Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CF2BB06760611F18A5FE3D6CE1D38B0.roa
File: 7CF2BB06760611F18A5FE3D6CE1D38B0.roa (raw, json)
Hash identifier: hgA7WMYj6OoKqBgfQEzw3LCk26gBjFIjDliFVG0syvE=
Subject key identifier: 75:49:DF:95:DE:00:1A:D1:25:5F:08:E1:F8:B0:04:1F:95:00:3D:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D67E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CF2BB06760611F18A5FE3D6CE1D38B0.roa
Signing time: Thu 02 Jul 2026 11:09:27 +0000
ROA not before: Thu 02 Jul 2026 11:09:22 +0000
ROA not after: Sat 25 Jul 2026 11:09:22 +0000
asID: 401783
IP address blocks: 154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120446 (0x1d67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 11:09:22 2026 GMT
Not After : Jul 25 11:09:22 2026 GMT
Subject: CN=6a4646e6-6f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:13:b6:66:19:11:3c:a8:4b:59:89:9a:f1:
09:e1:f9:fe:0c:f2:82:b6:91:0e:ea:8e:0e:d2:97:
5f:7c:4b:7e:d8:e2:c1:71:4b:57:86:0c:3e:61:6c:
b2:64:61:50:eb:e2:c5:89:7d:b7:f4:1e:06:de:64:
cf:da:14:48:e2:84:fb:25:c2:9f:81:64:ba:60:1d:
e1:3c:fc:fc:08:ed:12:f3:b6:cf:c7:ff:7b:ea:24:
e4:61:ea:49:22:55:ca:85:d3:c1:96:68:78:6b:3c:
55:1a:6b:ae:60:94:6f:1f:0a:43:c0:05:03:e1:62:
25:e8:be:b2:63:2b:43:78:b3:92:51:c6:25:db:c2:
13:2c:31:f0:7f:23:ec:e5:03:a5:be:07:ca:58:19:
56:4c:35:20:fb:14:6f:bb:82:d9:65:49:11:05:97:
aa:4d:09:46:fb:ef:82:0c:4c:92:9a:40:62:d0:ef:
8b:10:60:d4:be:6d:c8:90:f0:2a:6f:f3:ed:c8:95:
85:98:8b:43:7d:b8:46:d3:1b:b7:a7:28:e1:60:b8:
e1:1d:3d:e1:e1:f3:bc:5e:dd:32:b2:24:c6:21:f2:
b3:9d:c0:cc:de:48:64:18:4b:5b:54:bb:c3:49:68:
1b:a0:fa:fa:ae:04:4b:d9:8d:f0:d8:15:5b:65:24:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:49:DF:95:DE:00:1A:D1:25:5F:08:E1:F8:B0:04:1F:95:00:3D:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CF2BB06760611F18A5FE3D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.53.0-154.200.54.255
154.200.60.0/24
154.200.129.0-154.200.131.255
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e2:44:9c:fe:06:9b:40:82:97:ff:36:7d:19:f6:17:bf:07:
9d:0f:5d:bc:0c:71:81:4a:52:ee:7b:14:ba:99:da:c1:51:49:
a4:29:94:0b:ca:e2:1a:da:df:a5:63:c2:b0:03:5b:95:64:4d:
1b:c3:55:f2:63:36:f1:c3:d9:08:73:ba:d4:e2:04:5d:ff:2e:
cd:14:55:18:41:5b:3f:45:71:50:3f:0d:74:2b:e3:d1:51:c5:
6f:d8:3e:c4:3a:3b:49:30:85:c5:25:49:6e:e6:e0:12:e5:7a:
88:1c:2f:67:86:e0:e1:6f:42:37:86:40:08:63:42:1d:2f:d7:
16:75:0b:62:f6:58:85:7f:73:73:2a:c3:9a:2b:e4:cb:f7:a9:
29:34:03:7a:53:0c:ee:cf:30:73:cb:61:39:94:f9:4a:59:6a:
5c:21:f3:49:57:d6:1a:77:8b:c6:2a:2f:3b:24:ca:97:49:5a:
89:01:56:84:af:1d:d1:98:08:c8:02:36:ba:3d:5e:b1:4f:6b:
a1:32:6c:1e:73:bc:10:98:82:9e:81:92:71:0f:86:e5:a8:dd:
1f:a9:a0:5d:67:f1:de:88:13:05:5c:49:f4:4d:dd:00:1e:bc:
80:cd:51:6b:ee:8d:b9:bb:fe:20:f7:c3:6a:71:74:81:37:12:
83:55:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:19 2026 by rpki-client