Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB23E286C9711F185B2EDABCE1D38B0.roa
File: 2CB23E286C9711F185B2EDABCE1D38B0.roa (raw, json)
Hash identifier: v4NaH1NePoFEupOfJIPlCjgpy09myTYuaVlyBRmY/IE=
Subject key identifier: 5F:5E:00:13:78:15:9E:A4:7C:B1:96:0D:3E:1E:3C:A9:6A:6C:98:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D433
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB23E286C9711F185B2EDABCE1D38B0.roa
Signing time: Sat 20 Jun 2026 10:59:57 +0000
ROA not before: Sat 20 Jun 2026 10:59:53 +0000
ROA not after: Mon 27 Jul 2026 10:59:53 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119859 (0x1d433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 10:59:53 2026 GMT
Not After : Jul 27 10:59:53 2026 GMT
Subject: CN=6a3672ad-a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:ab:7d:3a:fe:f2:ca:b3:e3:39:10:16:30:
ef:ec:40:60:e5:60:f6:6f:14:74:db:e3:50:1f:82:
25:e1:56:ef:5c:cf:d0:df:32:76:68:5c:6c:52:50:
7f:70:d0:55:1e:2e:2f:40:0f:01:48:97:4f:15:e5:
fd:0e:ef:fa:81:14:28:65:88:fb:97:6f:2a:4b:c1:
5d:3f:e0:f7:96:e5:9b:f1:d4:05:59:3b:5f:dd:4a:
86:62:83:6d:92:77:48:94:4b:b3:df:5b:51:f9:cc:
49:00:a3:72:4e:09:4a:e0:92:17:26:c9:8d:3d:c9:
f1:b0:d3:5f:38:75:3c:38:df:35:13:3b:db:3a:e4:
2e:cb:71:7b:8f:12:d7:5f:7c:31:51:ba:f8:cc:9b:
ac:35:bf:0f:c5:4c:4f:e4:c1:e6:80:9a:8a:73:41:
a4:19:57:58:9b:9d:fc:6c:6c:ec:2b:8b:60:bf:20:
6d:33:c0:a5:dd:1c:d6:da:a0:db:ea:40:5c:9d:ee:
b1:ce:6d:47:23:bc:bd:17:1f:c3:97:73:6e:92:eb:
9f:02:d5:10:e8:99:e7:4c:bd:90:24:bf:bf:8e:9d:
25:16:2e:17:bc:e9:e0:1e:d8:3f:75:42:e2:e8:23:
ee:61:8e:e5:6f:7a:82:94:8b:c3:9a:ba:84:aa:39:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:00:13:78:15:9E:A4:7C:B1:96:0D:3E:1E:3C:A9:6A:6C:98:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB23E286C9711F185B2EDABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
27:a2:76:4b:63:83:5b:5d:ca:39:f3:91:75:7c:9b:d5:ab:a1:
3e:b1:ed:81:63:45:66:fd:92:16:1b:52:cf:3f:5c:c8:2b:fe:
47:db:bc:05:7c:32:35:c4:d0:84:07:5e:e2:5a:6f:db:55:fb:
44:3a:b5:d3:81:e6:b8:e7:ac:c7:19:c6:2f:d6:3f:e9:8e:c4:
d8:3b:50:83:40:1f:bd:89:f6:f7:05:b0:95:9a:78:7b:16:5b:
c6:bc:2a:ae:b3:46:1b:c6:a8:26:01:46:15:47:43:8f:61:ba:
89:73:39:98:bb:b5:5d:34:44:f8:35:38:85:18:20:4b:cc:6d:
49:68:45:bf:10:58:23:d9:34:5c:30:06:b1:5f:61:8f:4a:e7:
0d:3d:fe:e1:44:77:b2:e7:85:c5:b2:0c:7e:fa:9e:ae:70:64:
24:46:b7:4b:01:cc:6e:39:75:88:8c:d2:ff:ab:89:cf:e6:d1:
86:70:01:5f:34:9b:e5:6e:7a:b4:65:c1:e1:57:90:78:5a:48:
0b:42:fb:f4:34:13:67:e2:16:9a:45:8f:16:91:0b:ee:00:d8:
ce:51:e5:43:9c:97:1e:1b:06:14:2a:ed:e3:c5:92:f5:e5:cc:
4d:11:2c:eb:80:a9:71:4a:e6:dc:1c:5c:ac:17:a2:b2:f0:7a:
00:53:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:35 2026 by rpki-client