Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF021286C7911F1ABA9BEF9CE1D38B0.roa
File: 2EF021286C7911F1ABA9BEF9CE1D38B0.roa (raw, json)
Hash identifier: No8oW9qSnvZlzbKMuM+3hfXRCY9VKfZsKXXuxyHSy6I=
Subject key identifier: B4:FD:6A:F2:23:DB:EF:1E:8D:F3:BA:F5:F1:CE:36:53:47:9A:8D:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF021286C7911F1ABA9BEF9CE1D38B0.roa
Signing time: Sat 20 Jun 2026 07:25:16 +0000
ROA not before: Sat 20 Jun 2026 07:25:11 +0000
ROA not after: Mon 27 Jul 2026 07:25:11 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.93.107.0/24 maxlen: 24
154.93.108.0/24 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.112.0/23 maxlen: 24
154.93.112.0/24 maxlen: 24
154.93.113.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119801 (0x1d3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 07:25:11 2026 GMT
Not After : Jul 27 07:25:11 2026 GMT
Subject: CN=6a36405c-db1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:aa:c9:7e:01:07:bf:29:94:84:21:36:e6:
30:90:7c:6b:40:cf:a8:19:6a:08:5c:4b:87:bb:59:
82:2b:86:40:2f:87:15:f6:f5:5d:d0:a9:93:35:72:
70:49:e6:17:a4:f2:36:36:6e:21:c9:36:45:1a:ea:
15:40:33:97:2d:fa:be:1e:fa:91:69:0e:bd:8d:cc:
73:fc:cb:1d:68:17:43:fe:cc:a0:83:6d:f5:cc:1e:
a4:fe:a1:29:9d:9a:81:2f:00:cc:29:02:95:b0:37:
d2:9c:3b:b0:4d:22:1e:ac:8b:9d:8b:8a:9c:6b:ae:
50:0e:2c:b1:91:5d:48:40:2d:46:e2:a6:e9:f9:0c:
5e:11:f7:ce:2d:28:11:ef:b8:c2:12:4c:72:fb:05:
8a:51:ed:82:52:a1:0f:00:81:cd:34:89:d3:b8:08:
24:83:e6:1a:aa:58:0c:36:5c:d4:cd:56:0c:69:88:
0b:4c:1a:24:0b:49:bf:0c:29:dd:dc:34:e2:ca:3b:
8f:be:f0:b3:85:18:8a:be:8f:58:cd:27:2e:5a:dd:
a8:18:7f:9e:00:d2:fb:bf:60:04:8b:e3:18:2f:c4:
2f:69:04:51:e0:2b:25:c5:7d:6e:5c:30:51:a9:e3:
cc:dd:1f:6d:e4:af:0d:0c:f1:23:c4:1d:a4:7e:5b:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:6A:F2:23:DB:EF:1E:8D:F3:BA:F5:F1:CE:36:53:47:9A:8D:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF021286C7911F1ABA9BEF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
154.93.103.0/24
154.93.106.0-154.93.109.255
154.93.112.0/23
154.93.116.0/22
Signature Algorithm: sha256WithRSAEncryption
31:cc:a1:7b:6a:3f:c4:00:69:be:0c:10:67:cd:02:f5:73:84:
da:4e:1e:7a:5a:8c:ef:67:38:27:61:b8:fd:9b:3c:0f:79:43:
f3:23:6d:37:cc:b2:67:b3:12:79:a6:1c:46:6d:93:92:84:cf:
6f:b1:f4:de:35:76:ed:bc:87:74:8b:95:ba:93:a9:06:83:6d:
1f:d8:8b:53:0d:d8:0c:9b:82:e5:20:7a:11:92:c2:59:d3:01:
d2:0b:8c:df:55:5e:3d:1b:e1:e4:0e:b9:b5:50:00:58:1a:e9:
7f:cc:36:4e:86:de:6e:5a:10:57:5b:9f:2b:32:b6:a8:81:99:
cb:b8:2a:fd:b7:5a:23:be:60:74:05:6c:d6:63:73:c1:d1:1f:
c7:a8:c9:d5:38:36:71:4f:a0:c7:b1:28:51:3a:56:c1:7a:7d:
a8:77:3e:7f:b7:51:f3:5d:8e:3e:f0:e9:0b:67:38:28:e8:3b:
21:ce:5d:b4:b6:f4:4e:fa:11:72:5c:e3:48:af:31:2e:40:b7:
43:ee:92:f6:f5:07:b8:7b:ed:4d:09:8c:33:63:83:25:ee:02:
85:08:d9:1f:25:73:31:8b:2b:9d:32:47:1e:86:fd:cc:6c:41:
63:83:50:21:ec:dc:ab:a5:8a:97:41:2f:d7:d2:28:93:d6:4c:
6d:5d:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:55 2026 by rpki-client