Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F542DA6739211F19720A7EDCE1D38B0.roa
File: 2F542DA6739211F19720A7EDCE1D38B0.roa (raw, json)
Hash identifier: Y9WlIl2gnCdYM6WggmPTSb1GnO3o8dRzPsbDI32jXvE=
Subject key identifier: 80:D1:4F:B9:6D:61:10:08:EE:53:16:84:E6:95:42:67:E6:CD:05:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F542DA6739211F19720A7EDCE1D38B0.roa
Signing time: Mon 29 Jun 2026 08:11:52 +0000
ROA not before: Mon 29 Jun 2026 08:11:48 +0000
ROA not after: Thu 06 Aug 2026 08:11:48 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
154.218.29.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
154.219.29.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.40.0/24 maxlen: 24
154.222.41.0/24 maxlen: 24
154.222.42.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
154.222.193.0/24 maxlen: 24
154.222.194.0/24 maxlen: 24
154.222.195.0/24 maxlen: 24
154.222.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120292 (0x1d5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 08:11:48 2026 GMT
Not After : Aug 6 08:11:48 2026 GMT
Subject: CN=6a4228c8-c3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:b5:b4:a8:54:79:3e:6b:41:92:9c:a0:14:
90:1c:1e:b8:cf:dc:e0:c3:e6:5e:b4:81:ab:c1:50:
d8:cf:62:da:a7:77:f7:39:0d:3a:30:a1:55:52:7e:
92:16:7a:9d:fd:de:39:f3:22:65:d5:c9:86:8a:b9:
99:93:8d:a4:46:28:09:f3:ae:b0:cc:a3:88:06:27:
6b:6c:58:25:bf:75:8a:bc:f7:93:73:79:70:d9:bc:
4d:40:c1:1e:26:0e:79:3a:92:6a:2b:57:eb:e3:5e:
a3:ef:dc:6a:4e:f1:ee:47:97:03:4a:fe:9b:9c:77:
92:8c:77:ad:6f:fd:56:d9:76:84:8b:0c:0c:c4:c8:
50:9d:09:d9:4e:e8:cd:fc:4a:19:18:41:26:6a:79:
1d:95:bf:57:c5:57:94:b9:b4:14:9f:0f:91:85:db:
f5:ba:f1:65:bb:7f:8b:54:9b:40:da:8a:3a:c0:d8:
ab:b4:87:86:8c:2d:16:98:aa:6a:72:25:12:86:35:
81:12:f9:10:43:c8:c6:ea:32:d5:ee:f6:dd:e1:d2:
8b:c7:bf:48:ad:65:ac:86:99:d1:97:97:49:0d:3b:
fc:f5:c5:95:c9:f5:20:f4:e4:4d:5f:e0:02:0c:a2:
c3:97:35:05:e4:d6:17:52:ed:62:d2:b0:a2:c0:8a:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D1:4F:B9:6D:61:10:08:EE:53:16:84:E6:95:42:67:E6:CD:05:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F542DA6739211F19720A7EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/23
154.219.17.0-154.219.22.255
154.219.26.0/23
154.219.29.0/24
154.221.60.0/24
154.222.40.0-154.222.42.255
154.222.192.0-154.222.196.255
Signature Algorithm: sha256WithRSAEncryption
aa:e2:3e:ac:c2:d4:02:81:f5:94:b1:ef:de:8e:2f:c0:96:06:
42:5e:5d:f4:59:6d:15:b7:fa:fe:a9:cb:da:b3:52:18:c4:df:
4d:29:c2:46:eb:e4:5d:ee:be:a9:72:86:27:1d:4f:3c:2b:f4:
34:e4:a6:f6:d1:09:cb:1a:cf:f8:35:54:e7:90:b9:b6:9f:a8:
cb:f4:b3:2b:1f:9c:16:d7:10:55:6f:02:b1:d7:01:ce:81:ef:
a4:31:13:f9:0b:2a:50:02:86:b2:d8:e1:f9:52:57:f8:48:3e:
1a:f5:b7:fb:20:56:d6:cc:f1:d6:78:ad:8c:0a:ea:af:3f:51:
46:62:95:f0:ee:77:ee:df:0e:30:5f:1a:ac:47:0f:50:c1:57:
46:26:e1:e1:8d:23:f0:ad:a3:f5:fe:02:4f:13:d5:ab:47:b0:
27:bf:86:c7:d3:af:08:a3:90:f0:d6:89:bc:bd:37:ef:13:70:
1e:c1:8f:d1:3a:07:7f:ba:8f:86:59:0c:92:62:50:4f:cd:a4:
23:98:20:93:bb:f1:9e:99:df:6e:2d:bf:61:cf:86:e8:bc:f7:
d8:a1:9e:57:5d:73:2b:98:a8:3f:ee:ac:89:91:42:30:0d:08:
0b:6d:8f:ce:dc:bf:b1:57:59:99:cb:9b:1b:b3:67:5e:48:5f:
8e:94:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:32 2026 by rpki-client