Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B1DF43401A911F1811153CEDAE4EC9C.roa
File: 7B1DF43401A911F1811153CEDAE4EC9C.roa (raw, json)
Hash identifier: smA201fi1IS5jXPUKiiwRRLw74zRqYJBCs+msTUFCkM=
Subject key identifier: 96:F8:A1:9D:C7:F8:39:87:95:F2:F3:8F:CC:93:07:63:FF:89:95:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B883
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B1DF43401A911F1811153CEDAE4EC9C.roa
Signing time: Wed 04 Feb 2026 09:11:26 +0000
ROA not before: Wed 04 Feb 2026 09:11:21 +0000
ROA not after: Thu 12 Mar 2026 09:11:21 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112771 (0x1b883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 09:11:21 2026 GMT
Not After : Mar 12 09:11:21 2026 GMT
Subject: CN=69830d3d-9484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:5d:91:b6:66:9c:b8:4b:5e:d9:c3:5a:b5:
2c:4b:5c:05:f2:0c:e3:3a:e7:e9:27:53:c2:98:d3:
85:4b:2b:c3:3c:11:ac:7b:0d:62:d5:d8:07:43:a4:
cf:80:bc:4e:9f:35:5f:f3:b4:90:79:ac:70:ba:d2:
7a:f8:19:f5:70:7e:04:c6:82:c2:d3:da:87:f2:0d:
bc:ba:cc:e6:80:49:07:d2:7b:08:70:e1:0e:9a:5a:
42:21:be:3f:56:e5:34:f8:b8:8e:9a:bb:f2:45:33:
93:84:f2:64:c3:4f:38:09:83:4c:80:b9:08:7e:ab:
df:b0:0c:f2:b8:ee:09:a5:0b:49:f7:50:e0:bc:a0:
89:41:3a:76:60:7d:b0:8d:c8:9b:30:f5:7b:57:d9:
22:1d:87:c2:a9:4e:8c:fa:03:c0:23:c8:e2:03:6c:
49:cb:07:72:8f:84:81:44:45:79:7e:1c:96:7d:74:
d2:09:5d:14:5d:ab:78:e3:4d:62:28:7a:6d:11:ca:
e8:cb:19:a1:39:e5:f2:81:4a:72:b9:68:12:09:a1:
b2:9d:37:eb:f5:48:cc:cf:2e:0e:07:70:02:e0:48:
6d:21:86:85:69:fe:b2:59:70:cd:76:11:b4:34:af:
d7:8e:d7:d3:3e:1a:47:3b:2c:0b:72:e2:f5:94:93:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:A1:9D:C7:F8:39:87:95:F2:F3:8F:CC:93:07:63:FF:89:95:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B1DF43401A911F1811153CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0-154.223.64.255
154.223.66.0-154.223.77.255
Signature Algorithm: sha256WithRSAEncryption
59:5e:74:ef:94:d5:3d:9a:24:35:34:68:7d:6a:57:35:0c:22:
1e:e0:55:74:46:9a:9c:0d:f8:ef:68:52:9c:af:da:5f:da:af:
c4:12:87:32:ec:41:f7:30:22:46:3b:38:02:64:f5:0f:f1:9e:
64:8a:c1:37:14:b6:9e:3b:50:72:f4:2d:2d:08:ce:4b:ba:97:
21:b2:b8:a3:9f:30:14:b3:33:8e:08:a2:be:6f:cb:11:e4:07:
d6:36:0b:6e:30:9d:0c:20:6d:59:85:8d:01:9e:8e:c7:84:d0:
29:64:52:2c:95:05:24:ea:78:18:a3:b3:cc:b3:1c:fc:da:0f:
8f:63:a4:32:13:37:3b:61:22:6e:3a:b7:94:cd:00:20:86:af:
d7:14:c9:70:2e:5d:d9:56:05:8e:4b:b4:e4:44:66:00:61:7b:
69:32:b9:12:e2:f5:ae:59:02:e1:04:4a:f7:40:60:a1:bf:e6:
ed:07:f5:57:a5:0d:30:2e:d1:e8:20:ed:a1:d3:b6:a3:81:4f:
df:63:c4:ac:c5:b8:23:e8:58:33:f2:56:89:b4:cb:bf:93:6c:
26:7a:52:e5:e1:ae:1c:9d:fe:dd:20:de:4d:70:eb:9d:21:3b:
79:3e:57:30:64:30:ea:a9:aa:83:ea:25:1b:fe:b4:95:94:00:
e9:41:a3:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:11 2026 by rpki-client