Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F31CCBA57C311F19A08E20CCF1D38B0.roa
File: 2F31CCBA57C311F19A08E20CCF1D38B0.roa (raw, json)
Hash identifier: oXb6/5tKgC6Rrpm1Cxgr8v6gfwktEMqwHQxVUkz6JSU=
Subject key identifier: E2:26:C4:AE:1B:DF:16:87:36:5A:6D:AF:B2:11:B9:81:7A:6E:4B:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F31CCBA57C311F19A08E20CCF1D38B0.roa
Signing time: Sun 24 May 2026 22:52:05 +0000
ROA not before: Mon 25 May 2026 22:52:00 +0000
ROA not after: Tue 09 Jun 2026 22:52:00 +0000
asID: 154177
IP address blocks: 154.90.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118542 (0x1cf0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 22:52:00 2026 GMT
Not After : Jun 9 22:52:00 2026 GMT
Subject: CN=6a138115-b2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:8d:c2:9e:ce:83:58:e6:37:34:e7:6a:f3:
a1:ad:3d:00:fe:c1:a8:ed:a4:7e:36:42:3c:83:db:
2f:c7:87:55:6f:7c:ef:09:19:0d:13:e2:e8:5d:8d:
b6:be:54:02:34:0b:e0:7e:86:2c:a8:eb:e5:9d:a6:
65:9d:a5:ec:58:53:28:ad:39:b1:ef:9c:25:f8:d5:
5a:18:be:c0:7d:3b:5a:a3:15:0a:f5:ee:6a:d7:76:
c6:98:14:d0:1f:d0:9d:3d:0b:ae:a0:d9:14:b1:b1:
99:ec:81:51:48:79:2f:e3:68:3d:0f:5a:78:bc:5a:
e0:49:7a:6f:48:92:17:ca:68:61:e1:61:61:36:ce:
b3:c7:28:51:66:a2:d3:3e:77:bb:b1:3f:a8:72:41:
0a:75:af:0f:fa:ed:a2:e5:67:79:e9:fb:36:eb:9d:
e6:f9:db:99:be:78:37:84:a1:d1:d8:c5:cc:38:6f:
07:b7:fc:b5:2e:be:30:3b:58:3d:66:a0:05:a2:93:
c0:c3:ee:68:9d:37:af:48:96:0c:e2:e8:bd:8c:eb:
d8:a5:f7:a8:b0:5c:65:e4:b1:56:0e:7e:7f:b2:48:
cb:3a:81:36:97:95:83:cc:06:a4:42:ec:43:1b:dc:
a3:6a:57:0c:df:9b:ed:83:47:18:e6:60:77:f8:e3:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:C4:AE:1B:DF:16:87:36:5A:6D:AF:B2:11:B9:81:7A:6E:4B:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F31CCBA57C311F19A08E20CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
49:db:2c:94:da:87:42:8e:aa:ca:42:fe:86:04:de:22:70:f3:
d9:91:6b:c8:ad:a3:89:a4:59:74:0c:2b:31:f4:af:b0:b8:96:
06:f1:c4:e7:49:ff:f9:3e:ba:c9:b2:0e:ef:51:d5:e0:97:df:
9a:c1:65:ef:80:a0:0d:c0:27:57:0f:fd:93:5f:5e:81:53:bf:
46:d7:48:aa:84:6b:93:c2:33:8b:4e:77:8d:da:94:30:c2:1c:
4e:99:bd:fe:4b:c7:eb:c8:65:ed:83:4c:bc:8b:c8:92:2c:e1:
bd:5f:02:9f:1e:bc:63:ec:86:66:26:c0:e3:0d:74:ce:bf:73:
26:e8:3d:e5:27:b1:0b:6f:4d:fd:8f:d3:e0:a7:35:fa:3f:0c:
45:cb:b7:08:84:6d:22:4b:4d:b0:96:dc:42:a5:8e:63:20:56:
85:4b:de:a8:72:24:f3:92:a9:f3:5d:af:d3:57:2e:2f:d9:69:
71:4a:51:a9:4c:63:1a:96:40:06:64:8c:4e:20:1a:79:b4:69:
21:1b:c9:62:65:81:a7:f8:e9:12:75:e9:ad:82:6b:76:70:31:
c2:d7:6c:93:5f:7a:6b:d4:dc:55:25:d9:04:95:00:a5:7c:7b:
3b:13:a5:04:be:cb:f6:23:6f:b1:e3:53:d1:4c:75:88:1e:8d:
d0:0f:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:57 2026 by rpki-client