Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AD9AC8A340211F1980BBAB1CE1D38B0.roa
File: 7AD9AC8A340211F1980BBAB1CE1D38B0.roa (raw, json)
Hash identifier: /TnhuTtmWGz6rChZ4MNcy2u0RIS5MQWOJ/ApQV7dkTE=
Subject key identifier: FE:39:19:18:D1:EC:03:48:1F:18:24:52:0A:72:53:74:4B:60:9D:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AD9AC8A340211F1980BBAB1CE1D38B0.roa
Signing time: Thu 09 Apr 2026 10:54:28 +0000
ROA not before: Thu 09 Apr 2026 10:54:23 +0000
ROA not after: Sun 24 May 2026 10:54:23 +0000
asID: 13335
IP address blocks: 154.90.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115672 (0x1c3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 10:54:23 2026 GMT
Not After : May 24 10:54:23 2026 GMT
Subject: CN=69d78564-cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:36:09:18:d2:4c:1d:f2:58:73:01:1e:91:
fe:01:79:29:09:0e:e6:41:3b:84:d4:2c:86:8b:29:
b9:8e:25:0d:00:5c:19:c0:32:d1:ab:fa:4b:fd:a1:
c6:3c:d0:80:23:f5:a2:22:4b:b1:0a:78:13:90:4b:
1e:5f:3c:8d:92:5d:20:a0:c6:af:ba:a4:1b:c4:58:
ac:0a:85:94:e6:ca:33:8b:69:4a:0e:d3:90:24:31:
5f:ea:2c:0d:a4:e6:f0:36:0f:2e:38:34:b7:5d:f2:
23:4b:fb:74:00:85:a9:ef:5f:2a:8b:54:c1:9b:31:
af:e8:de:7a:0c:42:7c:9b:b1:45:59:c4:87:fd:d4:
86:9c:ae:c5:15:e6:43:99:0c:46:ac:0b:e5:a8:46:
10:69:fd:e8:25:83:c3:d8:e9:a1:aa:7e:5f:88:66:
2b:64:41:fc:b8:45:2f:39:80:aa:a9:67:72:18:d8:
d1:bb:bb:f2:7a:4b:85:cb:ca:f5:3e:d6:56:b6:7e:
38:eb:d9:5d:d5:43:bc:1a:b4:e1:2e:a0:49:7f:3e:
f7:c0:2f:9b:1f:fd:01:17:4a:c9:2a:34:3a:56:18:
85:17:f6:c8:ab:32:98:bb:bc:91:00:bb:02:60:44:
ba:48:4f:62:90:57:8e:11:65:1d:f8:3d:c2:1a:48:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:19:18:D1:EC:03:48:1F:18:24:52:0A:72:53:74:4B:60:9D:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AD9AC8A340211F1980BBAB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e9:d7:0d:5b:3c:a5:e3:6c:ea:ed:49:85:ae:94:38:63:d0:
0a:6f:7c:f6:23:c0:fc:6d:41:09:71:29:9c:f1:8a:73:be:d0:
69:7e:9e:66:14:e8:af:46:e9:b0:26:29:17:4d:9f:f5:a1:9c:
92:c0:e9:a8:a5:c2:a9:b6:d8:5c:d1:8b:70:2e:fe:b7:7e:0e:
6f:d6:c7:25:70:27:fd:63:e4:7c:7f:bb:8c:d3:6f:af:63:af:
c7:86:97:17:05:f8:1d:75:8c:3c:7e:a1:88:ad:47:7a:61:ba:
52:83:b0:67:f5:e2:14:d7:cd:85:25:69:06:38:74:c4:ab:8e:
27:97:8d:d4:2f:68:55:b8:15:ae:35:45:de:bd:56:47:4c:36:
db:94:57:81:07:8c:22:7a:64:16:45:82:e6:08:5d:db:af:f3:
7a:e5:51:b2:3d:77:33:2f:e1:14:b8:76:a0:cc:f1:0d:d3:59:
82:69:92:90:fe:f0:af:3b:5e:f1:4a:cc:c7:24:07:ef:ee:f5:
4d:93:4c:32:38:fc:e9:2a:c1:cc:fc:4c:9c:3c:d0:ef:ce:ca:
49:be:f3:82:52:79:f7:44:1a:2b:53:55:56:78:75:54:86:51:
79:47:02:a5:77:b7:69:e4:de:f5:99:8e:18:99:aa:84:ef:48:
d1:b0:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:58 2026 by rpki-client