Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7D4CFA68F911F18F3A27ACCE1D38B0.roa
File: 7C7D4CFA68F911F18F3A27ACCE1D38B0.roa (raw, json)
Hash identifier: 36pgIN2us+j35x0eP50kccf70s4SbhYuPFMIxwgIvzY=
Subject key identifier: 72:A9:89:B9:C5:59:25:00:35:A0:AC:21:EA:FA:F1:DF:D0:63:6E:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7D4CFA68F911F18F3A27ACCE1D38B0.roa
Signing time: Mon 15 Jun 2026 20:33:37 +0000
ROA not before: Mon 15 Jun 2026 20:33:33 +0000
ROA not after: Mon 07 Sep 2026 20:33:33 +0000
asID: 23674
IP address blocks: 154.192.0.0/16 maxlen: 24
154.192.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119535 (0x1d2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 20:33:33 2026 GMT
Not After : Sep 7 20:33:33 2026 GMT
Subject: CN=6a3061a1-86fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:84:79:19:47:0b:c3:68:0c:13:f3:24:c2:
93:ad:84:95:c0:aa:8d:b7:23:e1:04:03:06:15:80:
ac:15:24:6b:2a:07:1c:ba:4d:b6:17:d6:c3:7a:a8:
37:15:62:48:69:01:2d:20:83:e9:e5:96:ed:6c:e5:
4c:b7:d9:8c:3f:ac:a4:6a:2f:4e:5b:1a:df:38:27:
5f:22:58:f7:dd:b7:78:01:76:55:b5:88:cc:40:7f:
ce:56:4d:ea:7d:4a:2e:ae:36:33:9f:1d:70:8d:82:
bd:4c:f4:8c:b5:b8:86:6e:a5:65:11:6d:9b:eb:01:
a4:84:5e:79:38:09:8c:e5:45:45:50:58:1f:fb:e9:
42:c9:ce:a6:cc:eb:e9:d1:9a:d7:40:8a:ff:3a:a9:
ac:00:6e:d7:42:56:4a:c7:30:c5:6f:75:75:b2:e0:
20:c6:1f:10:9a:61:3e:34:f0:97:7f:ac:bb:24:9c:
5b:b0:38:cf:28:90:4a:7f:8e:1c:e6:0a:59:3a:8c:
49:ef:cc:69:72:eb:54:e5:0d:ce:b2:e9:d9:41:3f:
9e:33:ef:11:42:51:cc:25:cc:d5:4d:3e:60:74:b9:
d9:9b:51:10:92:79:a5:0e:c6:ba:5f:8c:24:7b:27:
42:df:5c:1e:f5:eb:3f:61:ab:08:99:32:d1:c7:d8:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:89:B9:C5:59:25:00:35:A0:AC:21:EA:FA:F1:DF:D0:63:6E:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7D4CFA68F911F18F3A27ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:44:bb:ac:cf:f2:dc:ad:d6:1e:66:71:51:f4:00:0c:34:55:
77:a5:d4:96:d8:06:17:5e:db:15:01:1d:44:46:02:3a:65:cd:
7e:83:f7:d9:77:87:6a:71:42:22:ff:3a:0c:95:47:58:7e:e7:
da:dc:a5:48:65:7c:3f:c3:56:6e:e7:9d:ec:09:34:3e:50:24:
ca:12:ca:49:43:43:ce:d5:40:a5:a7:e8:cc:72:e4:93:1c:14:
5b:cb:d2:2d:09:cd:eb:2d:09:e7:e3:7c:44:61:dd:50:af:64:
50:54:c7:15:e6:ee:50:40:23:aa:62:5b:27:f9:07:69:e5:77:
33:2c:81:f6:d6:23:17:30:fe:65:18:fc:59:b3:b1:8f:0c:75:
09:d9:51:5c:7c:f8:3f:8f:64:de:1c:c4:4d:af:e9:6f:28:c0:
82:f6:e8:69:53:25:bc:47:f6:a9:e4:90:f0:3b:cb:6c:bf:07:
1c:b0:b7:0d:34:db:db:ad:e4:48:1c:69:2d:58:7d:51:ff:d1:
1f:9a:43:6c:54:9a:7b:80:12:9b:7a:09:4c:d3:8b:e2:bc:b8:
f2:eb:0c:a7:ea:22:c2:e8:37:7b:59:06:6e:b6:77:1a:98:c5:
ce:ec:58:5a:fb:9f:9e:33:3b:10:56:0e:e2:75:c5:50:ae:a5:
2e:ff:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:22 2026 by rpki-client