Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EF85E3A69B111F1A11A0F0ECF1D38B0.roa
File: 7EF85E3A69B111F1A11A0F0ECF1D38B0.roa (raw, json)
Hash identifier: j1/BtmcB1IvEb3RB/hMGJYoftgQKbgF5iomOOg0/RbI=
Subject key identifier: B8:0A:E9:C5:B3:A3:EF:4A:5E:85:BB:DA:E2:FB:2C:14:AB:70:5D:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D381
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EF85E3A69B111F1A11A0F0ECF1D38B0.roa
Signing time: Tue 16 Jun 2026 18:30:49 +0000
ROA not before: Tue 16 Jun 2026 18:30:44 +0000
ROA not after: Wed 23 Jun 2027 18:30:44 +0000
asID: 201411
IP address blocks: 154.202.8.0/24 maxlen: 24
154.202.9.0/24 maxlen: 24
154.202.10.0/24 maxlen: 24
154.202.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119681 (0x1d381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 18:30:44 2026 GMT
Not After : Jun 23 18:30:44 2027 GMT
Subject: CN=6a319659-5cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:da:cb:07:90:4c:2d:5d:4c:27:a3:1d:75:
bf:6a:00:bf:34:42:07:9d:ee:44:6c:6a:b1:ac:80:
fb:ea:04:46:9f:69:f1:a7:d7:6c:7a:c0:f2:5e:d1:
fa:0a:08:ca:1c:54:9a:81:6e:5a:51:69:61:8b:a8:
d4:28:9a:b5:85:13:a2:24:2e:6e:5c:fb:60:11:16:
f6:87:d4:3a:3d:c5:9c:55:4b:6c:4b:71:08:b5:6d:
cb:eb:96:b2:d9:5f:08:26:0e:78:70:d8:02:ae:c5:
f0:f7:07:05:5c:b0:8d:db:d8:34:e3:a6:c2:8c:ec:
2b:a4:3a:82:c9:e0:44:2b:02:7f:52:34:e9:7d:f3:
c3:3a:6d:21:6d:3e:92:69:45:56:01:7b:58:cb:05:
04:4c:76:98:a1:31:73:e7:4f:79:28:f3:60:2f:e3:
40:a6:31:78:4e:d5:a4:de:34:c5:d3:0d:38:71:4e:
84:31:1c:b9:58:5c:b5:66:8b:a9:58:8d:a6:1e:9c:
d5:e8:b6:5a:17:1a:f8:68:69:71:2e:9d:0b:d0:54:
d4:ef:27:5e:dc:9b:72:e8:90:47:91:a3:75:b9:c6:
ee:8e:4d:a3:d9:e3:d8:22:20:b9:4e:f4:50:d4:9d:
bb:91:52:8b:36:e0:41:4f:ab:c1:0f:d5:30:69:84:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:E9:C5:B3:A3:EF:4A:5E:85:BB:DA:E2:FB:2C:14:AB:70:5D:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EF85E3A69B111F1A11A0F0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.8.0/22
Signature Algorithm: sha256WithRSAEncryption
82:68:3d:03:1b:56:d3:3b:7e:e4:01:ab:af:50:ad:a2:e6:c0:
67:d4:04:39:2c:b4:ce:60:2b:9c:8e:34:49:98:60:72:5e:09:
7d:00:47:06:a5:27:ef:0b:b1:00:6a:a2:50:1e:58:46:b1:2b:
21:f2:93:7b:db:9a:9b:c7:58:ae:00:e1:f6:fd:6c:ec:c5:2c:
23:f2:fd:b3:58:13:a6:50:53:ba:db:c8:0b:8e:b6:7e:ca:89:
b6:01:35:0d:d5:d4:09:59:3f:38:65:99:12:c1:01:5a:cf:22:
4b:21:6b:16:e2:d6:69:6b:e8:36:ea:df:d6:bd:09:9a:58:6f:
ee:8c:62:f3:3a:63:4e:49:6d:91:95:2c:9e:4b:0b:fb:31:86:
2e:d7:35:9b:ec:8c:d2:81:cf:01:0b:a9:0a:49:6d:f5:7e:b9:
fd:6c:42:80:0e:47:4f:56:ac:4a:9e:cd:e4:d5:72:b0:d4:d6:
6f:f4:ce:2d:ea:ed:cb:a9:b0:63:5c:0c:c1:b2:4b:36:1e:dd:
1c:ed:ee:04:cd:7b:6b:0c:11:22:a1:03:72:e8:fc:9a:f6:fd:
c8:58:50:bf:c1:5c:47:e7:a2:d5:c3:30:c0:5d:02:24:d4:33:
6d:18:f9:d9:3e:6e:0b:5e:be:d0:d8:9d:47:c9:50:43:58:e2:
42:91:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:54 2026 by rpki-client