Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7165B8A642D011F1B5CC7BA9CE1D38B0.roa
File: 7165B8A642D011F1B5CC7BA9CE1D38B0.roa (raw, json)
Hash identifier: YVUEgjTL32vqb/idhJ/RB4NDgmEJFAvVx97Aj6+zaG0=
Subject key identifier: 1D:6F:78:D9:24:53:29:EF:02:56:48:85:10:46:5C:09:FF:BE:4B:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7165B8A642D011F1B5CC7BA9CE1D38B0.roa
Signing time: Tue 28 Apr 2026 07:04:05 +0000
ROA not before: Tue 28 Apr 2026 07:04:00 +0000
ROA not after: Fri 27 Apr 2029 07:04:00 +0000
asID: 17561
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/24 maxlen: 24
154.201.9.0/24 maxlen: 24
154.201.10.0/24 maxlen: 24
154.201.11.0/24 maxlen: 24
154.201.40.0/24 maxlen: 24
154.223.230.0/24 maxlen: 24
154.223.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116645 (0x1c7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 07:04:00 2026 GMT
Not After : Apr 27 07:04:00 2029 GMT
Subject: CN=69f05be5-b9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:23:6b:9c:c6:6e:a8:63:80:96:ae:c2:1f:
e6:15:68:d9:ac:98:e7:6f:cd:4e:e1:66:d5:7b:be:
bd:ac:89:7c:49:53:f7:a9:df:8b:02:3a:8d:13:fa:
9c:4b:16:77:84:84:23:96:c7:7a:42:f1:61:ff:9e:
b4:db:d8:f6:5b:41:4e:3f:3d:56:a4:3f:41:da:5a:
a5:a5:55:f9:4b:5b:5e:51:ab:3a:8a:45:23:7b:21:
8f:77:62:c1:69:6d:d6:4d:2a:50:9c:52:71:96:65:
0e:ea:3a:b3:a4:be:6f:1d:91:d3:08:d4:35:34:41:
0e:4f:ef:87:21:ea:e9:54:88:a4:92:87:df:67:82:
73:38:9c:af:67:33:87:e0:b3:3e:f7:27:f1:dc:0d:
2d:cb:96:1d:b5:0c:04:7b:68:68:0e:c5:99:22:a2:
01:6c:8b:d3:0b:54:25:75:e7:7c:a8:1b:18:25:59:
24:43:80:83:e2:08:01:40:e8:56:3d:df:f9:0d:8c:
8b:69:a1:94:e8:4d:eb:0f:4a:54:61:2f:5f:6b:fe:
d4:ed:d3:c1:e5:8f:c2:e0:d9:2e:44:45:c3:6d:05:
3f:59:14:a0:e5:f2:f4:d4:02:30:75:73:53:e0:c8:
9f:82:bf:29:0c:93:6f:1c:e1:63:ae:04:99:cf:86:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6F:78:D9:24:53:29:EF:02:56:48:85:10:46:5C:09:FF:BE:4B:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7165B8A642D011F1B5CC7BA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.201.7.0-154.201.11.255
154.201.40.0/24
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:d2:14:db:5a:5a:90:37:ec:2c:3c:1e:01:a7:ea:a8:61:6e:
a9:ab:12:e2:d6:f2:7f:07:9d:72:8f:25:f6:0c:22:05:d7:e2:
1c:e5:b5:86:55:a9:e6:c7:35:ab:28:6b:a1:9c:9b:ce:22:17:
3b:43:bc:75:d6:2c:cd:9e:e2:6c:19:2b:84:bc:cd:c1:ee:79:
32:9e:ca:02:70:51:8f:50:4c:a9:8f:f5:e6:93:c8:d1:da:f0:
a5:fa:5f:7a:b1:6e:3c:dd:99:ca:97:58:b7:e4:eb:71:f7:37:
c5:d5:95:84:7a:4d:1c:4d:a8:0f:ca:5e:98:64:76:a4:b5:fb:
7c:68:42:e0:a2:18:b2:11:41:06:3e:4a:cb:64:58:ed:56:da:
b8:83:ab:69:c4:ac:b6:10:03:c6:0f:e1:5f:97:6a:11:98:01:
d2:74:28:2a:98:99:7d:c6:a8:6d:5f:5e:de:15:25:27:da:8f:
6b:0f:dc:80:b3:ac:50:a0:fc:b7:60:c3:5c:f1:88:ca:33:a7:
72:4a:85:5c:d8:cc:34:e7:63:1b:51:0a:62:ce:62:d7:b0:04:
4f:fb:a1:90:a9:70:c9:b8:7a:f6:e8:1e:21:04:4f:42:af:af:
a9:41:fd:40:01:72:d4:90:4f:e0:de:ff:58:1b:66:09:82:57:
38:1a:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:57 2026 by rpki-client