Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/780CCBEC455811F19C213D06CF1D38B0.roa
File: 780CCBEC455811F19C213D06CF1D38B0.roa (raw, json)
Hash identifier: c1rWV172nohsXNodyUY6tKjOM7EyluXJqmpWo7tGNrQ=
Subject key identifier: 4E:D9:C9:F7:77:83:1C:DD:3D:26:59:B8:85:68:8D:79:3A:9E:45:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C889
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/780CCBEC455811F19C213D06CF1D38B0.roa
Signing time: Fri 01 May 2026 12:22:50 +0000
ROA not before: Fri 01 May 2026 12:22:45 +0000
ROA not after: Mon 30 Apr 2029 12:22:45 +0000
asID: 17561
IP address blocks: 154.207.67.0/24 maxlen: 24
154.207.68.0/24 maxlen: 24
154.207.69.0/24 maxlen: 24
154.207.70.0/24 maxlen: 24
154.207.71.0/24 maxlen: 24
154.207.72.0/24 maxlen: 24
154.207.73.0/24 maxlen: 24
154.207.74.0/24 maxlen: 24
154.207.75.0/24 maxlen: 24
154.207.76.0/24 maxlen: 24
154.207.77.0/24 maxlen: 24
154.207.78.0/24 maxlen: 24
154.207.79.0/24 maxlen: 24
154.207.80.0/24 maxlen: 24
154.207.81.0/24 maxlen: 24
154.207.82.0/24 maxlen: 24
154.207.83.0/24 maxlen: 24
154.207.88.0/24 maxlen: 24
154.207.89.0/24 maxlen: 24
154.207.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116873 (0x1c889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:22:45 2026 GMT
Not After : Apr 30 12:22:45 2029 GMT
Subject: CN=69f49b1a-c727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:eb:97:0a:18:e9:06:f9:61:d6:d4:1d:0e:
f3:d6:63:20:61:d9:8e:d0:e9:b1:d5:c4:64:85:90:
29:e5:61:28:07:8c:64:a2:61:0b:63:df:39:81:a7:
bd:56:01:2d:95:61:ef:f3:ba:86:ea:24:b3:d3:38:
5b:2b:47:3c:bc:83:b4:d0:7d:bf:c3:0b:45:be:55:
a2:c8:fc:23:cb:f5:b3:0a:a4:38:f6:f8:6d:91:f6:
da:3c:59:5a:db:d4:60:45:45:9c:d0:50:d2:d7:be:
1c:32:2d:f4:ba:b6:bc:e1:a1:d3:97:1a:f4:fc:2c:
40:f1:86:9e:6f:d0:99:08:f0:e7:15:b0:6f:99:bb:
f0:13:c5:6a:2d:72:eb:8b:27:d6:20:91:f7:72:d4:
0a:1d:8a:5c:91:93:bf:60:e6:ac:ee:fe:68:20:d5:
45:39:7e:e2:27:a1:5d:2f:e3:ac:ac:8d:fd:b3:81:
8c:23:2f:94:fc:b1:1e:81:01:ff:c8:05:b4:7b:17:
20:b2:bd:3a:bc:17:b7:07:b3:35:ca:45:67:52:9c:
34:b1:40:63:41:64:ad:7c:49:f7:b8:af:42:0f:ee:
58:ae:f0:ba:a1:9d:ff:6a:a6:06:4a:b3:88:85:ee:
c2:b9:04:3a:f7:b1:82:db:67:40:5d:a9:df:bc:b3:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:C9:F7:77:83:1C:DD:3D:26:59:B8:85:68:8D:79:3A:9E:45:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/780CCBEC455811F19C213D06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.67.0-154.207.83.255
154.207.88.0/23
154.207.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c5:a5:59:c1:08:d2:f8:65:f4:75:d3:d9:ae:18:2f:83:2d:
ba:51:6b:cf:bd:72:8a:0c:c2:d3:21:f4:9e:f9:49:bd:df:bf:
69:25:2c:97:86:c6:c4:d1:7a:fb:a7:30:dd:b8:d8:eb:ab:7e:
71:6e:e7:8f:92:9f:54:12:74:3d:03:6d:30:b6:ec:76:23:82:
c3:b9:d5:65:df:8a:43:50:b2:78:ad:42:b6:8a:41:b4:50:df:
9f:ba:20:7b:f2:42:74:89:00:2e:d7:33:b1:e7:a4:77:fc:49:
b6:47:6b:ef:74:4f:df:5b:04:7a:6d:cb:bc:f7:d1:f4:83:61:
a1:af:49:b2:77:45:56:5b:34:af:43:1e:a1:16:10:be:96:78:
69:b4:d0:c9:77:7e:b4:24:54:d4:2c:7a:6c:ee:5f:e4:4c:db:
02:63:a3:bf:8a:42:0f:c4:fd:5d:63:da:14:1f:a1:56:da:d9:
f2:59:1c:9c:49:6b:87:48:63:aa:71:9d:7f:96:88:f8:51:37:
4a:44:c1:d0:52:cc:1a:5a:16:4a:4c:99:73:dc:9d:85:05:0e:
e3:e4:19:a0:80:e2:39:42:18:b5:2e:85:2a:1c:61:bc:c6:0c:
5c:38:e2:19:27:6c:f4:86:52:4a:67:23:31:1a:2f:36:fb:32:
3a:d1:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:00 2026 by rpki-client