Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FC043A42AD811F1B9AFA094DAE4EC9C.roa
File: 7FC043A42AD811F1B9AFA094DAE4EC9C.roa (raw, json)
Hash identifier: QXBWavzPhplh3vw0uaxcQvzzf4mj94gW0iioPdiXSHs=
Subject key identifier: 01:AB:31:66:21:52:20:A7:65:72:18:17:31:F3:C6:FD:B3:B3:59:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C179
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FC043A42AD811F1B9AFA094DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:01:17 +0000
ROA not before: Sat 28 Mar 2026 19:01:12 +0000
ROA not after: Mon 30 Mar 2026 19:01:12 +0000
asID: 26617
IP address blocks: 154.202.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Mar 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115065 (0x1c179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 19:01:12 2026 GMT
Not After : Mar 30 19:01:12 2026 GMT
Subject: CN=69c8257d-88a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:61:1f:a1:47:95:67:b5:0b:ef:af:ae:d8:
f4:9d:9b:c5:08:4d:14:45:b6:3e:1b:40:0e:1e:b8:
1e:7b:ca:72:cb:f0:9e:83:c2:f6:97:c5:59:7a:a5:
28:58:0c:7c:16:cb:c3:cf:aa:98:44:cc:13:5f:af:
82:47:4a:51:d9:82:1c:da:24:82:34:0b:bc:76:44:
f1:99:7b:42:57:ea:f5:97:4c:cf:35:92:ba:9f:ff:
7b:f7:92:a5:9e:5b:a4:9b:95:32:65:c5:09:bb:62:
25:09:52:4b:93:ed:70:78:43:74:1d:3c:f8:34:e8:
07:c1:a8:96:26:e3:ef:8f:2c:80:e7:a3:6f:f6:c1:
76:c5:32:4f:d2:0a:bc:61:6d:27:e7:26:f8:e3:a4:
a6:95:c6:1b:22:db:0b:d3:0f:1e:2e:93:1d:2f:5c:
79:23:81:c8:72:82:e5:39:68:ac:e5:e3:06:e7:26:
eb:b1:24:65:7d:68:37:f2:02:d7:ec:4b:39:0d:81:
ab:ff:64:36:da:ac:79:18:16:98:6a:de:e2:23:2d:
52:84:46:13:84:f8:1a:d4:62:60:35:33:d5:c7:96:
04:38:52:83:c9:59:6d:c3:ec:1b:04:49:16:4a:fe:
2e:55:14:dd:5d:61:8d:1d:04:6a:58:f5:67:fe:14:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:31:66:21:52:20:A7:65:72:18:17:31:F3:C6:FD:B3:B3:59:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FC043A42AD811F1B9AFA094DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.6.0/24
Signature Algorithm: sha256WithRSAEncryption
13:04:4e:49:e8:d7:2d:4d:db:86:97:5f:af:cc:7a:54:59:2a:
70:d6:1a:8f:0e:aa:75:bc:10:99:99:66:d5:b9:fa:12:27:a7:
55:81:01:e8:79:50:f1:f2:c2:1e:41:d3:b3:de:3d:b6:ba:07:
7a:5e:59:57:c9:8a:bf:bc:8e:57:d6:3b:d7:e0:e8:94:21:c5:
4b:8e:98:8c:1c:67:09:fc:92:d9:3d:63:f3:fc:a8:2a:3a:44:
93:30:45:11:bf:5f:a8:d7:ed:62:63:68:63:7f:b5:ec:43:51:
be:0c:2b:ea:01:5b:3e:bc:e9:6f:df:dc:4a:84:83:56:db:38:
e7:5b:1f:9b:2f:03:02:26:17:42:ca:8d:b3:76:dc:d1:8a:7f:
75:81:6c:a7:92:65:f9:a2:a5:e1:a0:3d:b3:53:dc:8e:a5:fb:
be:61:8c:f2:72:a6:42:78:6d:39:10:01:08:69:b2:48:6f:15:
5b:46:ec:f7:eb:99:27:39:4c:0f:7c:c7:1b:72:f4:95:00:dd:
02:a9:43:6f:c0:d8:6d:df:a6:34:c8:9d:6c:89:07:77:15:4a:
1d:ab:82:89:d4:a6:dc:86:10:35:5f:19:f1:c7:18:74:66:29:
6b:3d:b6:02:82:32:52:51:ca:f0:84:98:11:0f:24:8c:a8:08:
2b:17:ae:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcF5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI4MTkwMTEyWhcNMjYwMzMwMTkwMTEyWjAYMRYw
FAYDVQQDEw02OWM4MjU3ZC04OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxqdhH6FHlWe1C++vrtj0nZvFCE0URbY+G0AOHrgee8pyy/Ceg8L2l8VZ
eqUoWAx8FsvDz6qYRMwTX6+CR0pR2YIc2iSCNAu8dkTxmXtCV+r1l0zPNZK6n/97
95Klnlukm5UyZcUJu2IlCVJLk+1weEN0HTz4NOgHwaiWJuPvjyyA56Nv9sF2xTJP
0gq8YW0n5yb446SmlcYbItsL0w8eLpMdL1x5I4HIcoLlOWis5eMG5ybrsSRlfWg3
8gLX7Es5DYGr/2Q22qx5GBaYat7iIy1ShEYThPga1GJgNTPVx5YEOFKDyVltw+wb
BEkWSv4uVRTdXWGNHQRqWPVn/hQZKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAGr
MWYhUiCnZXIYFzHzxv2zs1k9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RkMwNDNBNDJBRDgxMUYxQjlBRkEwOTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoGMA0GCSqGSIb3DQEB
CwUAA4IBAQATBE5J6NctTduGl1+vzHpUWSpw1hqPDqp1vBCZmWbVufoSJ6dVgQHo
eVDx8sIeQdOz3j22ugd6XllXyYq/vI5X1jvX4OiUIcVLjpiMHGcJ/JLZPWPz/Kgq
OkSTMEURv1+o1+1iY2hjf7XsQ1G+DCvqAVs+vOlv39xKhINW2zjnWx+bLwMCJhdC
yo2zdtzRin91gWynkmX5oqXhoD2zU9yOpfu+YYzycqZCeG05EAEIabJIbxVbRuz3
65knOUwPfMcbcvSVAN0CqUNvwNht36Y0yJ1siQd3FUodq4KJ1KbchhA1Xxnxxxh0
ZilrPbYCgjJSUcrwhJgRDySMqAgrF64x
-----END CERTIFICATE-----
Generated at Sat Mar 28 22:53:02 2026 by rpki-client