Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B29FA8D05F6411F1BAB4D8F6CE1D38B0.roa
File: B29FA8D05F6411F1BAB4D8F6CE1D38B0.roa (raw, json)
Hash identifier: UdT1JZZY3DJYEIVlSaw5wZe8h96anZNA4Sg1JAmi4wA=
Subject key identifier: 82:9B:A0:3D:87:33:D4:DF:55:D2:17:AF:F9:D2:6D:9D:55:C1:C0:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D179
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B29FA8D05F6411F1BAB4D8F6CE1D38B0.roa
Signing time: Wed 03 Jun 2026 15:55:53 +0000
ROA not before: Wed 03 Jun 2026 15:55:48 +0000
ROA not after: Fri 10 Jul 2026 15:55:48 +0000
asID: 17497
IP address blocks: 154.193.22.0/24 maxlen: 24
154.193.23.0/24 maxlen: 24
154.193.24.0/24 maxlen: 24
154.193.25.0/24 maxlen: 24
154.193.26.0/24 maxlen: 24
154.193.27.0/24 maxlen: 24
154.193.28.0/24 maxlen: 24
154.193.29.0/24 maxlen: 24
154.193.30.0/24 maxlen: 24
154.193.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119161 (0x1d179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 15:55:48 2026 GMT
Not After : Jul 10 15:55:48 2026 GMT
Subject: CN=6a204e88-19e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:e6:82:bb:75:3e:ee:06:2c:69:07:98:24:
3b:2c:5c:3b:b8:a6:e9:db:e6:00:11:8c:b1:d7:b8:
d7:dc:86:58:71:2e:01:61:39:75:fb:f2:e4:97:f0:
1a:29:11:5a:8a:a9:1f:0d:e1:78:2e:42:50:49:45:
52:1e:20:ed:30:1d:4a:91:c6:94:8b:03:64:34:72:
97:3f:65:02:b7:06:1f:76:0a:0b:d8:42:1e:80:3d:
56:0a:a5:96:db:11:9c:d7:5a:8b:f9:8a:60:ea:0f:
53:c0:68:4a:3e:b6:b7:82:50:40:9a:bc:90:ad:a1:
d1:78:2f:56:28:42:18:7c:9d:49:a2:38:68:1e:83:
64:3f:7e:6a:f6:06:0b:5e:9a:06:41:df:21:3a:82:
2b:f3:14:3a:82:a7:af:b5:38:be:37:ec:a9:27:71:
0c:36:e8:66:54:2f:57:93:41:b1:ae:7f:6d:ca:fa:
26:89:c0:4e:15:ac:c5:40:77:51:dc:89:2c:e3:8f:
5f:e1:23:43:9e:c7:f8:c4:c4:89:0f:37:e3:5d:71:
35:3d:c7:69:26:4f:e5:cd:86:17:7e:94:a6:57:10:
ff:9c:07:60:e2:7f:33:8e:95:7e:72:26:e5:a8:8f:
53:45:a4:5f:4b:20:59:db:1a:b5:49:44:04:f8:ad:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:A0:3D:87:33:D4:DF:55:D2:17:AF:F9:D2:6D:9D:55:C1:C0:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B29FA8D05F6411F1BAB4D8F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.22.0-154.193.31.255
Signature Algorithm: sha256WithRSAEncryption
ca:cd:88:e6:21:0d:d5:c3:ba:16:95:40:6a:42:b1:04:4c:f1:
22:37:ca:86:f7:58:e3:d6:80:9c:3c:33:7f:8c:93:b2:43:25:
09:06:cd:49:4c:44:72:d9:26:77:72:08:44:da:7e:20:f3:f6:
69:bf:ff:9e:32:4a:01:2d:53:80:de:9c:e0:4d:5d:bc:ab:1e:
b9:70:ac:c3:10:2b:f7:30:16:e8:b3:50:c3:ae:9c:cd:21:6f:
ea:2a:28:da:23:59:5a:58:b5:4a:65:8f:c5:8f:d1:ef:13:dd:
e2:46:06:72:3a:21:ad:3d:d7:77:c3:6e:f8:02:28:aa:55:ee:
f0:25:be:98:a8:58:80:f8:82:36:54:3b:66:36:3e:b0:41:90:
96:63:fd:51:17:44:6e:91:55:7f:c2:7b:c5:5d:55:09:78:71:
90:94:14:41:59:af:53:f9:eb:e9:9a:43:9e:c9:8a:c7:33:0c:
af:f2:d3:d9:16:14:e2:55:c1:c0:e5:64:ba:2f:ac:d6:9a:81:
90:3f:8b:ee:a5:57:62:0a:2e:88:d6:5e:62:cf:c6:51:16:08:
3d:cf:03:8b:8c:d5:b2:10:f4:e9:4d:fa:64:03:99:9d:dd:96:
20:f3:71:89:6b:c7:49:5c:d5:fb:e6:b8:94:47:4d:67:09:ce:
7f:28:19:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:05 2026 by rpki-client