Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DB605EC59B011F1953B3BD5CE1D38B0.roa
File: 2DB605EC59B011F1953B3BD5CE1D38B0.roa (raw, json)
Hash identifier: ie9cxTImQlC5oW+/mP2HHv2oIgofn1pjp4zW+wdF76A=
Subject key identifier: FA:CC:A6:19:1F:89:0B:21:BF:8C:AE:2B:85:60:49:BF:E3:FA:4B:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DB605EC59B011F1953B3BD5CE1D38B0.roa
Signing time: Wed 27 May 2026 09:41:04 +0000
ROA not before: Wed 27 May 2026 09:40:59 +0000
ROA not after: Fri 04 Sep 2026 09:40:59 +0000
asID: 18229
IP address blocks: 154.210.175.0/24 maxlen: 24
154.210.176.0/24 maxlen: 24
154.210.177.0/24 maxlen: 24
154.210.178.0/24 maxlen: 24
154.210.179.0/24 maxlen: 24
154.210.180.0/24 maxlen: 24
154.210.181.0/24 maxlen: 24
154.210.182.0/24 maxlen: 24
154.210.183.0/24 maxlen: 24
154.210.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118781 (0x1cffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 09:40:59 2026 GMT
Not After : Sep 4 09:40:59 2026 GMT
Subject: CN=6a16bc30-e16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:60:bd:2f:53:cb:7f:5d:e5:57:60:7d:2f:
52:32:54:1f:95:d9:d8:ec:b6:9f:d9:98:2a:be:e3:
c9:3d:b4:11:60:02:b8:36:13:e2:9f:70:1c:c0:7f:
45:07:23:af:eb:5b:1d:72:90:a2:40:53:14:9a:10:
fd:2c:e6:2a:c1:43:2d:9b:4b:fd:39:e2:7a:3c:b8:
7e:4d:9c:d5:de:9a:04:27:84:9a:2e:ae:88:50:ab:
b3:df:eb:60:80:d8:68:a1:87:27:d2:bd:2e:bb:de:
88:cc:ae:d9:97:28:18:fb:21:f5:7e:7b:bd:b6:dd:
94:59:2d:00:db:02:a0:1b:d3:ea:95:b6:18:ee:72:
a7:04:cd:60:8e:32:8a:12:dc:a0:5d:98:b1:6a:79:
bf:4c:a3:99:74:7a:8e:97:ee:4b:d4:1d:57:13:d4:
80:d7:88:c7:5b:48:1b:93:69:b0:06:f0:28:21:58:
3b:05:38:fa:ef:d9:be:8b:d4:38:52:ff:19:46:f2:
23:93:e4:f1:b6:27:11:19:64:bc:f0:58:35:62:fa:
ea:77:40:2f:f1:94:fb:ab:27:07:f1:c6:54:e9:b6:
b5:1c:51:64:83:ac:7a:67:fd:d4:26:9f:49:d2:a2:
84:ac:79:92:08:38:c9:75:72:d7:eb:9d:d0:0b:1a:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:A6:19:1F:89:0B:21:BF:8C:AE:2B:85:60:49:BF:E3:FA:4B:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DB605EC59B011F1953B3BD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.175.0-154.210.184.255
Signature Algorithm: sha256WithRSAEncryption
06:bf:82:2a:a7:c5:96:83:66:77:f4:f7:67:9e:3f:35:d6:74:
0f:f0:09:51:2e:4e:ab:b0:6a:ea:16:97:82:6b:ec:0c:b1:5c:
71:9a:1d:bf:68:c5:01:d5:b2:36:70:34:a3:73:20:ec:c4:ae:
1a:81:36:62:19:49:48:73:fa:a9:bc:d2:e2:7c:3a:e8:f0:fa:
1f:5f:e8:5c:20:53:49:83:bb:b4:40:35:84:d1:46:d5:76:01:
4e:55:11:c6:df:62:1a:ef:54:5b:ce:c9:be:d3:69:39:43:06:
bc:67:ff:15:7c:ff:80:0b:76:73:36:10:d6:2d:8c:a2:23:ea:
1a:54:77:d8:59:55:93:0a:74:27:f0:86:3e:c2:2c:e0:58:ad:
da:9c:59:6b:04:d5:99:c2:f2:25:2a:f7:c2:07:a1:9c:47:44:
ab:e0:33:cc:4d:08:ff:76:a9:6f:27:df:6b:35:19:29:70:c9:
36:6c:44:96:4c:92:37:54:1f:e1:c8:05:d6:b5:bf:e3:4b:8e:
0e:42:ad:47:81:2c:28:17:a4:1c:cf:ea:dc:c0:69:47:32:3c:
80:d4:40:05:1f:38:6a:21:33:8f:94:f2:b2:bb:c5:c9:8a:05:
6d:ad:6c:20:db:0f:fa:3b:6d:e8:de:aa:57:b1:ff:a0:3b:a6:
e4:b3:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:48 2026 by rpki-client