Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3FEE207C4F11F1A00E8DC5CE1D38B0.roa
File: 7F3FEE207C4F11F1A00E8DC5CE1D38B0.roa (raw, json)
Hash identifier: 4bPeXd0Z0BIYu/HLqVcc+9AxYQZuwckyMaK3lz4hLK4=
Subject key identifier: 13:D6:04:F4:FF:5D:BF:F2:7E:05:A1:83:E5:32:8F:21:F3:08:1F:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3FEE207C4F11F1A00E8DC5CE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:07:11 +0000
ROA not before: Fri 10 Jul 2026 11:07:06 +0000
ROA not after: Tue 10 Jul 2029 11:07:06 +0000
asID: 17561
IP address blocks: 154.214.14.0/24 maxlen: 24
154.214.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120825 (0x1d7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:07:06 2026 GMT
Not After : Jul 10 11:07:06 2029 GMT
Subject: CN=6a50d25f-fbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:49:9c:4c:ec:1e:6f:50:1e:32:c9:12:24:
b2:7f:7a:d4:22:3a:79:cb:b5:4f:22:a0:f4:93:98:
1e:72:44:3c:68:64:87:41:c5:04:db:1e:11:ef:76:
3e:a4:58:2a:85:8d:33:72:a8:8d:81:e2:9c:97:c6:
b6:14:cd:70:16:4a:1e:a1:ca:f3:11:bf:c3:e1:a5:
85:24:81:02:1e:fb:9b:a0:94:0a:89:d3:9a:68:ca:
0a:cd:19:05:53:85:95:c8:a0:63:8d:f2:50:04:0f:
c1:0c:9a:16:c9:ab:74:7b:70:3a:bf:fb:d5:43:b4:
56:7b:9f:53:32:87:06:1a:ac:a5:80:3d:63:40:06:
6a:c1:e1:f7:78:fb:d0:9d:85:2d:2e:4b:2c:b0:f9:
34:e8:2f:45:56:80:9a:7a:be:ec:06:fd:a7:8e:e4:
b6:52:27:36:95:2a:c5:6a:09:aa:6e:e0:25:68:10:
55:fe:fa:36:74:17:b1:7d:3b:a1:d3:16:c3:c1:e1:
f5:63:cb:df:aa:3e:d3:2a:0e:73:cc:c0:98:7a:7e:
36:43:09:27:7b:9f:00:5a:d7:23:a1:9c:fd:d2:d9:
56:cd:71:86:52:e4:32:52:6c:4b:8b:df:7d:d2:d4:
13:64:0a:e1:6d:ec:e4:ee:e8:e7:51:ef:a2:a4:7b:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:04:F4:FF:5D:BF:F2:7E:05:A1:83:E5:32:8F:21:F3:08:1F:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3FEE207C4F11F1A00E8DC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.14.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:cd:61:08:17:49:61:a5:5d:47:a2:68:ce:02:2d:cc:d9:8a:
f3:17:af:bb:f5:9f:0a:b5:39:12:7f:b6:77:fd:74:a7:db:e7:
f1:db:99:84:17:dd:f2:85:5c:36:3c:33:25:d8:7f:63:c9:54:
e7:19:e7:bc:49:6e:cd:b3:56:42:f8:ae:ad:d8:2a:d5:7f:63:
1c:67:23:a1:9b:3e:4d:c6:01:3f:95:50:9a:60:71:fb:5b:5d:
48:3e:9b:91:3f:24:2e:96:fd:90:34:dc:3f:9f:de:b5:b4:bc:
be:a6:9a:e3:93:60:16:fe:0d:94:cb:ee:bd:6e:5e:54:23:ed:
05:bf:3b:bc:07:eb:90:24:15:20:58:7c:dc:b0:07:ed:5b:46:
41:ca:b7:21:03:d6:5e:cd:41:66:3d:95:69:e4:94:65:99:b9:
a8:f1:ca:8c:91:c4:08:35:fa:21:6a:18:88:54:77:59:73:78:
1d:98:d7:f5:1d:ef:3e:c6:dd:82:7e:d9:87:78:8b:42:c8:73:
09:2b:2b:31:95:ea:dc:ec:a3:cf:37:64:1b:5a:11:e7:2c:3f:
8c:80:38:22:69:09:a9:7a:f4:30:1d:05:98:4a:54:06:31:86:
01:33:2e:b3:d1:3c:e4:76:27:12:d9:03:04:9d:4a:25:6c:e3:
d4:5a:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:49 2026 by rpki-client