Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA1C25C421811F187673BC8CE1D38B0.roa
File: 7EA1C25C421811F187673BC8CE1D38B0.roa (raw, json)
Hash identifier: ocBtEUOEugiVBoK68SMUpsJ9DfSX6J2lVyuju3pM+y8=
Subject key identifier: AA:B4:D2:12:5D:14:08:50:AC:C2:F0:AF:9D:21:BE:F9:17:84:B0:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C79C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA1C25C421811F187673BC8CE1D38B0.roa
Signing time: Mon 27 Apr 2026 09:07:20 +0000
ROA not before: Mon 27 Apr 2026 09:07:15 +0000
ROA not after: Fri 27 Apr 2029 09:07:15 +0000
asID: 17561
IP address blocks: 154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116636 (0x1c79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 09:07:15 2026 GMT
Not After : Apr 27 09:07:15 2029 GMT
Subject: CN=69ef2748-35d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:6a:5a:0c:88:7f:e8:2c:d9:6a:0e:cd:b2:
79:4d:ff:4d:25:dd:06:6d:8e:ba:24:60:0a:cf:bd:
78:45:ee:d0:93:72:2d:a8:3f:ce:2f:78:9a:25:48:
76:38:74:9c:7f:c2:32:4a:4e:ff:5c:0a:5f:6d:a7:
05:79:09:d9:19:77:a1:7e:ca:fa:14:59:b6:ff:8a:
76:9e:a6:f3:22:06:e7:c8:73:85:f2:7d:d0:a7:32:
6e:31:d2:e0:4e:c9:c4:7d:68:b1:70:9a:86:75:e6:
38:1e:86:fb:21:1c:7d:7c:d6:91:be:51:ce:75:d3:
08:96:c9:a0:e4:76:c0:df:d3:32:46:b0:85:8d:7d:
29:f5:42:33:0e:dc:b3:a4:cf:56:0c:bf:bf:a5:ae:
48:05:4c:44:33:2f:37:f9:ad:46:79:33:f0:5d:00:
77:da:43:6c:4e:f3:3c:9b:6e:06:32:49:56:fb:9a:
08:fb:50:05:b3:f4:3a:ce:c8:88:22:fb:6b:09:0d:
51:2e:90:a7:2e:a0:47:5c:34:80:9f:67:c5:18:6c:
9e:43:55:23:16:b9:28:4e:c5:43:28:6f:5a:80:76:
e8:57:ea:54:be:13:9b:7e:e6:ca:b7:c4:1a:91:89:
0b:85:df:12:4e:1f:52:5b:4a:29:36:0b:7d:64:29:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:D2:12:5D:14:08:50:AC:C2:F0:AF:9D:21:BE:F9:17:84:B0:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA1C25C421811F187673BC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.211.0-154.213.212.255
154.222.77.0/24
154.222.136.0/24
Signature Algorithm: sha256WithRSAEncryption
58:82:00:7d:99:52:06:19:23:a3:17:5f:35:16:c3:70:73:b5:
da:61:f4:d4:2a:8e:1b:6a:b7:dd:81:4b:ca:34:e4:38:0e:d0:
ef:c5:a4:cf:ce:ee:dd:cf:93:56:57:72:e5:de:f4:28:2a:a1:
fb:b1:67:27:c4:94:f7:55:47:05:eb:bd:2e:91:34:2f:62:8f:
f0:b7:24:05:64:a4:3e:71:23:ca:b1:07:8b:9d:0f:c4:98:8e:
77:e6:97:74:73:2e:7f:0c:60:30:46:f7:7e:a8:de:b9:32:6d:
72:8c:df:65:4e:23:eb:a7:9c:73:4c:2b:94:8c:40:cd:70:71:
22:6a:e5:19:7c:e4:bc:7d:6b:77:c2:88:19:eb:99:e3:cc:af:
2f:04:86:31:d1:b1:d5:81:d1:97:5f:73:bd:31:0a:26:38:cb:
4a:40:08:d2:91:eb:43:66:e7:f7:ba:09:d9:57:4a:2f:c2:4e:
8b:7e:7c:d9:fe:67:67:a6:4f:19:54:6e:b1:5c:da:9e:a0:5d:
b5:bd:38:6c:6f:84:bd:00:26:24:2c:d0:81:0d:c9:5c:7a:ec:
b2:44:e4:2e:78:2c:04:cd:e8:7b:aa:9f:c2:d4:36:28:f5:4e:
57:74:c2:0b:cc:a2:09:a9:30:bd:d9:85:75:c0:41:24:20:92:
49:f0:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:49 2026 by rpki-client