Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF2E655A574211F1B2F09D15CF1D38B0.roa
File: DF2E655A574211F1B2F09D15CF1D38B0.roa (raw, json)
Hash identifier: JRRdToKpkLkTUbyS/tmvpm21tBicVY4uiQP7LPWp+UU=
Subject key identifier: A3:E1:DD:E1:A5:DE:53:D3:85:FA:95:8C:7D:DA:20:CB:A0:82:B1:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF2E655A574211F1B2F09D15CF1D38B0.roa
Signing time: Sun 24 May 2026 07:33:35 +0000
ROA not before: Sun 24 May 2026 07:33:31 +0000
ROA not after: Tue 30 Jun 2026 07:33:31 +0000
asID: 401696
IP address blocks: 154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118439 (0x1cea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 07:33:31 2026 GMT
Not After : Jun 30 07:33:31 2026 GMT
Subject: CN=6a12a9cf-5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:99:89:76:b8:ab:2f:c7:8c:1a:f0:49:07:
7b:1d:c0:fb:5c:ac:8b:bd:52:23:01:5b:ef:f8:0f:
02:51:ec:92:c5:40:52:ed:a5:9d:d6:bd:72:39:21:
ec:d4:01:9d:a1:c7:75:ee:85:dd:86:39:4f:fa:24:
3d:02:a1:53:dc:55:6f:1a:81:71:ca:f3:57:0f:57:
9e:ce:ee:c4:3c:c0:6b:3a:54:e6:ba:9a:42:91:08:
c4:ab:d1:95:30:73:de:9e:e9:92:e2:b6:e0:29:08:
61:82:99:1c:7b:c1:f4:9a:78:8b:cc:d3:eb:2d:b7:
39:89:4b:1e:2c:f9:9a:55:8e:ac:2d:74:56:23:42:
5c:4c:9f:c0:a2:7e:fc:67:43:b8:5c:a5:01:f4:55:
ac:29:72:18:d4:b9:09:31:99:9d:a8:25:58:ca:f2:
a1:d0:88:a1:76:c5:dd:98:90:83:69:df:8e:65:9f:
ae:d2:90:41:73:ec:a8:e4:3a:e4:51:05:08:19:79:
23:df:a2:4a:80:16:0d:cf:e4:0f:77:f5:14:8d:31:
3b:90:ee:09:41:b4:60:ba:b3:6d:f7:f0:ad:40:c4:
ec:95:ba:f0:62:68:e2:74:61:d4:97:b6:12:d8:aa:
7a:0c:46:9b:a8:86:66:5d:40:a5:ae:6d:e1:e2:35:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:DD:E1:A5:DE:53:D3:85:FA:95:8C:7D:DA:20:CB:A0:82:B1:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF2E655A574211F1B2F09D15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ed:43:51:77:b2:7b:18:8e:b5:0d:f3:54:3d:d2:70:a6:1b:
5a:7b:f0:02:9e:f3:95:78:af:e4:57:94:69:5d:73:dd:c0:80:
7f:0e:e2:1b:07:68:ed:52:cd:f3:6e:7f:c7:74:b5:fb:0f:7c:
46:a6:c6:ec:5b:a3:04:42:9e:2c:e1:bc:6f:05:69:7e:ca:2a:
2b:a8:54:a4:16:d0:f5:c3:d6:69:0f:ff:08:c7:3c:29:74:06:
5d:b9:0c:17:06:9c:ac:33:69:ba:ff:83:fc:00:6f:19:c4:a9:
99:8c:41:95:3a:34:17:7d:57:98:a9:5d:19:bb:48:3e:44:13:
6d:ac:ed:aa:6f:e2:41:a4:ec:de:49:71:32:04:22:df:ad:56:
5e:e2:5d:8f:6f:25:a2:f4:9e:92:ff:9a:02:36:79:26:6a:d7:
6c:43:4a:01:29:fc:48:a2:82:8c:62:c7:09:7d:9e:e7:30:f6:
0c:fc:a9:0b:e7:77:5b:61:50:95:aa:6d:65:9b:8d:05:c2:0b:
52:a1:f8:3a:26:81:09:50:a0:63:70:ff:a3:77:19:c7:df:16:
e2:84:68:d0:bb:a7:bb:76:51:d4:23:a0:cd:75:cd:28:52:bb:
06:b7:55:6b:f2:52:42:55:9c:87:24:28:3f:15:e2:c7:7f:e7:
09:59:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:27 2026 by rpki-client