Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E630CB258FF11F192405BA0CE1D38B0.roa
File: 7E630CB258FF11F192405BA0CE1D38B0.roa (raw, json)
Hash identifier: daDKciaVShKy0j4QvzZunMshSZ5KgFL0jjvcAF0ba+I=
Subject key identifier: 1F:39:43:E6:A7:B0:F0:7E:93:85:35:57:90:FF:58:4D:A1:93:64:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E630CB258FF11F192405BA0CE1D38B0.roa
Signing time: Tue 26 May 2026 12:36:19 +0000
ROA not before: Tue 26 May 2026 12:36:07 +0000
ROA not after: Sun 05 Jul 2026 12:36:07 +0000
asID: 213169
IP address blocks: 154.94.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118723 (0x1cfc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 12:36:07 2026 GMT
Not After : Jul 5 12:36:07 2026 GMT
Subject: CN=6a1593c3-4f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:36:d8:20:a8:a9:7f:eb:b7:66:d4:c7:d5:
f5:34:7e:31:b6:c5:26:27:bc:00:73:cc:d6:4e:5d:
90:f7:0c:40:ae:fd:a9:55:08:3f:b6:20:41:a0:38:
d9:91:d8:1d:80:48:71:81:61:7e:aa:35:58:8e:cd:
1f:01:09:32:c1:fb:4d:ce:68:b3:81:1e:15:69:1a:
40:34:f2:54:a5:96:f5:5d:e1:c3:c1:b9:79:f8:6a:
62:54:ac:70:f0:05:6f:a8:14:51:96:86:12:ea:90:
b0:43:8b:2b:20:97:aa:25:e8:d5:8e:57:98:11:03:
79:10:38:95:4b:5c:86:95:dd:f9:3f:5b:0e:0a:27:
4a:66:98:b1:6e:24:1d:b3:20:c7:26:f0:9c:07:90:
3b:92:e7:f1:41:4f:0e:87:29:df:08:f7:bb:96:94:
6e:a5:ca:82:15:88:80:2b:b2:84:e4:72:4c:e4:83:
14:71:b1:f4:bd:67:71:54:c4:71:bf:e5:61:62:27:
d2:24:92:4a:0b:45:54:7a:97:2c:b0:84:94:a5:b0:
c4:1a:9b:a1:ed:43:a7:36:76:af:ed:09:81:90:56:
87:99:7e:8a:8a:36:72:26:ea:a7:8c:4b:83:3e:1a:
92:5e:b0:3c:13:d3:7c:b9:eb:2f:8a:cd:c6:cd:14:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:39:43:E6:A7:B0:F0:7E:93:85:35:57:90:FF:58:4D:A1:93:64:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E630CB258FF11F192405BA0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:72:74:d1:c2:f2:a6:4b:61:f9:24:6b:46:df:6a:f1:97:2f:
8e:db:0e:54:6e:c9:59:a7:5e:45:51:44:fb:d9:4b:5e:2f:95:
a7:dd:77:f2:ce:c6:2c:23:8d:12:11:a3:aa:c8:81:a0:89:f9:
21:f1:24:5d:7f:ed:a0:4b:0d:31:dc:bb:95:c0:d7:07:19:75:
dc:77:f2:35:2e:4b:67:b1:7d:15:5f:0a:fe:e5:cf:96:47:29:
9f:e3:4b:0e:1c:17:52:bd:67:78:5b:ed:62:1b:8b:23:d5:fa:
3b:de:19:1c:50:e6:b1:f5:63:60:2e:c7:cd:8d:20:6d:2c:c9:
fd:23:56:bd:ef:68:5c:44:7f:7f:d7:5e:04:b0:32:99:8d:e1:
23:fd:40:69:38:89:ef:9d:c2:c4:5f:27:eb:d3:d6:64:02:be:
a8:5b:58:e8:ab:92:38:24:ef:bb:cf:03:a0:88:0c:3d:21:84:
fa:78:af:9b:fc:be:dc:b8:6b:fd:33:8a:28:01:0b:e9:4b:56:
c5:e7:50:8a:ed:59:99:43:2c:c9:5d:b6:7c:57:0c:02:85:74:
0b:d0:d0:7d:37:e4:fe:e9:81:39:8a:ef:af:87:fb:4d:f8:c2:
8d:27:a5:93:b8:c4:7a:fb:2c:54:37:70:a0:84:8e:fb:f2:45:
7b:84:4f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 12:55:29 2026 by rpki-client