Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72797E8A7CC811F1B7905A14CF1D38B0.roa
File: 72797E8A7CC811F1B7905A14CF1D38B0.roa (raw, json)
Hash identifier: HZStG25XzSTAy5uaUjJliB+gOd+gPLrSe+ik0UhTwH0=
Subject key identifier: 72:F2:80:10:8E:74:03:DE:AA:FF:93:DA:6D:34:C0:28:30:11:03:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D81C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72797E8A7CC811F1B7905A14CF1D38B0.roa
Signing time: Sat 11 Jul 2026 01:32:58 +0000
ROA not before: Sat 11 Jul 2026 01:32:53 +0000
ROA not after: Tue 10 Jul 2029 01:32:53 +0000
asID: 17561
IP address blocks: 154.198.252.0/24 maxlen: 24
154.198.253.0/24 maxlen: 24
154.198.254.0/24 maxlen: 24
154.198.255.0/24 maxlen: 24
154.202.32.0/24 maxlen: 24
154.202.33.0/24 maxlen: 24
154.202.34.0/24 maxlen: 24
154.202.35.0/24 maxlen: 24
154.202.36.0/24 maxlen: 24
154.202.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120860 (0x1d81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 01:32:53 2026 GMT
Not After : Jul 10 01:32:53 2029 GMT
Subject: CN=6a519d4a-79a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:57:6a:fa:c3:dc:34:d2:0e:e7:11:39:d4:2b:
c1:d4:61:8b:b0:1b:67:ff:7b:b4:15:20:2b:a9:02:
fa:9f:73:82:90:e2:f8:5a:e4:ed:b0:38:8a:8f:44:
2c:ef:f2:d7:e3:91:2f:39:35:20:f3:73:56:b1:c0:
af:de:5f:82:8c:e8:f4:87:61:db:9d:80:d6:92:63:
41:f4:ec:f1:e3:9a:64:48:e3:c2:c1:cb:3a:1a:17:
98:fe:ff:c7:80:ea:9c:e9:b4:1f:76:3d:18:cd:f3:
2a:a2:f2:5d:c1:ae:c7:83:de:7b:05:f9:48:5e:dd:
8f:e9:07:e3:0c:c8:59:45:69:49:78:29:ca:ed:6d:
c5:1f:3a:e2:04:50:a5:11:d5:14:f3:98:ee:09:48:
3b:ee:6c:b9:32:7d:fa:d6:b5:d6:8d:1b:f4:90:70:
c5:23:0a:fb:79:b7:5a:2f:ec:7a:e6:8d:b1:52:39:
52:14:6e:f9:56:2e:61:64:7c:57:2e:95:69:c0:85:
4b:28:c2:a7:10:e1:05:c3:6c:2b:73:b4:75:dd:27:
af:18:37:4b:3d:c2:eb:d6:fb:c5:38:ec:27:a6:cc:
65:98:9e:cf:8d:6d:a7:ce:e4:4e:f7:08:e2:17:6a:
2e:83:78:18:6d:83:2e:65:0c:e5:0b:51:5f:3d:88:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:80:10:8E:74:03:DE:AA:FF:93:DA:6D:34:C0:28:30:11:03:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72797E8A7CC811F1B7905A14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.252.0/22
154.202.32.0-154.202.37.255
Signature Algorithm: sha256WithRSAEncryption
37:d3:64:81:09:da:ac:38:41:70:8b:44:d5:6e:f7:a9:9c:ce:
81:8b:20:3e:71:c3:15:dc:56:e9:e8:81:30:6e:f8:b2:42:08:
b0:f5:2f:0c:23:a6:69:75:3e:da:83:17:3f:ea:ee:03:27:da:
b3:8b:64:fd:f8:a5:4e:3e:ed:6a:21:1d:35:23:ad:ba:18:41:
e8:7e:e8:75:b6:af:ec:19:5f:6e:3c:dc:bb:88:41:37:4f:c9:
01:20:01:ee:7b:7d:ce:3f:84:7f:e0:9f:99:2f:f2:47:27:31:
a2:80:a6:45:cd:6a:d3:fe:2b:b5:3e:fd:9e:2b:af:c3:8b:0e:
e2:15:c4:e7:c7:9a:02:cd:49:b6:af:63:46:6b:4e:fb:64:b7:
6c:fc:33:a9:19:99:0e:31:28:85:80:99:3b:0b:84:97:77:08:
a8:fd:bc:55:17:37:14:f5:a8:af:6a:00:62:7c:0d:61:e2:c3:
14:d4:23:f2:5a:1d:86:dc:d6:b6:82:63:ab:c9:89:fa:a9:18:
71:49:31:6b:dc:65:91:df:38:5d:1d:24:35:6f:dd:0e:dd:7e:
a0:c4:bc:b7:be:c4:2c:d0:be:11:4c:28:5d:77:cc:c6:ef:7a:
cc:8f:cf:0c:0d:cd:8d:c9:de:b0:80:d6:19:c3:a4:b2:f6:49:
19:9b:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:16 2026 by rpki-client