Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A2BC40C458811F1A64C33A6CE1D38B0.roa
File: 7A2BC40C458811F1A64C33A6CE1D38B0.roa (raw, json)
Hash identifier: 8vL9TcUFaf/2zJUh99c4pUdDoM3aAItlrYGvZk+JnDw=
Subject key identifier: 8D:AB:9B:AA:56:FA:EF:5E:E7:35:28:8D:B9:39:1E:FA:7B:3D:60:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A2BC40C458811F1A64C33A6CE1D38B0.roa
Signing time: Fri 01 May 2026 18:06:30 +0000
ROA not before: Fri 01 May 2026 18:06:25 +0000
ROA not after: Fri 05 Jun 2026 18:06:25 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
154.218.29.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116951 (0x1c8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 18:06:25 2026 GMT
Not After : Jun 5 18:06:25 2026 GMT
Subject: CN=69f4eba5-e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:ea:d1:6c:8d:0d:fe:64:90:99:80:61:a9:
ff:37:84:2a:c1:aa:bc:3a:88:dc:68:95:6f:4a:b9:
83:38:f5:db:fa:79:f5:9b:bb:b6:d7:75:93:ab:24:
ff:32:17:76:9b:a8:29:56:65:2d:42:66:ba:4f:c5:
df:e7:2b:8b:d2:f7:9e:b0:b0:73:f0:68:58:27:8b:
45:99:9d:91:5f:04:f4:08:be:2d:2a:fd:a8:14:cb:
0a:59:12:58:04:74:79:38:4c:70:eb:58:ee:64:7a:
e7:d4:c0:ba:33:52:64:32:c2:50:34:31:48:21:49:
86:23:f0:bf:6a:b2:28:94:7d:df:00:7e:a3:0d:fd:
f2:e0:aa:06:d4:24:7c:92:ea:d3:06:3e:bd:d7:7a:
fb:6c:29:81:89:8b:13:ee:4a:aa:6e:51:d2:9b:7f:
3b:34:6b:da:d5:e2:fa:d1:41:8a:37:78:88:e8:6b:
77:a1:b1:79:59:11:8b:04:9c:1a:97:c5:7f:19:51:
a0:c9:2d:0e:ae:77:c4:0f:73:c1:e0:84:c1:72:50:
14:9a:18:48:a5:1d:54:15:84:03:ac:4c:ae:39:69:
7f:54:a4:e4:4a:b7:c2:44:f9:bb:d8:5c:a0:91:ed:
b6:dd:d3:42:49:bf:26:e3:2e:4b:12:f3:8b:04:c3:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:9B:AA:56:FA:EF:5E:E7:35:28:8D:B9:39:1E:FA:7B:3D:60:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A2BC40C458811F1A64C33A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/23
154.219.196.0/24
154.219.198.0/23
154.221.56.0/22
154.221.61.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e1:c3:31:0e:d0:64:63:26:3e:47:71:2b:98:d7:cf:92:8f:
de:6c:8a:44:30:72:7e:86:f5:b4:25:f4:58:8b:c3:ce:a9:45:
45:0f:db:00:a1:f2:75:c7:de:87:7f:06:23:7d:50:c2:61:e2:
3f:b3:28:fa:fb:74:4b:95:9b:f8:8d:f0:3d:c4:2e:55:c8:41:
37:6b:4c:3c:98:a7:4e:aa:58:92:8d:11:fe:2a:85:74:ac:2c:
74:a3:ca:5a:17:c6:4c:b5:19:85:39:64:42:a9:86:a0:fd:f9:
6c:0d:64:59:cd:c6:1b:6a:85:95:e6:55:85:65:7f:96:a1:8c:
e6:ac:f6:9d:28:4b:c8:7c:bd:3d:aa:89:b5:9d:96:7b:84:dd:
33:2d:ca:4f:1e:32:93:4f:50:92:10:fa:4b:d9:bf:eb:27:b4:
57:aa:44:34:20:c1:a7:14:b0:02:f5:10:14:9a:8f:ef:c5:14:
2e:1d:c4:82:d2:35:cb:d4:d9:07:e0:31:d5:35:54:29:b5:38:
c4:5a:6e:f7:0d:3c:1f:6e:5b:e0:e4:f5:0a:97:63:52:2b:53:
e8:97:e3:cd:b8:a3:7b:55:c1:03:86:c2:99:6a:6c:c6:22:1b:
70:4c:30:6a:7f:c4:99:0d:34:4b:0a:1f:48:dd:d2:df:9a:2f:
7f:23:c0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:58 2026 by rpki-client