Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F10AA784EE311F189FF9A0CCF1D38B0.roa
File: 7F10AA784EE311F189FF9A0CCF1D38B0.roa (raw, json)
Hash identifier: uMox2KGeMjakh/c4t3d2xElhK0xZTCsUfbSMFcrTnpo=
Subject key identifier: F3:5D:6B:AA:D0:66:42:F0:37:27:B5:86:E5:1B:45:C0:DA:AE:9B:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F10AA784EE311F189FF9A0CCF1D38B0.roa
Signing time: Wed 13 May 2026 15:50:42 +0000
ROA not before: Wed 13 May 2026 15:50:38 +0000
ROA not after: Thu 25 Jun 2026 15:50:38 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
154.193.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117635 (0x1cb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 15:50:38 2026 GMT
Not After : Jun 25 15:50:38 2026 GMT
Subject: CN=6a049dd2-f7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:bf:7a:15:25:60:3c:7d:69:91:a9:1d:52:
d8:8d:43:66:51:a6:06:e9:a9:c6:6c:8c:ab:2e:fe:
87:65:45:76:77:42:3c:5a:44:14:4f:3c:61:a8:be:
c7:c7:5b:d2:c7:df:1e:f5:41:c0:11:95:50:5e:58:
fc:c8:59:ca:bc:6d:08:cf:a4:3a:49:4b:0d:cf:94:
e2:08:1d:93:a1:f6:f2:07:ed:d9:89:51:45:49:b6:
f2:c6:0d:b3:c6:af:ca:71:76:a4:ea:ce:99:bc:3b:
bc:99:8f:2b:0d:c3:fa:b7:73:d5:9d:55:a0:d2:20:
21:1a:7a:4b:f8:0e:03:2b:db:88:f5:27:0c:ec:11:
e3:7c:87:dc:bf:62:d1:4d:0e:f4:7c:70:14:a2:f5:
17:84:ee:a3:ac:f5:68:3f:21:23:03:a6:97:e6:80:
c7:cd:94:f2:30:cc:1a:e2:8f:ed:60:5f:19:b6:23:
01:b6:22:ce:93:97:ae:24:62:bb:86:56:35:65:67:
85:67:2d:60:09:47:3d:c3:01:b2:e5:1c:fd:6d:c0:
00:75:48:bc:de:49:f7:37:d2:c9:40:f7:bd:f8:b4:
16:4b:e2:65:d0:7a:25:98:6d:66:df:d6:df:0b:73:
82:17:b4:d0:67:6e:10:3e:b0:a8:68:ac:15:e2:06:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:6B:AA:D0:66:42:F0:37:27:B5:86:E5:1B:45:C0:DA:AE:9B:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F10AA784EE311F189FF9A0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
154.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:3a:67:13:b9:45:97:bc:de:b3:d7:46:4d:d5:b3:f5:67:86:
ae:da:ec:b6:eb:81:c3:f9:fb:69:f5:e8:e6:ad:f8:cb:a1:ea:
6c:2b:44:a0:bb:c4:f0:f5:04:a2:17:72:9b:0c:f1:d2:af:38:
94:43:4d:a5:02:9b:30:de:94:fe:0e:82:c1:85:f7:a9:f7:a1:
6c:91:07:cb:fc:99:c2:16:65:7a:ac:87:9c:4b:c8:b3:36:2d:
4c:f7:d7:9c:ad:b3:e3:6e:21:c5:04:44:75:87:f8:b7:3c:be:
14:e7:ed:0e:71:ad:81:07:2f:89:4e:c0:be:d2:8c:50:6f:72:
0b:70:e2:df:05:7a:d0:f3:df:d5:a9:47:63:9b:5d:e2:b6:2d:
51:7a:29:00:d0:d2:8c:13:7c:8e:aa:b3:bd:8e:b1:40:58:47:
e9:83:17:8f:13:cf:32:d7:45:f6:eb:ce:77:8d:23:fb:d3:bf:
27:06:21:a4:cd:89:11:ce:5a:67:7a:0b:54:cc:1a:21:8b:d1:
71:19:5f:40:b8:64:1e:d1:d7:d6:37:c6:77:72:8c:b4:17:c5:
44:5e:ac:64:6e:45:b7:22:ae:0f:f5:62:54:06:1d:d0:95:95:
28:8a:9a:63:15:12:3e:00:0b:5f:cd:f0:b5:4b:bf:f1:e1:64:
29:63:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:54 2026 by rpki-client