Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C30EA30949211F1B82A31BCCE1D38B0.roa
File: 7C30EA30949211F1B82A31BCCE1D38B0.roa (raw, json)
Hash identifier: YcdY6dKRxdFnTkh23Lcpaqqrqes3vHLHaa0O6130rNs=
Subject key identifier: 30:49:56:FA:0D:FD:AF:B7:F9:2A:B4:67:28:BD:F7:47:DA:8F:EE:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C30EA30949211F1B82A31BCCE1D38B0.roa
Signing time: Mon 10 Aug 2026 08:07:10 +0000
ROA not before: Mon 10 Aug 2026 08:07:06 +0000
ROA not after: Thu 17 Sep 2026 08:07:06 +0000
asID: 22773
IP address blocks: 154.198.22.0/24 maxlen: 24
154.198.23.0/24 maxlen: 24
154.198.24.0/24 maxlen: 24
154.198.25.0/24 maxlen: 24
154.198.26.0/24 maxlen: 24
154.198.27.0/24 maxlen: 24
154.198.28.0/24 maxlen: 24
154.198.29.0/24 maxlen: 24
154.202.78.0/24 maxlen: 24
154.202.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122322 (0x1ddd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:07:06 2026 GMT
Not After : Sep 17 08:07:06 2026 GMT
Subject: CN=6a7986ae-e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:13:cd:e7:59:d5:a3:e7:1a:9b:66:4f:c2:
e9:29:5b:2d:99:3b:62:04:a1:72:aa:f5:3b:2f:88:
95:bd:27:8b:46:d2:4d:8c:ac:3f:5a:8c:60:6e:58:
c3:ad:f3:97:b2:44:6c:9f:cc:10:8e:01:b5:45:48:
73:ce:14:01:15:4f:18:e4:6a:df:87:2c:0b:3a:e9:
84:63:f4:78:a6:81:5c:5f:40:3b:6f:e6:2a:37:2f:
8b:45:e6:60:34:dc:84:a6:82:ae:88:24:46:26:d7:
4b:27:95:7b:bd:f2:d6:3a:7b:e5:ae:e1:ba:43:02:
f5:a5:3e:91:0f:98:8c:f0:97:c5:b9:a4:09:c5:e7:
93:78:81:fa:df:10:80:04:e1:ab:8c:aa:2c:9d:6a:
44:10:59:41:f9:43:0e:d1:37:18:9f:88:d7:77:35:
d9:62:44:01:ee:19:e6:d9:f5:38:3f:d5:e6:67:45:
1b:97:59:12:5d:45:48:fc:b0:8b:44:c2:db:96:7c:
31:2c:39:62:48:d1:90:5b:89:1a:1b:25:68:dc:48:
fa:cd:01:75:20:63:61:71:b8:59:ca:77:54:a7:35:
82:90:0d:ed:6b:4e:54:0e:c0:54:c5:ae:76:ad:d0:
34:b2:5d:82:48:5a:d6:74:35:10:09:be:6a:d8:75:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:56:FA:0D:FD:AF:B7:F9:2A:B4:67:28:BD:F7:47:DA:8F:EE:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C30EA30949211F1B82A31BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.22.0-154.198.29.255
154.202.78.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:3f:0b:35:a9:cf:2f:e6:88:df:2c:cc:8c:26:52:f2:68:25:
45:7b:c9:b3:33:9a:5b:29:08:35:5e:27:da:96:eb:31:b3:aa:
a9:44:ae:11:e7:f4:3d:11:90:99:a9:2c:75:18:16:fd:b9:44:
62:d9:52:0f:62:f7:61:cc:c2:b1:f9:1e:64:61:09:e4:dd:6b:
6f:b2:66:ee:f0:49:21:26:86:1b:1a:f5:f3:5b:9b:5c:e8:cd:
26:92:53:43:05:e4:83:3a:1f:26:12:7c:cf:e4:5e:6e:8c:87:
b2:1b:3d:eb:e0:56:04:af:fb:fe:f0:cc:16:07:f5:1b:96:7c:
91:86:a6:03:1b:e9:68:ea:9c:7c:47:13:f5:e8:1f:25:22:f1:
61:f2:b2:27:28:57:97:98:a7:a6:b1:86:ab:4d:92:f3:01:05:
ac:08:1e:9b:1a:fc:fd:2e:dc:7f:f3:40:00:54:ea:9d:c7:95:
55:76:2d:4b:2b:d0:a1:1f:a1:7e:b7:b4:0f:4e:f9:b8:9c:b6:
15:bd:51:d0:6e:a1:72:71:2c:01:9b:ab:43:bf:e1:aa:3b:aa:
cb:80:9c:00:38:31:2e:6e:5d:c6:f5:91:f2:a8:0a:4a:b6:e0:
2f:af:73:00:1b:a8:44:b3:5c:67:35:8d:bd:c5:c5:ed:21:48:
3a:9f:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:37 2026 by rpki-client