Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DECA64A5E9411F1AE8DDA05CF1D38B0.roa
File: 2DECA64A5E9411F1AE8DDA05CF1D38B0.roa (raw, json)
Hash identifier: /di6Zng/IwYdXgHJfCxQbSQP9LVd58M9n3+NP95tRIo=
Subject key identifier: 3F:B8:5B:29:B4:86:48:E5:B0:30:4D:0D:AD:6E:ED:64:81:4B:E5:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D142
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DECA64A5E9411F1AE8DDA05CF1D38B0.roa
Signing time: Tue 02 Jun 2026 15:03:15 +0000
ROA not before: Tue 02 Jun 2026 15:03:10 +0000
ROA not after: Tue 25 May 2027 15:03:10 +0000
asID: 23764
IP address blocks: 154.85.14.0/24 maxlen: 24
154.85.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119106 (0x1d142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 15:03:10 2026 GMT
Not After : May 25 15:03:10 2027 GMT
Subject: CN=6a1ef0b3-06b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:ba:e9:71:70:84:6d:8c:73:23:f9:a4:aa:
0d:9a:c5:f0:19:2f:46:1d:31:13:26:3d:b9:8b:85:
f6:c1:8d:42:d5:9d:6e:83:bd:2d:54:48:29:c0:d9:
38:b7:b9:01:44:fe:17:ce:bc:bd:06:6d:4c:27:93:
ce:7b:8a:5a:d3:01:6b:8c:02:ca:90:9e:85:08:45:
36:0b:1e:05:7a:7d:e7:ab:63:e8:49:0f:3e:4a:ab:
a0:4e:d2:f6:81:0e:2f:db:24:72:55:da:fe:19:4f:
c4:50:29:58:52:29:a2:4f:55:2c:c5:10:9c:d3:79:
e8:16:fe:58:f4:e6:33:55:80:b0:46:1a:02:e0:a9:
45:a8:fd:2f:1f:1b:80:83:4a:6d:53:17:59:5c:eb:
a4:8f:85:a3:38:6c:ae:bd:c4:b4:94:34:bb:6d:5f:
8c:7f:18:a9:1b:a7:c3:c8:26:ac:67:17:52:bc:54:
a4:1c:27:97:7d:46:c2:7e:fc:12:d1:c0:81:2e:ab:
0a:5e:3a:55:db:e7:d4:02:09:e7:aa:cf:c8:a3:e9:
32:a8:9f:82:5f:27:18:c2:4d:8d:41:e7:cd:00:50:
91:d4:8e:28:b6:ae:be:72:b3:8a:a1:cc:19:87:a3:
dd:60:f1:99:24:7b:12:58:5a:59:cd:52:3f:3b:79:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B8:5B:29:B4:86:48:E5:B0:30:4D:0D:AD:6E:ED:64:81:4B:E5:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DECA64A5E9411F1AE8DDA05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.14.0/23
Signature Algorithm: sha256WithRSAEncryption
00:2e:68:5d:f9:68:2e:61:05:1c:84:ca:98:97:2e:40:19:6b:
3f:39:98:17:23:a1:ec:e5:79:25:11:7b:4c:31:7b:11:0a:7c:
a8:cc:91:55:3b:eb:e8:5e:ef:3f:ce:4a:95:c7:0e:cb:f9:1f:
0a:ac:e1:6f:23:11:ce:3e:26:85:7a:35:b6:4f:ee:a6:18:98:
c7:ba:ae:98:a1:e6:87:3e:61:bb:8d:06:c0:ec:45:44:6c:fb:
f9:cb:f8:60:52:94:47:4f:50:d5:bf:ae:17:5f:30:b1:a2:ac:
16:35:52:a6:e6:1d:93:34:1e:25:f7:bf:76:ed:8a:2c:9a:a9:
af:d1:47:df:b4:51:9f:5d:de:98:eb:b6:20:d0:78:50:ff:75:
57:0c:2c:f2:8e:ae:2a:db:b4:d5:ad:f4:f2:10:c9:d2:6d:64:
2a:9e:9b:88:fc:9f:49:cb:5c:b3:77:4d:04:e5:97:fe:41:0f:
a6:5a:ac:0a:71:7e:b9:e0:18:99:7f:bf:d0:fb:6c:86:6b:78:
d2:46:8a:77:ef:d6:ef:de:41:dd:e8:55:77:df:02:ca:29:93:
6d:eb:d2:ae:10:0a:9a:51:c1:5e:de:42:40:46:bd:40:91:df:
72:c4:af:85:85:72:2a:3b:ea:be:99:47:57:c7:26:e5:e7:72:
c3:70:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:02 2026 by rpki-client