Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9A5412491F11F1B4420305CF1D38B0.roa
File: 7B9A5412491F11F1B4420305CF1D38B0.roa (raw, json)
Hash identifier: cQfvUHGozxD5BgJWin3X8dz4xrr7IC96Fimski3ohR4=
Subject key identifier: 58:EC:C6:CA:F7:D8:01:AE:79:AA:6E:6F:AA:E0:B5:12:30:DE:EE:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C97D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9A5412491F11F1B4420305CF1D38B0.roa
Signing time: Wed 06 May 2026 07:44:59 +0000
ROA not before: Wed 06 May 2026 07:44:55 +0000
ROA not after: Thu 11 Jun 2026 07:44:55 +0000
asID: 401664
IP address blocks: 154.81.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117117 (0x1c97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:44:55 2026 GMT
Not After : Jun 11 07:44:55 2026 GMT
Subject: CN=69faf17b-fa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:27:26:9e:cb:3e:8c:4f:95:09:02:6a:7d:03:
98:a0:87:df:18:5c:39:53:67:e1:e3:03:62:8c:7e:
bf:2a:46:ae:49:6f:5f:cc:b7:e1:ba:67:ee:5c:db:
87:63:ae:07:99:90:d2:38:49:4b:f6:e7:91:79:2f:
0a:ee:17:32:02:dc:fb:b1:f5:d4:1b:1c:df:b0:7a:
27:38:78:bc:b4:34:48:3f:bf:af:c9:3b:47:f1:2e:
1c:85:0c:48:11:94:96:61:42:7f:2c:2f:cf:db:9c:
7a:0a:4f:ba:86:a2:8c:0a:c4:d2:f2:6e:6b:d5:f3:
b5:5d:d8:fe:77:bb:5a:1b:0d:0d:03:45:dc:0a:67:
08:df:15:bb:48:8a:14:ac:0f:59:0a:e0:61:24:a9:
3e:3a:4e:ba:4b:23:1d:cf:a8:02:31:82:c4:6d:b8:
0e:ad:46:0c:d0:0d:8b:aa:d9:fb:74:02:e9:6f:8c:
be:57:58:c3:93:5a:17:25:8a:3d:97:47:77:74:81:
9b:80:2a:f1:f1:81:b3:d8:de:79:72:0e:04:18:5c:
d7:05:d8:54:fe:ed:40:19:72:60:f1:d9:ed:e2:56:
30:2f:ca:c0:8c:b5:d3:95:37:19:7b:e6:84:bb:f5:
23:36:1d:51:fb:de:31:d7:7f:8e:39:c6:12:e8:a1:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:C6:CA:F7:D8:01:AE:79:AA:6E:6F:AA:E0:B5:12:30:DE:EE:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9A5412491F11F1B4420305CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:53:5b:76:33:2b:65:fa:8c:9f:a1:e3:63:48:a4:99:ce:71:
6a:65:68:c1:17:7e:54:6e:74:aa:e9:0c:6b:78:dd:ad:30:2f:
b1:45:d9:78:08:04:38:a6:a4:24:ac:84:e2:31:23:c8:30:5a:
d6:21:f4:f3:b1:f2:c1:7c:e5:8f:1f:b4:55:74:0a:2b:39:71:
f7:c0:3e:d7:96:3b:a3:fe:a9:7a:50:f3:4a:4b:5d:c1:70:35:
07:13:2a:4a:ce:e6:39:b6:97:32:5d:cc:cc:36:c0:a1:4a:b3:
6d:59:9f:30:c0:12:0c:5c:8b:a6:08:25:0a:a1:26:3e:f5:98:
65:01:89:0a:a2:5e:d2:95:7f:9a:47:59:44:c1:48:e0:b6:f6:
0c:90:c0:2e:ac:c0:c9:5b:04:2b:81:a5:4a:70:84:fc:df:f3:
0d:46:fa:39:4e:de:40:aa:fd:96:24:82:bc:f3:78:86:fc:70:
53:92:22:e5:6a:9c:87:a8:81:df:0a:25:01:9d:c2:a2:6c:6e:
45:81:8d:8a:ad:0e:9e:a3:b3:59:47:20:77:27:4f:2a:7b:b1:
85:ac:cf:e7:56:c6:4c:05:7e:a2:2c:ac:ef:9e:4d:22:a6:2a:
76:52:7a:13:07:03:28:4a:a3:b9:d7:d7:6f:7a:04:6f:55:db:
48:19:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:51 2026 by rpki-client