Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E45CB70508511F1BDF986F8CE1D38B0.roa
File: 7E45CB70508511F1BDF986F8CE1D38B0.roa (raw, json)
Hash identifier: yEo5ytrQT7et/cIiPT/mQmeHdbXb4y9lMkLbCLLGt0U=
Subject key identifier: 98:CE:99:75:FE:3D:1A:15:AF:64:6F:BE:66:08:79:3A:50:BE:20:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E45CB70508511F1BDF986F8CE1D38B0.roa
Signing time: Fri 15 May 2026 17:42:51 +0000
ROA not before: Fri 15 May 2026 17:42:46 +0000
ROA not after: Tue 16 Jun 2026 17:42:46 +0000
asID: 17497
IP address blocks: 154.82.19.0/24 maxlen: 24
154.94.2.0/23 maxlen: 24
154.94.2.0/24 maxlen: 24
154.94.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117706 (0x1cbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 17:42:46 2026 GMT
Not After : Jun 16 17:42:46 2026 GMT
Subject: CN=6a075b1b-644d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:b2:3c:9a:c3:1f:28:13:01:71:19:3a:38:
f0:b4:89:ee:cc:73:11:3c:c3:55:59:48:34:85:b6:
16:fc:5d:a4:56:26:32:93:d9:14:c1:8e:46:f2:a6:
4a:68:ab:a4:d5:31:6a:e0:1b:7c:16:15:9c:4b:94:
20:6b:1c:35:7f:0d:d3:02:63:63:6e:90:65:c1:91:
9d:3c:5b:08:21:61:50:0c:4b:71:51:b0:b0:7a:f2:
c9:2b:82:f5:31:12:e2:83:49:65:b1:6c:25:5f:b0:
a5:67:f1:d4:9b:74:bb:14:31:42:f0:3a:7c:6a:15:
c6:b0:f6:ce:32:15:ab:4d:19:a7:5f:1c:1c:b8:99:
49:d7:d4:ff:95:a9:97:c7:44:00:6b:6d:57:99:1f:
e1:1a:44:9e:b6:a4:04:78:15:f8:30:52:2f:e2:e2:
06:06:81:84:11:59:44:84:7b:80:4f:dc:c3:4a:74:
97:e8:66:54:87:12:0b:a6:f8:34:e1:bb:e0:e8:3a:
53:d7:7b:63:2a:eb:c8:ef:02:cb:17:4e:0f:95:aa:
6b:84:1e:93:22:96:b0:0f:e9:94:09:69:8c:fa:f7:
0a:29:16:2e:62:18:2a:8b:18:ac:a8:de:fc:5d:80:
e6:d4:ba:52:ae:cc:01:40:59:aa:e2:3d:73:34:e0:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:99:75:FE:3D:1A:15:AF:64:6F:BE:66:08:79:3A:50:BE:20:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E45CB70508511F1BDF986F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
68:18:04:74:af:41:31:3e:c9:20:2e:35:d5:99:ed:b5:55:61:
4e:dc:43:bd:a3:8d:1d:55:8f:89:2b:83:12:02:46:56:a5:e2:
c5:0c:51:84:84:5b:01:84:26:c7:7d:bc:db:46:d3:8b:26:1a:
61:86:32:f1:2a:80:d9:6a:93:e2:68:e5:36:70:d9:2e:2d:1f:
7d:73:24:3d:7a:f2:a7:a2:7d:a4:81:e7:6e:5d:df:c8:3e:72:
e5:bb:5b:8b:f6:06:2f:12:33:02:ba:89:74:83:b9:76:b1:a8:
f3:87:eb:4c:fa:fd:b2:a2:da:a9:2d:b5:75:45:6b:96:27:f4:
e5:f8:af:67:3e:13:2e:7d:da:46:5d:ce:3e:45:de:fd:b7:28:
1c:69:3d:85:e2:7d:67:d9:5c:ab:89:ee:29:8b:1e:32:4f:22:
37:c0:68:7e:4a:63:0b:98:4c:71:fd:9e:c2:1b:7f:1f:92:f0:
4b:4c:89:1c:97:30:2c:cf:a3:04:5e:47:1f:e6:5d:5f:ec:cb:
e7:cc:33:57:91:1c:c6:b4:c1:dd:1b:8d:3a:75:16:43:a6:2e:
a6:ed:be:9e:17:64:49:8f:c5:f6:83:81:c7:9b:3c:fc:41:80:
16:9d:8c:45:18:42:95:fe:76:05:34:87:06:76:89:7d:71:d5:
17:1b:75:12
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcvKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE1MTc0MjQ2WhcNMjYwNjE2MTc0MjQ2WjAYMRYw
FAYDVQQDEw02YTA3NWIxYi02NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxLqyPJrDHygTAXEZOjjwtInuzHMRPMNVWUg0hbYW/F2kViYyk9kUwY5G
8qZKaKuk1TFq4Bt8FhWcS5Qgaxw1fw3TAmNjbpBlwZGdPFsIIWFQDEtxUbCwevLJ
K4L1MRLig0llsWwlX7ClZ/HUm3S7FDFC8Dp8ahXGsPbOMhWrTRmnXxwcuJlJ19T/
lamXx0QAa21XmR/hGkSetqQEeBX4MFIv4uIGBoGEEVlEhHuAT9zDSnSX6GZUhxIL
pvg04bvg6DpT13tjKuvI7wLLF04PlaprhB6TIpawD+mUCWmM+vcKKRYuYhgqixis
qN78XYDm1LpSrswBQFmq4j1zNOCpBQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJjO
mXX+PRoVr2RvvmYIeTpQviDlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RTQ1Q0I3MDUwODUxMUYxQkRGOTg2RjhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlITAwQBml4CMA0GCSqG
SIb3DQEBCwUAA4IBAQBoGAR0r0ExPskgLjXVme21VWFO3EO9o40dVY+JK4MSAkZW
peLFDFGEhFsBhCbHfbzbRtOLJhphhjLxKoDZapPiaOU2cNkuLR99cyQ9evKnon2k
geduXd/IPnLlu1uL9gYvEjMCuol0g7l2sajzh+tM+v2yotqpLbV1RWuWJ/Tl+K9n
PhMufdpGXc4+Rd79tygcaT2F4n1n2Vyrie4pix4yTyI3wGh+SmMLmExx/Z7CG38f
kvBLTIkclzAsz6MEXkcf5l1f7MvnzDNXkRzGtMHdG406dRZDpi6m7b6eF2RJj8X2
g4HHmzz8QYAWnYxFGEKV/nYFNIcGdol9cdUXG3US
-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:04 2026 by rpki-client