Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7378729434D611F1AF3DA51ACF1D38B0.roa
File: 7378729434D611F1AF3DA51ACF1D38B0.roa (raw, json)
Hash identifier: It4FXuenIcGd6hXxSepR44yL8bHy0XS+hD9qJiK8iX0=
Subject key identifier: D2:3E:D9:DE:72:89:A3:FE:63:AD:30:69:FA:76:52:1B:A2:52:3C:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C461
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7378729434D611F1AF3DA51ACF1D38B0.roa
Signing time: Fri 10 Apr 2026 12:11:49 +0000
ROA not before: Fri 10 Apr 2026 12:11:45 +0000
ROA not after: Sun 19 Apr 2026 12:11:45 +0000
asID: 17497
IP address blocks: 154.222.148.0/22 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 12:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115809 (0x1c461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 12:11:45 2026 GMT
Not After : Apr 19 12:11:45 2026 GMT
Subject: CN=69d8e905-8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:3e:73:f9:a2:5c:dc:d2:76:d7:24:0e:70:
02:0d:26:d1:f1:f2:3c:07:0a:c9:c6:3b:7d:34:7b:
75:b5:d7:d1:18:87:53:9d:71:cf:ba:35:d2:36:f9:
0d:c4:e5:1b:2f:9f:ad:07:95:5d:84:ce:4e:e5:d0:
c7:f6:e3:8b:24:8f:41:08:4c:bf:4c:4c:6b:f8:6c:
5a:71:57:c0:e4:15:b4:29:cc:50:b7:c3:30:f8:bf:
b2:0d:49:26:0d:b7:f4:56:8f:9b:3d:59:3b:a5:68:
58:2d:07:c0:24:10:05:dc:dc:09:1f:02:dc:42:27:
17:f5:ec:9f:53:02:cc:56:5e:8d:7e:80:f9:57:51:
e0:8d:42:4f:61:19:eb:14:3a:c9:0c:a0:d4:65:3e:
3d:7a:d2:d4:bd:ee:da:24:7a:50:92:82:09:5c:f0:
78:d5:23:f1:83:f4:de:40:f5:fe:35:53:b6:48:8d:
b3:a5:e6:58:ec:49:f4:b6:f8:23:de:f2:33:00:7a:
c5:4a:ce:8f:a3:da:92:70:b9:59:2c:1d:11:f8:ac:
0e:d2:c6:4e:35:7d:71:4d:c4:9b:d4:85:d5:57:30:
b4:1c:c9:81:0c:b8:fc:36:a4:4f:73:9f:9c:13:6d:
c2:e7:28:e1:50:76:92:7c:74:ac:32:fd:32:db:50:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3E:D9:DE:72:89:A3:FE:63:AD:30:69:FA:76:52:1B:A2:52:3C:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7378729434D611F1AF3DA51ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
67:d3:d9:e9:39:f3:1f:55:23:e9:bd:9f:45:69:52:e6:c4:8c:
34:12:6c:04:79:1d:bf:f4:ec:01:2f:09:f7:5c:02:f8:02:e9:
86:41:a6:fe:7a:b0:b1:1f:f2:50:fc:41:37:3d:06:01:48:3c:
fb:d7:96:f2:1b:96:31:23:c3:99:18:71:fe:0e:9d:f7:74:49:
02:53:90:ab:d9:f6:14:50:5c:35:28:3a:e0:3d:d5:40:ff:f7:
af:c3:33:73:c6:ba:46:c8:41:18:b9:0f:f3:39:f4:88:c6:b7:
89:f1:a0:0e:51:68:c2:fb:8b:3d:46:bc:0d:5f:5e:50:77:c0:
d6:9b:46:7f:92:88:86:ea:c3:70:c5:6d:91:47:47:e5:d6:64:
49:0b:ac:35:59:a9:fa:5a:3b:c1:b5:83:ec:d0:88:bc:49:70:
fe:eb:bf:0d:4c:ea:74:6c:29:34:cc:46:f6:24:7f:76:35:8a:
3a:3d:e3:97:42:3e:37:15:db:64:36:f4:7b:07:fb:ed:6e:ec:
aa:37:b1:e0:6b:06:13:c4:1d:74:73:b9:fd:cd:75:ca:a5:7d:
23:31:47:99:62:66:14:ee:7f:3a:30:6a:49:b2:ec:ec:06:b1:
1c:da:a1:4c:1e:57:d9:3e:2e:5d:94:71:64:86:4f:3d:d7:a2:
aa:d0:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:24:36 2026 by rpki-client