Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA0FEE2408F11F1B089EDE8CE1D38B0.roa
File: 7EA0FEE2408F11F1B089EDE8CE1D38B0.roa (raw, json)
Hash identifier: UQU+Gslvi+9rRCIYtGdTzcONvH3mW4fOYTmeVSI+aGA=
Subject key identifier: 50:66:D7:19:A6:14:19:3F:47:1B:1F:54:2B:F9:8B:6B:20:A6:8B:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C76D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA0FEE2408F11F1B089EDE8CE1D38B0.roa
Signing time: Sat 25 Apr 2026 10:14:08 +0000
ROA not before: Sat 25 Apr 2026 10:14:03 +0000
ROA not after: Mon 01 Jun 2026 10:14:03 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116589 (0x1c76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 10:14:03 2026 GMT
Not After : Jun 1 10:14:03 2026 GMT
Subject: CN=69ec93f0-28f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:57:bb:53:d2:cf:dc:1f:ac:8c:89:bd:57:
88:3a:68:23:9a:86:1e:6c:ac:db:a2:bb:19:51:2e:
1e:d1:d0:2b:76:5d:64:eb:c2:35:52:e3:f3:ec:6c:
c1:48:7d:bb:57:3a:7e:d0:d5:8e:e5:68:3c:e8:81:
27:49:64:28:9a:fe:ed:8e:6d:63:64:b9:d0:66:c0:
99:1f:14:0c:22:fd:1c:21:a7:7d:bf:3c:4d:40:cb:
b8:3a:17:6a:c6:64:37:a4:64:84:d2:d0:55:7e:94:
ff:79:c6:23:23:3a:15:8e:81:d5:c5:57:32:be:02:
f5:0a:01:25:5d:95:36:3f:54:44:5c:26:b8:25:2a:
a9:f5:7c:eb:96:e1:15:38:dd:ab:52:32:fc:d1:e4:
cf:2f:7e:e8:81:5c:21:b4:73:23:93:a1:60:22:f4:
69:90:44:9f:df:07:eb:66:18:1e:94:59:cb:06:9e:
08:aa:09:69:06:04:f3:1c:cc:a1:e1:e6:e9:e5:0e:
18:79:25:be:60:77:c7:33:f0:33:49:35:a5:5f:c6:
9b:d7:98:71:4a:1c:92:98:05:7c:0a:57:b8:59:d9:
01:38:8e:94:29:75:95:64:15:be:a1:af:cc:10:6f:
58:fa:c0:ae:a4:1c:be:d0:a3:bd:f2:cb:02:cd:aa:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:66:D7:19:A6:14:19:3F:47:1B:1F:54:2B:F9:8B:6B:20:A6:8B:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA0FEE2408F11F1B089EDE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.226.0-154.205.233.255
Signature Algorithm: sha256WithRSAEncryption
a1:8b:9a:33:89:cb:fd:7f:ca:34:bd:37:80:6a:a1:ea:99:03:
c7:84:a7:ca:33:07:3f:68:9d:a7:73:d0:6f:28:bd:99:8b:2c:
80:17:31:3a:3e:53:79:50:68:0c:ad:f0:78:a5:23:0d:41:10:
2c:41:ac:e4:55:dc:a5:82:e4:1a:c7:f3:9e:0e:5d:4a:f2:2d:
49:6d:8a:39:5c:07:7a:7c:74:e8:eb:a9:97:d1:ff:18:2e:bc:
0f:6c:97:04:bf:06:2c:6f:10:cc:cf:40:56:5f:97:81:aa:92:
a0:65:1e:7b:eb:32:b4:a6:3e:ea:e9:40:39:f3:20:d5:4a:79:
23:9e:b5:47:2e:8b:e7:54:03:ca:af:c3:7a:fd:fd:4f:90:73:
9c:d7:f8:b0:00:12:74:33:ab:e6:02:78:9a:e2:56:5a:89:a7:
e0:d3:ff:88:28:1b:3c:6d:7e:06:9f:d4:59:2b:7c:18:8f:63:
23:b8:a1:5d:d6:67:af:b2:9b:c6:8b:31:b8:5a:d6:da:c4:01:
9e:0a:fd:1d:d6:c2:e0:18:ee:8d:94:e3:17:16:2c:2b:a3:ee:
c2:e9:d9:44:4d:36:bf:0e:7f:26:11:d4:3d:29:02:62:4e:79:
3b:60:1a:58:5b:34:e6:4a:2e:f8:68:df:7d:85:9c:f3:dc:e3:
c6:18:32:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:05 2026 by rpki-client