
e2:9b:e3:01:4f:40:0f:13:c1:4d:54:af:71:11:08:3f:31:09:
64:71:2f:e2:d8:8b:27:22:7a:17:45:40:98:cb:07:00:e0:ef:
a7:36:e2:93:db:12:98:2c:42:0f:a4:25:21:4c:df:55:c4:8c:
fa:97:a9:4e:0e:c6:0e:28:b6:70:d7:ca:cd:c8:b9:37:2e:1f:
00:ef:a6:4e:57:ef:98:76:2d:21:de:97:57:29:9d:50:22:b0:
f9:a7:f2:c5:52:cd:7f:42:04:63:6d:7e:1a:58:23:ed:e8:ca:
21:50:a4:dc:45:61:db:23:e7:b8:b0:05:23:2f:6e:58:bf:d9:
1c:59:a4:15:a9:0c:e6:a8:45:8d:f2:48:35:53:18:ca:19:3b:
cd:06:bf:1c:9b:da:fd:59:af:b3:a3:de:52:15:33:7e:14:7a:
d5:5b:59:69:17:60:6f:f1:67:f3:76:14:b9:29:c5:b8:f0:f8:
69:55:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client