Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ABD7B7C114E11F191C6EBF3DAE4EC9C.roa
File: 7ABD7B7C114E11F191C6EBF3DAE4EC9C.roa (raw, json)
Hash identifier: d6idToBS2ChTfgnie2CH7knkTOceCyUkt6o9guyB7ls=
Subject key identifier: 94:38:CF:0E:65:E6:B3:29:1F:A9:DB:8B:62:B6:31:C1:27:35:24:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ABD7B7C114E11F191C6EBF3DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 07:00:19 +0000
ROA not before: Tue 24 Feb 2026 07:00:14 +0000
ROA not after: Wed 11 Mar 2026 07:00:14 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113440 (0x1bb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 07:00:14 2026 GMT
Not After : Mar 11 07:00:14 2026 GMT
Subject: CN=699d4c83-1e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:52:b7:e7:4b:41:94:44:c3:16:01:e6:49:
22:a8:50:40:b5:1c:1b:ef:a4:9e:d2:9b:6d:5e:fd:
75:dc:34:c1:a6:c0:31:c9:ea:34:dc:ee:65:9f:03:
67:45:49:d0:ab:70:76:ff:7d:c8:70:27:d2:56:56:
50:6f:50:64:4e:1a:f1:dc:e8:a6:8e:c4:62:97:e7:
b2:f5:b6:a7:1b:23:45:b9:3b:0e:67:cf:c8:85:4a:
ce:84:56:1f:80:30:9e:37:e2:be:d9:65:28:29:2f:
bb:8c:ad:d7:86:ca:79:df:f3:41:45:cb:e7:3a:23:
e0:bc:0f:3f:4c:bc:2f:21:b0:1e:90:d4:be:71:ec:
9e:00:c5:63:41:cf:ee:99:0d:21:48:05:f6:f6:55:
11:7f:bc:be:2f:aa:1b:ba:66:0e:9b:24:a8:48:ad:
c7:53:a1:43:2d:3b:8d:7f:c1:61:b1:d3:d5:04:a1:
63:2b:b0:ce:62:df:bb:85:fb:2e:c1:6c:dd:b6:a8:
df:d7:28:b1:b0:98:f7:86:e9:33:e7:a1:a4:04:a2:
5f:ba:d2:7b:a3:8c:e8:5e:5a:55:3c:68:7f:a1:1f:
6a:49:63:14:b6:f7:c2:30:49:3a:4d:79:6b:47:4c:
84:16:52:37:89:a1:8e:33:3d:d2:55:b2:a2:2c:44:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:38:CF:0E:65:E6:B3:29:1F:A9:DB:8B:62:B6:31:C1:27:35:24:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ABD7B7C114E11F191C6EBF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
18:de:96:91:78:27:d9:10:9a:16:47:7a:30:79:be:68:af:46:
3b:ae:2e:98:ea:70:d4:f1:d6:f0:97:37:c5:09:34:14:3e:31:
2e:a8:d0:7f:c7:c8:95:0e:cf:bc:f1:7e:ed:2b:8e:ab:b1:bf:
5e:31:28:1c:3d:7c:5c:b8:91:83:a2:1b:65:47:d1:c8:17:73:
49:60:c4:cd:d7:e4:b2:9d:36:7c:32:93:93:a0:a4:84:48:45:
b4:d7:91:ad:41:ad:7b:e4:fd:d6:c0:fa:bb:38:95:6c:cb:ea:
67:63:2d:e7:66:73:23:f5:94:9f:97:15:8a:22:3b:da:e6:45:
5b:3c:0b:9a:87:ab:f5:4d:7b:c1:f5:50:f0:aa:74:ff:6d:f4:
e9:36:0a:ef:55:f3:0d:13:4d:8a:35:52:6d:30:ce:c9:fb:f2:
96:f2:7d:cf:7a:f2:6d:a7:37:bc:b5:3e:b6:b5:25:fa:d3:f4:
ce:85:34:cd:c1:b5:93:d6:d6:6f:eb:a3:57:dc:8f:9b:10:74:
81:dc:45:1d:c9:56:4e:29:86:a9:1c:76:e8:8c:88:4e:75:0a:
c8:0c:a4:1c:0c:d8:93:56:87:db:1d:b1:53:4b:68:5a:2a:36:
fd:c3:8f:e5:90:ef:b1:99:c0:dc:d7:72:56:c4:b0:9f:50:eb:
23:6a:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:00 2026 by rpki-client