Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E095C04720311F1BB74BBEFCE1D38B0.roa
File: 2E095C04720311F1BB74BBEFCE1D38B0.roa (raw, json)
Hash identifier: 4oSOw7cZYRDU7I/+r0Up1bsO/Gd4sfxiKXj008GhqQQ=
Subject key identifier: 6A:19:54:C3:45:27:DA:FA:78:8D:68:E4:E4:A9:72:57:21:70:98:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D586
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E095C04720311F1BB74BBEFCE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:35:41 +0000
ROA not before: Sat 27 Jun 2026 08:35:36 +0000
ROA not after: Thu 30 Jul 2026 08:35:36 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120198 (0x1d586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:35:36 2026 GMT
Not After : Jul 30 08:35:36 2026 GMT
Subject: CN=6a3f8b5d-3405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:d6:b1:7e:ed:2c:2a:f4:d4:6b:f8:a9:c7:
0f:de:2d:fc:4a:eb:b2:46:c0:7d:da:2d:a8:9b:5d:
04:92:ea:4a:7b:27:b0:c3:8e:7b:2f:ce:f8:7c:c8:
33:b2:81:7d:8c:d1:bc:04:4b:1d:8a:22:57:1e:16:
49:1e:bd:bc:3f:e6:18:c4:cf:44:59:2c:89:1f:03:
5a:a5:87:75:c2:ca:cb:06:f4:fe:aa:c8:52:14:31:
7d:3a:8f:ae:11:f9:9b:16:93:fd:22:13:7f:da:16:
fe:c1:c4:d3:7f:32:07:40:79:0d:8b:fa:b8:34:bc:
01:95:47:b2:99:59:1f:c1:0b:df:12:bc:24:cd:e6:
73:90:2d:2a:ce:e7:e3:21:9e:27:67:28:f0:5b:68:
b7:50:df:2c:d9:75:04:45:85:86:e5:b7:2f:c8:ca:
dd:d4:68:61:8f:da:ff:85:ce:47:04:6d:83:67:3b:
ed:1a:b1:c6:6a:7e:97:5c:e8:44:a0:3f:25:c8:a8:
a1:e0:78:c5:8e:8f:5b:c3:ec:34:18:d4:a6:d4:bd:
2a:96:34:a1:ed:58:98:eb:2e:46:a7:e1:d2:63:83:
30:17:f6:77:eb:94:eb:b7:5e:82:95:ae:a6:9f:7f:
c5:3a:4c:0f:09:d7:ce:18:56:33:cd:01:ce:d9:be:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:54:C3:45:27:DA:FA:78:8D:68:E4:E4:A9:72:57:21:70:98:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E095C04720311F1BB74BBEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:b6:fe:4d:4c:4c:4a:83:a9:36:19:5f:8a:9e:9c:d8:82:5e:
76:63:47:96:43:d7:17:0a:69:28:ad:7a:3b:eb:d0:23:62:95:
c4:3d:30:8d:31:ac:e3:fc:ea:fd:87:c3:04:8b:76:66:46:f1:
15:16:5a:9d:74:e0:81:ef:68:d2:7e:fc:7c:37:7b:c4:3e:cd:
34:9e:7a:93:92:bc:de:a3:9a:73:4b:2d:86:42:08:0f:7b:61:
5c:22:6e:53:51:5b:ad:f5:c8:05:88:a8:0f:c3:77:99:e6:b8:
cd:95:ef:5f:62:c3:e8:c9:b4:9a:f9:8c:f9:55:51:a1:5f:14:
f4:84:b2:b3:67:07:f9:af:59:d7:50:21:61:9b:fc:fb:8f:ab:
7c:ce:8e:23:7b:45:14:4e:5e:cc:68:11:fa:2f:92:85:73:a7:
46:28:4c:cd:fc:5f:ad:8a:20:99:40:c1:71:de:b7:80:44:73:
b6:3d:71:d4:79:ab:2f:22:8e:d0:4b:05:d3:9b:cc:34:7b:85:
20:18:11:9d:b4:e9:a6:b6:b7:1a:37:63:f0:84:35:f9:23:1a:
84:85:f1:09:ca:a7:9c:53:67:e7:67:44:a9:e3:4b:16:83:55:
46:55:94:9c:9c:28:f8:a6:d2:9b:48:aa:1d:3e:63:e5:06:35:
ef:6d:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:15 2026 by rpki-client