Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D395B4A757711F182226FE6CE1D38B0.roa
File: 7D395B4A757711F182226FE6CE1D38B0.roa (raw, json)
Hash identifier: BpGu7Ij8OpGpCTSKU/JawDscfLscKQ4qIX3UDuoNpUM=
Subject key identifier: 70:76:FA:54:77:B0:51:42:19:47:C1:CC:4D:07:65:F4:28:71:25:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D65A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D395B4A757711F182226FE6CE1D38B0.roa
Signing time: Wed 01 Jul 2026 18:05:49 +0000
ROA not before: Wed 01 Jul 2026 18:05:44 +0000
ROA not after: Sat 01 Aug 2026 18:05:44 +0000
asID: 401783
IP address blocks: 154.223.240.0/24 maxlen: 24
154.223.241.0/24 maxlen: 24
154.223.242.0/24 maxlen: 24
154.223.243.0/24 maxlen: 24
154.223.244.0/24 maxlen: 24
154.223.245.0/24 maxlen: 24
154.223.246.0/24 maxlen: 24
154.223.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120410 (0x1d65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 18:05:44 2026 GMT
Not After : Aug 1 18:05:44 2026 GMT
Subject: CN=6a4556fd-5589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:11:31:04:da:a6:18:e4:10:0d:46:48:b0:
89:c0:6d:f1:99:3f:4b:65:e7:5c:3c:05:6c:bc:87:
44:40:83:3d:50:c3:cc:14:06:10:3e:f1:51:40:91:
df:ac:e2:3a:87:98:52:0d:7b:58:18:b3:9e:69:61:
a3:93:af:ad:f8:76:14:b9:c3:98:d5:0d:5e:7e:0b:
18:24:6f:e8:f9:f5:d6:45:f4:13:e5:6a:99:d2:87:
37:35:dd:c3:8b:d1:b6:b5:75:b4:5c:41:2d:31:bc:
57:07:bd:13:5c:2a:6c:65:ac:b6:24:45:2d:64:7b:
28:57:8e:d9:0d:25:55:90:eb:45:38:36:9c:70:fc:
76:78:3b:d5:0a:ac:18:91:50:0d:b6:30:e0:36:27:
5f:97:6c:3f:00:ef:66:4f:36:67:9e:70:2e:08:c4:
ea:c7:78:42:42:bc:f4:d9:e1:27:5b:bd:ec:ec:02:
4f:97:23:78:29:3d:f9:39:f5:b7:cb:a2:80:60:ab:
d9:98:74:cb:c0:ba:af:84:1e:ac:58:52:10:e9:31:
59:3b:fc:ae:64:dc:9d:66:63:2b:63:57:31:72:7d:
da:71:86:a7:31:62:e2:9a:c0:de:6b:dd:e8:0b:e4:
d4:69:16:ef:7e:a3:7d:08:c1:c0:e6:02:99:db:ae:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:FA:54:77:B0:51:42:19:47:C1:CC:4D:07:65:F4:28:71:25:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D395B4A757711F182226FE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.240.0/21
Signature Algorithm: sha256WithRSAEncryption
77:05:dc:24:6a:d5:94:f4:08:2e:81:c0:ce:b5:f3:52:93:7a:
14:03:29:ee:ff:1b:47:5d:5d:a0:7e:14:d7:6f:bc:b5:79:10:
9b:ac:fa:df:8e:28:cd:a5:21:3b:53:77:2b:96:13:df:d8:7e:
d8:b8:50:e0:99:d3:e4:68:20:da:5e:66:54:0f:65:18:9f:ee:
85:08:d3:b4:f8:14:fc:9b:5d:f6:33:b4:34:d8:de:d5:1d:f8:
b1:bf:30:d1:d4:f1:2d:2c:3b:da:e3:d1:6a:e0:19:36:d7:05:
d0:fd:78:9b:a0:87:2d:6b:6b:18:e6:de:e3:cd:e2:39:cb:72:
06:7e:b5:30:a4:d5:03:8a:33:51:02:6b:3d:f2:fc:15:f0:a7:
f2:12:7d:8a:80:99:f7:d6:e0:bc:28:c5:0c:43:fc:ee:70:04:
15:02:d5:ab:32:b7:2e:0c:4d:f5:80:b2:28:cb:d2:48:df:d8:
11:40:93:88:fc:09:53:2e:e5:3b:31:9f:db:56:32:df:b6:11:
e4:83:23:43:3d:4b:d9:c0:a2:ef:9d:98:2f:55:6c:25:2c:ec:
fc:ac:af:76:42:e9:e9:1a:14:b9:bf:ff:36:85:c2:90:17:9c:
aa:2d:22:30:d2:af:59:59:50:c9:99:9d:1e:74:1b:1c:ae:7a:
66:db:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:17 2026 by rpki-client