Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2E140B27AB611F1B8CBA2D5CE1D38B0.roa
File: F2E140B27AB611F1B8CBA2D5CE1D38B0.roa (raw, json)
Hash identifier: i0H+GfxL8DEP9HdeMnWnbn37+z8aVOYQEUldgz8f23g=
Subject key identifier: 02:51:E1:E9:14:89:EF:20:6A:DA:17:72:51:18:0F:A9:6A:9A:15:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D79C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2E140B27AB611F1B8CBA2D5CE1D38B0.roa
Signing time: Wed 08 Jul 2026 10:22:40 +0000
ROA not before: Wed 08 Jul 2026 10:22:36 +0000
ROA not after: Fri 14 Aug 2026 10:22:36 +0000
asID: 17561
IP address blocks: 154.200.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120732 (0x1d79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 10:22:36 2026 GMT
Not After : Aug 14 10:22:36 2026 GMT
Subject: CN=6a4e24f0-9a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:b8:e0:c9:47:f1:f1:8f:15:5c:ff:7b:b3:
ef:b9:2e:18:57:ad:30:46:3e:00:a2:bf:fd:8c:11:
71:c2:52:51:82:ea:7e:9f:17:7b:69:a1:4c:f9:34:
6b:e9:1f:b5:d4:7f:b2:6b:43:e3:21:7c:5a:eb:7c:
a0:e0:13:bc:82:37:7d:7d:d5:48:d4:91:f0:d5:3d:
90:5c:11:0e:d2:12:1a:bf:e2:ec:d9:60:ba:50:09:
4d:24:12:45:08:df:ee:bc:02:1d:ec:0a:aa:cf:2e:
47:b4:8a:6b:6a:d3:d3:51:43:ba:fd:a1:fd:d3:11:
d3:16:0f:61:14:ef:d5:19:d7:62:17:cb:da:19:25:
88:23:77:9d:80:62:32:a3:e7:1b:ce:74:6b:c4:bc:
db:b3:d9:67:83:df:45:f4:f4:03:6e:bd:c9:07:d9:
03:6e:e8:2f:95:6c:89:d3:ca:e2:7c:88:21:8d:63:
fa:8a:5d:48:ec:9c:82:0e:d1:d3:11:fc:81:44:1e:
e9:59:e8:70:20:e4:53:70:85:3e:da:b0:0c:15:6c:
96:43:2f:5f:1d:bb:b5:2e:94:4a:d3:e4:66:da:1a:
dc:26:9e:5a:30:7f:6e:ed:9e:7c:35:f7:81:bc:4c:
3c:c8:4f:6c:19:88:b5:15:52:4c:0a:05:08:8e:e7:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:E1:E9:14:89:EF:20:6A:DA:17:72:51:18:0F:A9:6A:9A:15:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2E140B27AB611F1B8CBA2D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f9:31:7b:5f:41:ca:77:dd:8c:c5:1c:7e:f4:d2:96:bc:6e:
a7:ca:bf:1c:56:c7:34:98:2f:36:44:81:1e:4e:cd:0f:bd:58:
04:ef:8d:32:71:23:36:b5:07:1b:94:9e:a8:64:57:78:d8:aa:
ca:ea:dc:4b:7a:39:32:52:51:45:02:33:f3:12:02:dc:1b:17:
ca:60:43:98:3d:ff:b4:25:48:bc:f9:58:f9:38:27:4a:61:c4:
56:08:a5:46:ca:d7:35:d5:65:67:5c:f3:8f:c6:18:e2:23:4a:
e6:0f:66:5e:85:29:63:7d:c0:78:b5:98:0b:5b:40:fc:93:c8:
29:52:3b:0b:59:56:4e:de:91:ad:bd:99:7b:42:dd:b6:1b:17:
72:e9:16:86:74:87:f1:45:a9:c8:31:60:cd:91:a8:b8:9e:93:
89:0f:67:1d:a9:07:5a:5d:f6:8a:8b:6d:83:1e:ae:f8:55:76:
7a:ed:87:47:d7:68:8e:56:54:aa:ac:fb:8b:e5:68:83:47:a9:
eb:04:6e:27:88:5f:29:b2:12:41:c3:3f:b2:7f:cd:05:5a:c4:
d6:d1:fd:cd:59:d4:15:a9:7d:61:69:e1:4a:3e:d7:f2:a4:e1:
14:71:e8:ce:8f:8d:ac:8d:61:33:09:b2:27:96:8d:a3:37:36:
44:4f:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:29 2026 by rpki-client