Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC4E2A46E0B11F198C30ED3CE1D38B0.roa
File: 7EC4E2A46E0B11F198C30ED3CE1D38B0.roa (raw, json)
Hash identifier: HmzVykreSfua4Z81ROZQlpKuJA5aITapPLOQ00GmpQA=
Subject key identifier: AC:56:8A:0E:28:C2:C5:51:BE:D0:93:DB:7A:8B:97:8D:E0:BB:CA:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D44F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC4E2A46E0B11F198C30ED3CE1D38B0.roa
Signing time: Mon 22 Jun 2026 07:25:08 +0000
ROA not before: Mon 22 Jun 2026 07:25:03 +0000
ROA not after: Mon 28 Dec 2026 07:25:03 +0000
asID: 55020
IP address blocks: 154.84.32.0/21 maxlen: 24
154.84.40.0/21 maxlen: 24
154.84.48.0/21 maxlen: 24
154.84.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119887 (0x1d44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 07:25:03 2026 GMT
Not After : Dec 28 07:25:03 2026 GMT
Subject: CN=6a38e354-7dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:94:63:6c:87:ed:2b:95:f3:a4:92:f9:4b:
25:cf:f4:23:47:12:80:ea:a1:49:f4:70:ec:f0:71:
c2:be:42:49:d4:e2:09:34:f6:c5:bf:b7:9e:17:0a:
96:9c:c7:f6:92:9a:9f:f0:cf:70:3d:61:3c:db:d4:
b8:4e:5a:22:d8:bf:a4:ff:ce:2e:da:ff:6d:bc:12:
29:d5:dc:29:47:b2:0b:e5:62:0c:e3:5a:de:3c:14:
f8:2a:60:de:94:f2:45:f3:88:a5:fe:ff:47:d1:89:
14:9f:a1:41:7f:6c:1e:6e:5c:11:c0:53:66:5f:74:
57:75:53:4b:c1:ec:f3:c7:c6:34:38:97:93:bb:77:
57:0e:19:21:7d:f1:77:a1:fe:a7:81:1d:18:cb:a1:
e1:34:17:c4:69:f5:cf:cf:96:5b:ab:7d:42:11:fd:
88:e4:e2:00:cc:2e:3e:f0:e5:ae:d9:4c:53:e8:df:
95:fb:a4:05:e6:4f:e8:95:71:97:18:d2:22:fb:e4:
b4:d4:c4:5a:a5:95:6c:30:42:9d:0b:c6:79:f6:2c:
c9:5f:65:6d:6f:e8:ea:45:87:e5:5d:5c:bc:b3:05:
41:ce:81:2e:6c:9a:9f:dc:80:27:c7:c5:4e:d3:87:
27:2e:18:fa:0a:fb:75:1c:b4:8a:72:6d:2e:49:70:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:56:8A:0E:28:C2:C5:51:BE:D0:93:DB:7A:8B:97:8D:E0:BB:CA:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC4E2A46E0B11F198C30ED3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:7a:25:d5:55:bb:aa:7b:68:17:53:b6:49:97:a6:ac:2a:7d:
45:3c:6a:be:a0:05:e5:21:a3:36:f4:1a:7c:1e:54:56:91:38:
0c:5c:7f:fd:83:22:0c:cb:df:60:ce:44:b1:bc:47:53:e4:1d:
89:6e:25:7a:50:d4:32:4e:1c:f0:5e:e7:cc:2d:78:07:8e:f3:
a7:7a:7f:31:e3:cd:5a:38:36:e5:1c:9b:05:78:1b:ce:ab:27:
0c:83:0a:23:31:0c:0a:e2:86:1c:d1:86:3d:ce:9b:80:77:32:
13:3e:39:1a:b2:b1:b5:89:ee:00:a9:fe:44:8c:1f:5a:40:2f:
c2:c5:d5:7f:65:7f:22:79:21:bd:f4:e6:18:b9:44:78:27:f5:
03:ef:e8:db:06:8b:3b:1a:a4:d3:5c:b6:9f:a8:e8:e3:33:bd:
7d:1e:68:17:03:22:4a:fe:db:20:59:75:24:74:0f:33:70:42:
0c:26:be:c5:94:64:7d:66:b9:c0:94:2c:ca:73:e1:7e:00:f8:
29:fe:3c:65:20:e5:5f:12:2b:35:2a:3a:02:4c:80:a4:fe:dc:
31:3b:fc:3c:7b:bc:86:b6:d5:ad:fd:58:5f:7a:36:d3:00:c9:
e6:7c:c9:39:db:47:e4:51:e8:85:3c:c7:72:24:6e:29:7e:66:
9c:1e:ef:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdRPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIyMDcyNTAzWhcNMjYxMjI4MDcyNTAzWjAYMRYw
FAYDVQQDEw02YTM4ZTM1NC03ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0xCUY2yH7SuV86SS+Uslz/QjRxKA6qFJ9HDs8HHCvkJJ1OIJNPbFv7ee
FwqWnMf2kpqf8M9wPWE829S4Tloi2L+k/84u2v9tvBIp1dwpR7IL5WIM41rePBT4
KmDelPJF84il/v9H0YkUn6FBf2weblwRwFNmX3RXdVNLwezzx8Y0OJeTu3dXDhkh
ffF3of6ngR0Yy6HhNBfEafXPz5Zbq31CEf2I5OIAzC4+8OWu2UxT6N+V+6QF5k/o
lXGXGNIi++S01MRapZVsMEKdC8Z59izJX2Vtb+jqRYflXVy8swVBzoEubJqf3IAn
x8VO04cnLhj6Cvt1HLSKcm0uSXBd9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKxW
ig4owsVRvtCT23qLl43gu8opMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RUM0RTJBNDZFMEIxMUYxOThDMzBFRDNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlQgMA0GCSqGSIb3DQEB
CwUAA4IBAQAaeiXVVbuqe2gXU7ZJl6asKn1FPGq+oAXlIaM29Bp8HlRWkTgMXH/9
gyIMy99gzkSxvEdT5B2JbiV6UNQyThzwXufMLXgHjvOnen8x481aODblHJsFeBvO
qycMgwojMQwK4oYc0YY9zpuAdzITPjkasrG1ie4Aqf5EjB9aQC/CxdV/ZX8ieSG9
9OYYuUR4J/UD7+jbBos7GqTTXLafqOjjM719HmgXAyJK/tsgWXUkdA8zcEIMJr7F
lGR9ZrnAlCzKc+F+APgp/jxlIOVfEis1KjoCTICk/twxO/w8e7yGttWt/VhfejbT
AMnmfMk520fkUeiFPMdyJG4pfmacHu/O
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:04 2026 by rpki-client