Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E5CA55E917911F18015FDF3CE1D38B0.roa
File: 2E5CA55E917911F18015FDF3CE1D38B0.roa (raw, json)
Hash identifier: 1+V8cit/Ya8qDelmts0jd1sVrIZglT4R531aS2ZxcVw=
Subject key identifier: 21:02:EF:C6:1D:89:A0:5A:B2:DD:F2:76:80:8E:D7:55:40:A2:AB:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E5CA55E917911F18015FDF3CE1D38B0.roa
Signing time: Thu 06 Aug 2026 09:28:28 +0000
ROA not before: Thu 06 Aug 2026 09:28:24 +0000
ROA not after: Sun 16 Aug 2026 09:28:24 +0000
asID: 395886
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122101 (0x1dcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 09:28:24 2026 GMT
Not After : Aug 16 09:28:24 2026 GMT
Subject: CN=6a7453bc-ed61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:e1:09:08:bf:99:02:2e:27:cf:c8:df:ab:
c0:86:96:07:b4:c6:45:28:bc:dd:68:e5:4e:95:c6:
20:3f:b5:a6:a5:ce:43:92:54:0c:16:7e:16:9f:37:
ff:50:42:fe:d5:66:32:75:ec:4c:e7:2e:cd:a8:72:
09:35:a5:0e:a5:a5:eb:15:df:be:9b:e5:0d:d6:ef:
c6:b2:96:63:58:30:9c:e6:3a:9d:67:07:32:95:23:
15:5a:42:0a:3c:da:de:37:ba:ff:4a:91:7b:fc:73:
b5:c2:71:8f:79:14:04:c9:da:b9:3e:7a:ab:bf:60:
f0:0c:61:c2:46:68:af:b3:f5:b8:5a:94:e2:6e:ea:
bf:c6:cc:c1:78:d7:a4:0f:ba:85:e6:e6:c4:e1:5d:
7d:07:80:4d:81:40:8a:43:dd:a1:06:21:53:70:03:
8b:89:78:9b:b7:be:20:9f:4f:d1:98:43:2b:a6:ab:
82:2a:56:95:bb:8a:19:cf:82:d3:1b:20:17:2e:50:
af:30:7e:f1:9f:31:01:a4:b1:c9:e1:ba:61:37:58:
2c:52:bb:33:ee:3e:7b:b4:bf:53:3e:81:6c:09:c0:
d9:73:cd:c6:0a:d9:3e:51:d6:7b:c8:8e:14:fe:f2:
42:be:ca:03:3b:f5:1c:80:00:03:f8:f5:38:68:2f:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:EF:C6:1D:89:A0:5A:B2:DD:F2:76:80:8E:D7:55:40:A2:AB:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E5CA55E917911F18015FDF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:3b:0b:6d:77:34:83:c0:f7:04:3c:54:13:0e:fa:ae:e0:f0:
c8:ef:f3:2c:2d:0d:b3:ba:17:ed:0d:3d:29:a5:ad:4b:fe:52:
cc:e6:27:b9:eb:7c:2c:7b:27:8f:53:a5:92:2d:de:47:d6:ef:
6e:53:fa:12:36:8e:f2:3f:a5:79:20:a4:c2:ee:59:0f:fb:b4:
4a:2d:af:ac:e4:36:b5:2c:54:3f:f1:0b:23:fc:cd:7d:a4:c9:
ae:10:e9:58:1c:24:af:bc:81:01:3a:79:0d:75:57:8f:b2:d7:
b3:4c:9f:f4:c3:d5:1e:29:5e:86:26:35:50:80:77:63:37:e3:
27:52:df:0f:ad:25:8e:94:3d:45:12:0c:ab:12:d5:20:62:74:
e5:91:0e:0d:94:bf:43:f8:cc:a1:d0:6a:32:8b:35:a3:9d:77:
5a:7a:36:bb:35:40:c6:27:ba:4a:5a:fc:b0:55:31:7f:3e:95:
7d:6b:c4:5e:4b:51:38:8e:a2:4f:41:29:8d:8d:5d:e1:8b:23:
68:bc:68:54:57:9d:98:b0:ef:01:95:c6:a7:9c:69:f9:52:fd:
23:bb:b0:95:bd:83:74:65:31:da:65:f0:91:38:5f:40:49:c7:
74:87:39:74:6c:f6:b8:6e:56:a2:c2:8c:63:ad:74:59:dd:70:
64:09:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:31 2026 by rpki-client