Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C76D34506211F19EC66AABCE1D38B0.roa
File: D2C76D34506211F19EC66AABCE1D38B0.roa (raw, json)
Hash identifier: YRu6+DPE5gIiVsNoN/yefub50Gmal8QYo6/jthm1k9M=
Subject key identifier: E8:DB:B2:4A:38:9E:19:94:67:8A:D8:72:ED:BB:99:4E:69:4A:3F:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C76D34506211F19EC66AABCE1D38B0.roa
Signing time: Fri 15 May 2026 13:34:40 +0000
ROA not before: Fri 15 May 2026 13:34:35 +0000
ROA not after: Sat 13 Jun 2026 13:34:35 +0000
asID: 17497
IP address blocks: 154.217.232.0/23 maxlen: 24
154.217.232.0/24 maxlen: 24
154.217.233.0/24 maxlen: 24
154.222.128.0/24 maxlen: 24
154.222.129.0/24 maxlen: 24
154.222.140.0/22 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.141.0/24 maxlen: 24
154.222.142.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117690 (0x1cbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 13:34:35 2026 GMT
Not After : Jun 13 13:34:35 2026 GMT
Subject: CN=6a0720f0-2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:cc:51:77:f2:2f:a9:a2:df:be:ac:d2:75:
8c:dd:81:69:2b:3f:50:50:07:93:85:b1:f7:0f:58:
01:57:ca:64:eb:ae:af:1f:fc:23:2b:0c:25:d4:bf:
e9:11:22:ce:ee:ef:5e:b3:5c:81:3b:a5:6d:19:7c:
f1:13:1b:08:c6:5f:18:eb:34:c8:e6:4f:c6:0d:c4:
8c:df:5a:e1:3e:41:d8:e9:ad:9a:ac:2d:5d:60:a9:
36:ff:24:ab:4f:6e:82:0a:26:47:4e:1f:52:5b:e9:
64:fa:a6:de:5e:eb:36:4d:91:0b:5c:f5:46:f1:43:
a8:a7:0e:5a:f6:9e:84:4e:1d:d8:84:29:2d:5a:59:
43:e0:91:24:aa:ac:92:17:63:ad:ad:9e:ea:f0:b9:
ef:57:9c:e3:6b:ab:f9:4f:55:58:43:0d:80:d4:f6:
2f:2f:4e:2d:00:3b:4d:36:1d:94:67:88:b2:4f:84:
c0:43:52:3d:fc:62:9d:fa:f5:e2:c3:4a:32:5b:3c:
f5:76:75:cb:bb:54:5b:76:44:94:8a:01:bf:7c:7a:
9b:d2:9d:99:0a:96:51:3d:44:80:6f:61:23:2d:fb:
b7:e3:e9:56:13:fa:f6:49:62:4f:45:e3:3d:9f:9f:
28:33:e5:55:10:d3:78:8d:bd:11:91:3a:38:2d:e3:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:B2:4A:38:9E:19:94:67:8A:D8:72:ED:BB:99:4E:69:4A:3F:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C76D34506211F19EC66AABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.232.0/23
154.222.128.0/23
154.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:7f:0d:2e:8f:ec:df:4b:93:10:a4:f1:2d:19:07:e1:11:8a:
2d:01:b0:00:f2:f5:e5:0d:25:ba:5d:7b:3e:03:20:79:03:34:
9c:07:a7:4b:4a:c2:84:8a:c2:0e:50:cb:4b:1c:91:d7:eb:d2:
18:d7:5f:a6:a9:ce:16:ad:42:d6:e5:69:8c:3c:f6:75:a7:c7:
89:4d:9c:fc:73:d5:bb:72:1f:96:71:74:27:6b:8e:b9:7d:99:
65:ef:4d:37:ec:f0:73:25:20:41:5a:6f:93:55:63:c7:05:2a:
80:e3:94:2f:46:2f:c8:b1:35:49:c0:d0:56:b2:6b:a4:62:b9:
1d:03:33:55:bd:f7:29:fd:01:61:ae:d3:70:da:f0:f6:83:da:
e1:3a:3b:ca:7a:9c:6f:e4:bb:1c:82:6b:d7:fd:09:e0:e4:37:
af:a5:b4:e6:6b:5b:30:47:7c:f9:73:e7:d6:09:d2:2f:47:1b:
c4:7f:cf:8e:d1:e9:1d:55:6d:34:46:9b:14:01:ec:83:e5:72:
6b:f0:2e:4a:21:86:79:81:0f:ea:ad:6a:05:ea:75:b6:54:29:
ac:13:64:59:e6:b5:7e:cc:dc:cf:4d:c5:5b:08:c3:86:ee:9a:
e5:47:73:e6:c2:28:5a:0d:8d:90:29:f7:2c:b4:fb:78:bc:ec:
6e:5e:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:24 2026 by rpki-client