Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FC81A8875E811F1B0C218A2CE1D38B0.roa
File: 2FC81A8875E811F1B0C218A2CE1D38B0.roa (raw, json)
Hash identifier: TNvBm4S4KER3rcZqGKSJwg5eWij83//N6tpMyj/NmBM=
Subject key identifier: 64:3D:21:67:48:F0:B2:70:10:55:94:AA:77:94:9B:69:A1:90:B0:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D66C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FC81A8875E811F1B0C218A2CE1D38B0.roa
Signing time: Thu 02 Jul 2026 07:32:32 +0000
ROA not before: Thu 02 Jul 2026 07:32:27 +0000
ROA not after: Sun 09 Aug 2026 07:32:27 +0000
asID: 14315
IP address blocks: 154.81.11.0/24 maxlen: 24
154.81.48.0/23 maxlen: 24
154.84.128.0/22 maxlen: 24
154.84.134.0/24 maxlen: 24
154.84.152.0/24 maxlen: 24
154.88.68.0/22 maxlen: 24
154.89.128.0/22 maxlen: 24
154.89.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120428 (0x1d66c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 07:32:27 2026 GMT
Not After : Aug 9 07:32:27 2026 GMT
Subject: CN=6a461410-9218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:6c:e6:4a:83:a6:f4:54:d8:2a:d3:28:6c:
ba:67:c6:b2:c7:18:f8:d2:7b:c7:87:c1:37:6e:b3:
b7:8a:83:0d:e0:75:6f:21:48:c9:b2:75:5a:36:e2:
f8:0b:dc:c3:7b:54:4f:9e:0f:da:a9:28:ab:f2:13:
6d:f8:1b:f2:04:23:53:dc:fd:0c:34:98:da:83:32:
97:28:41:61:a4:76:55:d5:30:80:b5:89:8e:3c:38:
c6:e0:c7:da:56:f7:f2:93:6c:d9:22:79:13:7a:36:
36:90:ae:1b:79:47:45:fb:b3:ed:84:cd:ba:19:4c:
3c:c5:9b:8d:27:7d:99:8a:09:89:52:bb:35:ea:19:
86:f8:66:3e:54:13:60:d0:48:33:e9:c9:1e:40:8b:
04:cd:f4:b2:9a:3d:48:b5:2d:06:86:d7:a8:32:87:
51:f0:e5:0d:6a:b2:46:a9:93:21:12:a5:00:1b:5e:
e6:8a:00:aa:7c:e2:ff:99:f3:70:ef:93:07:10:78:
52:7d:04:2c:29:e3:8e:1a:a7:1b:61:fc:28:f4:ab:
8a:9a:1d:74:c1:59:a6:96:8a:60:c1:4c:0d:be:17:
e0:24:2c:40:ad:7a:92:ea:6a:68:e1:59:18:0a:0c:
70:23:14:98:9c:95:51:39:51:e7:20:f7:91:38:b5:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3D:21:67:48:F0:B2:70:10:55:94:AA:77:94:9B:69:A1:90:B0:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FC81A8875E811F1B0C218A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
154.81.48.0/23
154.84.128.0/22
154.84.134.0/24
154.84.152.0/24
154.88.68.0/22
154.89.128.0/22
154.89.136.0/22
Signature Algorithm: sha256WithRSAEncryption
94:81:f1:d5:ef:40:b7:4e:7f:de:c8:66:18:fa:ab:f5:69:3f:
de:42:f9:dd:ae:24:30:83:13:f6:fa:bc:13:7a:35:b3:00:4e:
aa:88:8b:21:9d:4c:c4:f4:a1:7a:3c:22:55:ed:a1:45:20:78:
92:ad:d0:8b:6a:b1:a2:27:27:92:3e:47:8c:2f:20:2e:d3:76:
3a:a3:70:99:00:8f:7c:fb:a4:f3:d2:f4:a7:54:a3:df:3d:49:
e0:32:7d:0b:0a:b9:5f:6c:e2:57:84:d0:eb:5d:b0:59:ab:c7:
08:0b:69:98:48:63:51:86:61:d6:4d:14:fa:38:f3:25:0f:68:
6e:16:5a:fc:4d:41:67:64:63:9d:dd:1f:50:cd:19:54:09:d7:
57:c5:b2:4c:97:9e:49:1f:c7:e6:f2:bc:8b:5d:96:c7:11:d2:
23:4d:08:9d:9a:af:b3:14:c9:b3:7e:f4:94:f4:1c:bc:f8:6a:
4c:71:19:4a:e7:4c:a9:d3:a2:5b:de:be:61:5c:3a:c1:79:b0:
94:75:59:58:84:3f:98:25:e9:3d:88:0b:1d:b3:b3:00:ea:23:
d5:08:73:9c:8b:23:be:3a:c2:b0:cb:5f:b6:5f:0f:b4:ba:c4:
9b:f7:ca:76:b1:96:bb:aa:5d:27:86:43:da:fd:6c:af:d8:81:
7c:48:76:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:22:15 2026 by rpki-client