Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/080073C6446811F1B19A12D6CE1D38B0.roa
File: 080073C6446811F1B19A12D6CE1D38B0.roa (raw, json)
Hash identifier: KVwLZhq04Wwf/BkTnFf0B/0w4dS4Q5b2g+w+P5SqnvA=
Subject key identifier: 1C:D1:E6:F6:AA:C6:9D:EF:2B:4E:A1:DE:B8:D2:B4:6B:77:C5:FC:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/080073C6446811F1B19A12D6CE1D38B0.roa
Signing time: Thu 30 Apr 2026 07:41:43 +0000
ROA not before: Thu 30 Apr 2026 07:41:38 +0000
ROA not after: Wed 03 Jun 2026 07:41:38 +0000
asID: 198652
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116723 (0x1c7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 07:41:38 2026 GMT
Not After : Jun 3 07:41:38 2026 GMT
Subject: CN=69f307b7-b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:92:f3:31:d8:fa:a6:43:7e:64:b7:6e:2a:
68:32:69:65:12:85:02:ad:11:e7:1d:7d:ae:6d:3a:
70:bb:f3:69:46:53:d7:58:e6:36:6a:b3:c0:43:69:
31:58:5b:a1:2f:c6:b6:6f:a8:2f:1b:b4:22:4c:d9:
e7:c7:d6:8b:26:e3:fc:c5:9a:c4:a2:be:2a:0c:fc:
9c:3a:22:b7:55:b3:20:14:38:f2:ff:f3:05:f1:b0:
aa:be:90:35:bf:7e:fa:87:69:d4:a9:07:45:5e:8a:
cf:a3:54:91:87:9d:23:75:0a:3c:b6:c4:d5:75:2a:
21:1e:6b:f6:af:c4:94:0f:0d:21:0f:14:b9:cc:b6:
fc:bf:8d:de:07:e7:bf:e7:07:f6:8e:a5:f0:67:33:
26:a2:07:91:09:6d:61:c6:d8:2f:a9:37:31:37:7d:
a9:c2:ae:4e:29:43:97:ac:e2:40:14:73:d0:f5:a7:
e2:8e:ce:11:2d:61:05:45:0e:d1:ee:1a:b8:bc:00:
c3:4b:62:d9:0f:97:f3:8b:a8:35:5e:bd:9f:23:fc:
26:f6:89:d8:6b:35:f6:b5:64:1d:fb:ae:71:24:c3:
b9:3a:32:07:01:b4:69:1e:ca:de:9c:88:84:5f:65:
4c:0b:e7:60:82:a2:08:9c:02:8a:2d:ad:a0:46:96:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:E6:F6:AA:C6:9D:EF:2B:4E:A1:DE:B8:D2:B4:6B:77:C5:FC:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/080073C6446811F1B19A12D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
80:00:f6:b0:46:67:29:65:f7:19:bb:92:cb:84:c9:c7:f2:d1:
f3:6a:fa:d0:b5:eb:4b:da:c9:3d:b9:1c:db:02:a1:a4:a5:6b:
f5:5c:b8:f0:48:ee:e7:9e:50:d5:67:7f:e7:31:99:de:44:44:
bc:23:f6:0e:ad:12:0b:e6:69:d0:36:47:bc:ba:4c:25:0a:8e:
ce:06:a3:cf:89:c1:7d:1e:f0:fa:3d:d1:fd:d3:1a:d1:f2:b0:
ca:05:30:c2:e5:2b:a3:fa:7e:58:2b:4d:9f:c7:52:62:f4:70:
52:36:4a:39:4f:58:55:25:c2:8c:bc:b4:30:47:ea:cf:f4:39:
74:e4:3f:f6:f4:36:3e:53:1c:17:ee:be:f0:69:a8:5f:d1:c8:
c0:84:78:90:cf:e0:47:d6:3a:c6:30:4c:89:c6:a3:23:94:4a:
70:9d:36:92:4b:0f:70:88:9c:a4:c1:b4:02:79:5f:d5:9e:3d:
da:d7:9a:ce:18:13:57:1c:81:fe:5c:de:e1:0c:f5:53:09:8f:
b8:fc:84:13:4d:f7:16:4f:c4:8f:5f:96:f5:ac:be:da:30:d4:
37:c0:83:d2:34:d2:cc:dc:5b:fc:48:b5:3e:e1:4e:b8:15:31:
73:6e:15:55:4b:a4:0e:10:e7:68:4c:b3:09:99:5e:74:36:00:
a9:48:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:45 2026 by rpki-client