Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B1C2F803EC311F1A0A841E4CE1D38B0.roa
File: 7B1C2F803EC311F1A0A841E4CE1D38B0.roa (raw, json)
Hash identifier: 51PdXKlI2EblBMXlIrHDHLlQRo+kpSGCkjP/8T1wqRs=
Subject key identifier: 13:C4:A3:4D:9E:39:7D:6D:0A:F0:ED:5C:E1:10:55:04:E0:1F:5C:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B1C2F803EC311F1A0A841E4CE1D38B0.roa
Signing time: Thu 23 Apr 2026 03:21:13 +0000
ROA not before: Thu 23 Apr 2026 03:21:09 +0000
ROA not after: Mon 01 Jun 2026 03:21:09 +0000
asID: 395793
IP address blocks: 154.92.205.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116407 (0x1c6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 03:21:09 2026 GMT
Not After : Jun 1 03:21:09 2026 GMT
Subject: CN=69e99029-3796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:08:d3:07:97:dc:07:1c:c1:3b:3f:5c:8a:
ec:b4:6e:a8:24:c1:f5:24:68:d2:4c:46:76:b1:15:
5a:17:5a:02:5a:43:b1:87:0e:58:4e:b4:79:cf:c0:
7b:70:41:55:3e:aa:db:a8:0d:49:33:4d:19:bf:36:
ed:11:65:26:bb:b6:03:52:90:c3:b6:c4:3d:f0:29:
b9:a5:f4:55:4d:34:26:70:18:be:e4:13:81:4c:bd:
14:32:6d:a9:1d:4e:80:c6:30:e6:9f:df:28:65:b6:
fc:b2:b3:fb:51:18:71:d7:2f:18:43:9b:91:f2:db:
d3:0c:95:3f:c7:48:2f:c0:25:2a:f2:db:56:83:75:
73:fc:67:72:e2:ec:82:12:52:4c:da:37:4e:7b:ee:
fd:1e:b7:ea:e6:02:21:79:00:87:dc:27:bf:66:61:
c9:c8:0c:86:df:05:fa:c1:36:f3:10:3b:1a:ad:69:
ed:48:02:d5:ee:29:1e:6f:f9:16:38:0d:9f:ec:d6:
73:2c:dd:12:40:a7:a8:d9:96:cc:e3:26:e8:a0:dd:
4e:69:bf:bb:73:c5:6a:ac:73:41:0d:10:ed:46:ea:
ec:ca:49:7c:54:85:95:8d:57:b5:8e:4d:55:d5:c5:
fb:02:cc:82:0f:37:2a:e4:92:1d:a8:16:d8:72:b6:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:A3:4D:9E:39:7D:6D:0A:F0:ED:5C:E1:10:55:04:E0:1F:5C:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B1C2F803EC311F1A0A841E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0/24
154.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
20:61:02:db:bf:36:68:a4:ad:fc:3c:e4:14:4b:37:3b:2d:5d:
20:36:ec:d4:f1:33:53:66:1a:12:60:75:2e:da:b4:1c:c0:c0:
3a:b9:2c:94:65:8f:69:c6:20:e2:66:93:8c:1c:1f:07:41:ba:
e3:f0:92:2d:b2:fe:16:9f:57:24:ca:56:93:af:3d:4f:2e:17:
75:e7:7d:29:c4:68:2c:87:81:84:34:c2:2b:88:cd:28:06:64:
47:bb:e9:a9:a1:1c:bf:ce:bc:b5:79:20:4e:df:ec:22:d9:0c:
c6:cf:f1:ac:cb:4e:86:84:96:c4:cf:b1:6e:bc:e5:10:9b:9e:
68:4d:d8:2e:2d:5f:c4:ff:aa:b3:85:ee:3e:e5:ae:2f:c3:81:
71:c9:47:e1:47:d6:98:58:04:03:bd:49:d3:fc:3c:6d:ef:8b:
be:93:2a:96:a1:8d:a3:1e:68:9a:32:fb:ae:6e:37:12:3c:a7:
18:fb:d2:3b:31:9a:9f:59:ee:7c:b9:bb:b1:b4:79:33:85:00:
7b:df:ab:0f:ef:4c:b6:8b:40:b2:d5:a7:00:4a:c8:49:e6:bf:
69:52:9a:4d:7d:a7:6b:7d:e0:4f:99:2c:58:99:53:2d:f0:79:
9e:f5:bf:c1:fe:3a:3b:2f:6d:79:f9:34:83:11:08:64:e9:a0:
e8:2d:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:58 2026 by rpki-client