Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A373292162111F19F73A58EDAE4EC9C.roa
File: 7A373292162111F19F73A58EDAE4EC9C.roa (raw, json)
Hash identifier: FB19saAaRPxaX5gsi9Ldi6X/nZUTF1ebodEYrdbkC20=
Subject key identifier: 6D:B0:FD:25:18:E4:60:01:A5:45:15:4D:2B:DA:C9:B1:3A:4E:A8:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A373292162111F19F73A58EDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 10:20:46 +0000
ROA not before: Mon 02 Mar 2026 10:20:41 +0000
ROA not after: Thu 09 Apr 2026 10:20:41 +0000
asID: 17497
IP address blocks: 154.203.92.0/24 maxlen: 24
154.203.93.0/24 maxlen: 24
154.203.94.0/24 maxlen: 24
154.203.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113899 (0x1bceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 10:20:41 2026 GMT
Not After : Apr 9 10:20:41 2026 GMT
Subject: CN=69a5647e-718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:b7:db:4f:09:f3:05:da:6a:89:44:c5:94:
4a:b9:e7:51:13:5b:a1:58:db:f2:b5:e8:dc:4c:c5:
f1:52:a5:b1:64:39:d3:d0:ae:bc:40:f3:c9:d4:3e:
df:c6:b1:e6:6d:4b:38:96:f4:8f:5d:cb:7e:22:4f:
19:46:ef:25:e9:8c:87:b3:ec:6a:8d:8a:d9:fb:96:
01:d8:e7:29:bb:20:db:5f:10:2b:b8:8f:7a:0f:48:
07:44:96:b3:7e:44:9c:02:83:e6:28:8c:27:f0:a9:
78:c0:b1:99:c2:b3:0c:f4:60:87:ec:6f:e0:f8:aa:
83:01:db:5e:5d:14:0e:b7:a2:e8:b1:d2:65:86:ee:
ba:a1:85:c6:9e:d8:62:fa:e2:7c:3d:35:94:63:e1:
01:36:b5:3c:30:c9:c3:89:a1:8a:3f:86:87:6f:d0:
c1:86:60:26:0e:b4:ad:9a:de:34:d9:7c:5a:69:39:
21:2f:0c:d0:c6:82:ec:a4:df:a9:10:9d:7a:66:25:
7c:3f:7e:e5:ca:9b:b2:06:02:0f:15:32:67:e6:4a:
73:b1:18:2d:96:6e:cc:a0:43:aa:9f:96:e0:80:e0:
dd:4d:f5:b0:a8:79:6a:30:03:5a:c9:aa:f0:c6:fb:
0a:b7:45:21:64:fc:d2:41:87:b9:12:a1:14:45:4c:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B0:FD:25:18:E4:60:01:A5:45:15:4D:2B:DA:C9:B1:3A:4E:A8:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A373292162111F19F73A58EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.92.0/22
Signature Algorithm: sha256WithRSAEncryption
67:65:c2:17:d5:4e:41:a9:a3:d1:61:ef:60:8f:89:0d:41:ac:
ad:e5:54:b2:2a:ed:64:1e:0f:9e:07:63:89:70:58:74:f8:0d:
22:17:dc:1f:f4:3d:db:3d:27:78:d1:6d:6a:5f:73:3f:43:80:
77:ac:ad:84:45:f3:a0:da:f3:90:bb:e4:ab:62:3f:c8:88:4d:
1a:ad:41:57:fb:d7:e4:dc:4f:e7:d2:15:54:ea:57:c5:5c:4a:
f5:d4:df:1d:96:fc:37:75:38:3a:29:24:0c:d7:00:a2:4b:0c:
be:99:b1:a8:a3:76:29:45:65:be:e9:b9:95:bb:1a:dd:71:ef:
b3:82:40:aa:df:43:20:c0:c7:9a:34:fb:6a:dd:5f:d5:18:8d:
c6:81:16:7b:f1:6b:3f:0c:b1:ca:c3:76:e2:5f:72:8b:3b:99:
0f:77:08:75:44:14:8f:b1:e7:88:92:ab:5e:c6:a1:6f:4f:86:
96:bc:95:ab:bc:6d:c9:f7:81:ef:ef:11:06:4f:25:75:73:12:
cd:bf:30:a2:fd:af:fa:d9:d0:aa:1e:30:e1:ef:c5:de:50:dd:
ec:ea:c8:1f:91:ac:b6:12:04:63:8e:18:ec:18:eb:88:81:48:
b3:23:3b:e1:9f:63:9e:5b:bd:00:6f:7b:41:eb:5a:0f:70:c5:
d3:d1:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:48 2026 by rpki-client