Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7106461838A411F18CF181E7CE1D38B0.roa
File: 7106461838A411F18CF181E7CE1D38B0.roa (raw, json)
Hash identifier: Zk0nl3x2Xus4oXkeL+34kOo4BJYobBNLRFruskpAisU=
Subject key identifier: B3:4D:1C:6E:C7:FA:FB:1D:5D:9E:D4:3D:64:E8:7F:EA:BE:79:3D:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C54C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7106461838A411F18CF181E7CE1D38B0.roa
Signing time: Wed 15 Apr 2026 08:23:55 +0000
ROA not before: Wed 15 Apr 2026 08:23:50 +0000
ROA not after: Wed 06 May 2026 08:23:50 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
154.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116044 (0x1c54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 08:23:50 2026 GMT
Not After : May 6 08:23:50 2026 GMT
Subject: CN=69df4b1b-bc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:8c:59:8f:ea:4c:73:62:34:ea:33:40:be:
03:3f:c8:79:8c:da:5f:06:d6:f6:c2:1a:42:65:f9:
da:ae:9d:c0:41:b2:9a:b7:36:f8:5a:89:ed:46:7e:
25:7f:ef:0e:62:f8:90:f1:da:1e:a8:8c:74:a1:06:
d5:87:d3:a6:db:e7:50:17:68:84:0f:7b:94:ff:28:
28:76:40:24:66:61:00:19:26:27:40:73:8c:9f:5a:
89:82:d0:b8:c4:ca:d8:94:16:8b:33:1a:a4:0e:35:
3c:1b:03:00:a4:e2:11:37:ae:b2:8e:90:58:f9:2b:
e7:91:bb:ec:fe:73:b6:e9:54:84:a7:b3:0e:79:27:
83:b0:1f:1b:64:1d:ac:78:a9:f7:90:a1:75:e7:7c:
d3:6b:20:d7:14:47:bf:1f:65:ca:1b:9a:7a:1a:62:
26:6f:e7:60:0a:f0:38:30:61:6c:75:38:e6:ee:d7:
2e:58:07:62:11:4f:57:4a:da:a5:fc:bf:2c:10:f4:
0d:8a:93:bb:87:b4:99:87:74:f0:00:e5:a6:8a:6a:
c9:8a:d2:54:d8:81:c2:a4:78:c4:b2:fd:f6:e7:7b:
89:6d:2a:c5:aa:ae:49:e9:4c:61:8f:b7:cb:d4:7e:
de:98:76:c7:c9:30:a7:39:be:31:4a:68:f7:1b:63:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:1C:6E:C7:FA:FB:1D:5D:9E:D4:3D:64:E8:7F:EA:BE:79:3D:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7106461838A411F18CF181E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
78:3e:8a:18:a2:0c:25:f3:27:eb:22:4a:00:fb:ec:01:4a:f4:
7f:4c:01:c8:3d:31:af:3f:6a:b5:12:f3:c6:07:57:22:f3:91:
83:bc:5f:25:ec:83:d7:62:16:35:b9:fc:eb:7c:1c:80:83:0f:
ee:ac:ab:c9:33:bb:32:e8:3a:b6:48:4d:61:a8:cc:1d:4f:bc:
8f:dc:83:8f:1e:bc:29:1d:ff:d4:f5:a4:dd:11:74:9f:de:e3:
f2:bb:eb:6a:6d:42:de:16:85:ba:90:1c:c8:13:52:5e:53:1c:
98:b1:29:c7:3f:e0:0a:b4:2a:c4:51:6c:c5:1a:70:6b:15:bb:
43:02:96:59:8e:09:6e:b9:be:2b:22:0a:a5:d4:e6:76:6a:c9:
d2:9f:3a:69:66:ce:c3:4e:5b:53:6b:13:8a:11:28:6a:07:0c:
51:81:50:2a:52:71:76:4b:cc:2a:23:62:fa:8f:4a:81:7f:e5:
5d:b1:d0:af:39:2b:03:59:b1:63:98:72:c8:44:28:10:c9:bc:
89:dd:a1:99:99:cd:72:18:36:88:9b:31:c8:3b:2e:bc:2a:5c:
ff:97:8c:65:f8:0e:87:c0:39:e7:96:b8:48:76:b0:db:2d:39:
e1:5a:bd:ed:42:a2:40:67:99:f3:15:7f:a3:59:6b:ff:2c:21:
11:27:72:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcVMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE1MDgyMzUwWhcNMjYwNTA2MDgyMzUwWjAYMRYw
FAYDVQQDEw02OWRmNGIxYi1iYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzviMWY/qTHNiNOozQL4DP8h5jNpfBtb2whpCZfnarp3AQbKatzb4Wont
Rn4lf+8OYviQ8doeqIx0oQbVh9Om2+dQF2iED3uU/ygodkAkZmEAGSYnQHOMn1qJ
gtC4xMrYlBaLMxqkDjU8GwMApOIRN66yjpBY+Svnkbvs/nO26VSEp7MOeSeDsB8b
ZB2seKn3kKF153zTayDXFEe/H2XKG5p6GmImb+dgCvA4MGFsdTjm7tcuWAdiEU9X
Stql/L8sEPQNipO7h7SZh3TwAOWmimrJitJU2IHCpHjEsv3253uJbSrFqq5J6Uxh
j7fL1H7emHbHyTCnOb4xSmj3G2O5+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLNN
HG7H+vsdXZ7UPWTof+q+eT0fMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MTA2NDYxODM4QTQxMUYxOENGMTgxRTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmliAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4PooYogwl8yfrIkoA++wBSvR/TAHIPTGvP2q1EvPGB1ci85GDvF8l
7IPXYhY1ufzrfByAgw/urKvJM7sy6Dq2SE1hqMwdT7yP3IOPHrwpHf/U9aTdEXSf
3uPyu+tqbULeFoW6kBzIE1JeUxyYsSnHP+AKtCrEUWzFGnBrFbtDApZZjgluub4r
Igql1OZ2asnSnzppZs7DTltTaxOKEShqBwxRgVAqUnF2S8wqI2L6j0qBf+VdsdCv
OSsDWbFjmHLIRCgQybyJ3aGZmc1yGDaImzHIOy68Klz/l4xl+A6HwDnnlrhIdrDb
LTnhWr3tQqJAZ5nzFX+jWWv/LCERJ3LR
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:25 2026 by rpki-client