Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0D5B703E9411F1A556BDBECE1D38B0.roa
File: 7F0D5B703E9411F1A556BDBECE1D38B0.roa (raw, json)
Hash identifier: 8ex0ALOHO9cDS+Jc7eeYUrEAIy8rNkDZiLvCcST6oKQ=
Subject key identifier: DF:44:A2:A9:D2:CD:86:50:74:25:47:FA:0D:6B:F5:12:96:30:A3:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0D5B703E9411F1A556BDBECE1D38B0.roa
Signing time: Wed 22 Apr 2026 21:44:54 +0000
ROA not before: Wed 22 Apr 2026 21:44:49 +0000
ROA not after: Sat 30 May 2026 21:44:49 +0000
asID: 2914
IP address blocks: 154.197.12.0/22 maxlen: 24
154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116394 (0x1c6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 21:44:49 2026 GMT
Not After : May 30 21:44:49 2026 GMT
Subject: CN=69e94155-323e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9c:69:4a:8a:ad:b2:d9:a4:5f:8d:54:f0:37:
1d:4c:6f:82:86:ba:f6:eb:34:49:94:91:e3:ca:46:
77:6d:de:ad:8a:c8:85:ef:07:96:7d:3a:8f:8d:e2:
f9:88:6a:aa:2b:2a:50:c9:c1:4c:7c:10:21:f9:4c:
30:f6:81:a5:a1:4c:cd:c1:6c:a1:ab:e4:d1:3d:3d:
df:01:21:df:14:7d:e0:cb:5b:c1:7c:e9:fd:7e:3c:
e5:15:e2:93:0a:84:bf:fd:2f:bf:38:82:1b:b8:e1:
05:7d:98:c9:2f:19:9b:b4:32:34:46:5a:2f:ef:84:
7c:82:05:82:dc:8e:33:6c:1c:02:4a:89:88:a7:66:
da:ba:07:5d:cf:cf:9c:d9:c5:30:a2:b5:93:ff:8b:
24:9c:b5:26:59:51:28:70:f5:5e:38:92:d3:db:8d:
ed:46:d2:ca:a9:bf:ee:1c:2f:03:87:20:2c:b3:0c:
9f:98:f9:ba:dc:c8:54:64:4c:30:28:02:b5:b3:64:
c0:5e:b0:08:d3:bd:85:7c:ae:bf:ed:1c:cd:51:00:
30:86:15:0a:a6:0f:7b:b8:6f:6e:91:48:6d:0d:96:
6f:e3:66:df:51:ed:7b:39:3e:e0:38:3c:65:c7:64:
76:d2:78:f2:24:34:5f:58:b3:47:09:eb:9e:89:96:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:A2:A9:D2:CD:86:50:74:25:47:FA:0D:6B:F5:12:96:30:A3:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0D5B703E9411F1A556BDBECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
13:8b:9f:76:80:e4:04:ad:1d:36:95:9f:89:f4:b7:0a:c3:60:
7d:be:d8:92:50:b6:6a:b1:23:dd:9a:da:0f:bd:50:5e:2b:96:
b3:b0:7d:6e:74:e8:c2:2b:03:c2:4d:a1:62:5d:11:05:d9:07:
96:b8:1d:54:2f:cc:ab:4c:10:46:9b:83:0d:f1:9d:28:5b:88:
5a:84:30:9a:de:69:de:20:6d:04:8a:36:a2:fb:bd:3a:4e:68:
cf:68:6b:9a:92:ad:3a:7c:fd:de:a6:1c:5b:6e:f4:96:10:da:
3e:41:e3:6c:d7:5f:4d:7e:c5:9a:cf:69:45:3e:78:9e:b3:68:
9e:b2:86:d1:bb:cc:ca:c4:f7:2b:ec:ce:57:c7:0d:54:b0:0c:
38:3f:ba:bf:eb:e8:09:20:51:f9:1b:2c:f7:95:ed:b4:d0:9d:
1e:0e:75:40:4f:f6:49:86:07:68:d1:d7:d1:f2:91:5d:3f:66:
91:39:a5:74:08:4c:bc:f8:d7:e6:b5:ec:d0:2e:21:07:c5:ca:
d7:41:cc:4a:5c:43:19:9f:70:a5:1b:0a:05:54:78:37:aa:88:
f1:b5:09:4c:ba:48:29:16:98:2b:74:4e:0f:f0:ee:3c:58:39:
b5:2b:3b:ab:57:e4:13:0c:2f:f3:65:16:96:1c:0e:42:f5:6b:
f8:56:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:18 2026 by rpki-client