Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE7A0A2672E11F180069FCCCE1D38B0.roa
File: 7EE7A0A2672E11F180069FCCCE1D38B0.roa (raw, json)
Hash identifier: Se+Nzx8In/VRlUSWnP8Ks4R6iYi68u32ZGvEhmoNsCE=
Subject key identifier: 85:99:1C:D9:A3:05:2A:6B:D9:61:DE:50:F3:4C:05:77:E2:7F:05:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE7A0A2672E11F180069FCCCE1D38B0.roa
Signing time: Sat 13 Jun 2026 13:48:02 +0000
ROA not before: Sat 13 Jun 2026 13:47:57 +0000
ROA not after: Fri 28 Aug 2026 13:47:57 +0000
asID: 142403
IP address blocks: 154.209.4.0/23 maxlen: 24
154.211.12.0/24 maxlen: 24
154.211.13.0/24 maxlen: 24
154.211.14.0/24 maxlen: 24
154.221.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119461 (0x1d2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 13:47:57 2026 GMT
Not After : Aug 28 13:47:57 2026 GMT
Subject: CN=6a2d5f92-0544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:75:96:0d:84:e9:5f:27:5d:fe:60:2c:ac:
99:77:72:a6:bd:7b:b6:78:84:72:e2:de:f1:45:31:
30:ba:bf:f0:2c:c8:32:f0:b5:58:b7:d9:6f:bd:0b:
45:e9:8f:72:b8:7f:3d:8d:1c:e6:a1:85:b9:c1:3b:
5d:83:03:e7:ae:64:cb:bf:33:5f:a3:42:8d:78:ad:
e5:c7:ee:40:86:15:bc:0d:10:f2:af:ed:fa:f2:a5:
ce:e9:f4:9b:fd:91:72:61:8b:2f:e5:a7:b2:78:55:
ba:bc:2e:c3:dd:d6:03:a0:12:5a:f9:2d:f5:bb:90:
f6:be:f9:8c:6c:4b:30:23:e0:e8:6a:ad:35:60:41:
28:f3:bf:71:27:ff:22:f4:6f:fc:f4:2a:c2:91:e4:
72:8c:11:0a:81:5e:a7:07:49:04:14:15:a1:19:99:
f6:41:bc:77:32:c7:4b:8c:f5:57:8b:bb:c1:a8:52:
50:3f:95:4f:b6:04:d2:0c:07:7f:2c:b9:38:38:35:
c3:fa:c7:14:a6:f0:ee:a7:f2:2b:db:08:36:1c:50:
54:dc:bd:c2:14:fd:0e:80:0b:81:81:b6:b9:d9:c8:
78:9b:61:16:72:d8:7f:3c:cc:4a:b7:27:e9:12:00:
d5:53:1e:b8:5c:08:76:e2:71:c9:e2:81:b8:a0:5c:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:99:1C:D9:A3:05:2A:6B:D9:61:DE:50:F3:4C:05:77:E2:7F:05:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE7A0A2672E11F180069FCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/23
154.211.12.0-154.211.14.255
154.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
47:5f:d8:bc:29:34:6d:0b:fd:ad:97:f0:8d:f9:dc:3b:37:18:
ea:1d:46:8f:05:16:4f:0d:14:e3:c6:6c:85:b9:81:b1:2c:cf:
c4:de:72:e6:f7:7e:6a:a8:fa:cd:e3:00:fa:c1:cd:b0:ec:7b:
92:07:c0:55:34:6c:64:73:97:67:55:d6:b4:c2:b2:b2:a1:fd:
d3:5c:88:f8:87:49:0c:00:6f:a0:17:eb:13:b1:e1:5c:46:06:
27:c4:44:6b:1d:4f:ee:c1:e6:36:e3:43:7b:a6:15:79:54:96:
47:49:50:b2:f8:10:2c:32:3e:76:02:59:8b:f8:6f:63:c2:d1:
67:72:47:d2:22:84:57:9e:7b:c0:b4:48:c2:61:21:96:02:43:
ba:90:4d:de:76:58:82:53:26:5d:be:de:d6:e9:4b:39:7f:33:
6f:31:04:2a:ce:7c:57:2f:72:c1:f6:bc:3b:ca:ba:fd:2e:fb:
5c:1f:dd:a4:59:e7:33:8f:5d:49:9a:d8:e5:37:9a:7d:e3:96:
3e:83:2b:2c:57:20:2c:86:6e:8e:63:fb:e8:58:93:a0:d0:df:
b6:4f:a1:24:9c:06:b2:ed:93:0e:70:1f:c2:4e:27:9e:54:27:
c2:46:95:bb:b3:46:a1:23:cd:26:30:d0:d0:5d:92:cc:21:53:
12:15:6a:08
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAdKlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjEzMTM0NzU3WhcNMjYwODI4MTM0NzU3WjAYMRYw
FAYDVQQDEw02YTJkNWY5Mi0wNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAooN1lg2E6V8nXf5gLKyZd3KmvXu2eIRy4t7xRTEwur/wLMgy8LVYt9lv
vQtF6Y9yuH89jRzmoYW5wTtdgwPnrmTLvzNfo0KNeK3lx+5AhhW8DRDyr+368qXO
6fSb/ZFyYYsv5aeyeFW6vC7D3dYDoBJa+S31u5D2vvmMbEswI+Doaq01YEEo879x
J/8i9G/89CrCkeRyjBEKgV6nB0kEFBWhGZn2Qbx3MsdLjPVXi7vBqFJQP5VPtgTS
DAd/LLk4ODXD+scUpvDup/Ir2wg2HFBU3L3CFP0OgAuBgba52ch4m2EWcth/PMxK
tyfpEgDVUx64XAh24nHJ4oG4oFzIywIDAQABo4ICuTCCArUwHQYDVR0OBBYEFIWZ
HNmjBSpr2WHeUPNMBXfifwUnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RUU3QTBBMjY3MkUxMUYxODAwNjlGQ0NDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBmtEEMAwDBAKa0wwDBACa
0w4DBASa3RAwDQYJKoZIhvcNAQELBQADggEBAEdf2LwpNG0L/a2X8I353Ds3GOod
Ro8FFk8NFOPGbIW5gbEsz8Tecub3fmqo+s3jAPrBzbDse5IHwFU0bGRzl2dV1rTC
srKh/dNciPiHSQwAb6AX6xOx4VxGBifERGsdT+7B5jbjQ3umFXlUlkdJULL4ECwy
PnYCWYv4b2PC0WdyR9IihFeee8C0SMJhIZYCQ7qQTd52WIJTJl2+3tbpSzl/M28x
BCrOfFcvcsH2vDvKuv0u+1wf3aRZ5zOPXUma2OU3mn3jlj6DKyxXICyGbo5j++hY
k6DQ37ZPoSScBrLtkw5wH8JOJ55UJ8JGlbuzRqEjzSYw0NBdkswhUxIVagg=
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:15 2026 by rpki-client