Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07604DD4447611F181CD63A9CE1D38B0.roa
File: 07604DD4447611F181CD63A9CE1D38B0.roa (raw, json)
Hash identifier: 7Vh6NSH24K20CzF+c14YMM4xp0zeH8yFxGYBreZdJA8=
Subject key identifier: 79:F8:C4:3D:7C:F8:60:89:4C:E9:1E:38:8D:A6:B3:1A:13:96:D9:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C811
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07604DD4447611F181CD63A9CE1D38B0.roa
Signing time: Thu 30 Apr 2026 09:21:55 +0000
ROA not before: Thu 30 Apr 2026 09:21:50 +0000
ROA not after: Sat 30 May 2026 09:21:50 +0000
asID: 401783
IP address blocks: 154.90.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116753 (0x1c811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:21:50 2026 GMT
Not After : May 30 09:21:50 2026 GMT
Subject: CN=69f31f33-f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:4e:21:33:e1:e7:4c:c3:bb:bb:b1:02:fc:
45:d7:2d:26:a8:f5:04:35:ed:35:99:05:57:c9:66:
2d:c3:f3:a9:ca:b2:1b:3d:f4:ba:49:f8:6d:82:4b:
5a:47:5c:58:46:22:10:b0:b8:8f:a1:c5:54:23:ec:
0b:43:5f:12:a6:0d:e3:1a:65:17:cc:85:77:2c:4f:
ff:22:ec:d3:63:27:26:55:0c:8c:0b:09:ab:09:d0:
38:f0:b7:dd:90:64:5a:69:88:03:c1:fa:d4:27:0a:
1c:80:51:fe:52:1e:cd:d5:ee:33:50:75:b6:59:8a:
d7:35:d5:6f:0e:a9:53:50:0f:10:1d:1b:d0:8d:ff:
76:6e:99:71:69:b8:86:df:42:6a:47:0f:91:24:42:
ab:f4:20:97:34:ba:8d:71:ec:60:05:2c:2e:01:4b:
dd:8f:29:33:c2:4b:e4:8e:6d:8c:52:2b:35:35:bd:
ea:d4:50:e9:13:77:5b:60:51:78:b5:99:1f:85:a7:
7f:47:1b:13:4d:b6:a1:6a:6e:90:01:0e:71:11:90:
13:67:e4:2a:45:07:54:aa:bd:d6:c5:c8:99:90:70:
d0:c6:3c:d1:59:4e:43:0a:ec:c8:53:99:4c:ed:11:
c4:7f:37:f2:1b:5c:da:36:e0:26:29:dc:8a:7e:bc:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:C4:3D:7C:F8:60:89:4C:E9:1E:38:8D:A6:B3:1A:13:96:D9:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07604DD4447611F181CD63A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8e:af:9f:12:23:c1:81:ad:0b:ea:6a:0a:91:d4:76:5f:be:
bc:0e:45:03:0b:94:4c:91:a2:2c:38:4f:c6:ad:64:34:51:05:
05:ee:c8:85:e1:37:99:2a:2a:1f:e9:3b:14:04:ec:0e:fd:ce:
20:66:9b:69:73:56:9e:65:74:06:17:0c:ab:4f:79:25:85:d9:
03:f8:fa:04:76:9b:b5:f7:43:c8:75:f5:9f:e6:a7:55:a9:0c:
39:e4:dc:ed:14:99:4d:a2:ec:21:61:cd:e4:7e:ed:fe:ed:1a:
7e:6e:f3:b2:08:16:a8:e6:56:79:47:af:b6:bb:30:6a:93:88:
91:12:6d:57:34:fa:1f:d6:0f:4a:b5:86:fc:a7:0b:de:ac:df:
63:4e:56:b5:f0:01:7f:2a:b2:97:6a:1b:b3:10:1e:88:3a:d7:
25:5e:91:56:a7:8d:f6:ae:80:11:63:5f:88:35:97:9b:d1:e1:
33:29:25:4b:fa:7c:59:d0:f8:d3:a8:42:c3:8b:ab:c4:f9:13:
df:10:f0:e2:5e:52:3d:b2:5d:aa:67:8b:f9:6a:74:69:cd:a8:
d6:27:14:5d:99:91:7e:bb:93:34:46:b9:93:ba:ac:b5:61:af:
e3:cf:69:92:dc:7e:db:c1:42:33:5f:f2:9a:82:33:d9:7c:9c:
6d:b2:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:58 2026 by rpki-client