Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD23042116D11F1A60113ADDAE4EC9C.roa
File: 7BD23042116D11F1A60113ADDAE4EC9C.roa (raw, json)
Hash identifier: 9xAznXT6z5vVyMxn9ypXyapC4XtVatERnqzyjOnCiMo=
Subject key identifier: 77:D2:CC:72:EB:C5:8E:29:0E:75:C1:33:22:BA:D1:8B:48:10:3C:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD23042116D11F1A60113ADDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 10:42:15 +0000
ROA not before: Tue 24 Feb 2026 10:42:10 +0000
ROA not after: Tue 31 Mar 2026 10:42:10 +0000
asID: 62240
IP address blocks: 154.195.168.0/24 maxlen: 24
154.195.169.0/24 maxlen: 24
154.195.170.0/24 maxlen: 24
154.195.171.0/24 maxlen: 24
154.195.172.0/24 maxlen: 24
154.195.173.0/24 maxlen: 24
154.195.174.0/24 maxlen: 24
154.195.175.0/24 maxlen: 24
154.195.176.0/24 maxlen: 24
154.195.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113476 (0x1bb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:42:10 2026 GMT
Not After : Mar 31 10:42:10 2026 GMT
Subject: CN=699d8087-182c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:6c:09:d8:2b:5c:f5:6d:95:c1:8c:b2:89:
f0:96:04:b1:3c:47:fa:2d:45:8d:f5:c3:96:f6:0d:
66:65:19:7e:d3:21:b0:a3:9c:3d:49:31:48:dc:28:
8a:d0:4b:43:33:7e:e2:5c:7c:40:6e:44:39:ca:fc:
0e:91:a2:b6:59:77:ef:c1:93:4d:bd:7e:ce:a5:94:
e0:7b:0b:8f:ad:16:31:c8:63:30:f1:48:e8:c5:0b:
17:c6:0c:30:4f:60:26:b0:9a:47:c3:42:39:c2:99:
db:90:94:94:57:d5:aa:57:17:9d:fc:45:da:8b:58:
c9:c5:7f:84:84:98:4c:c9:68:31:43:12:2c:98:62:
65:c1:f6:cf:7c:93:3f:94:f0:62:c2:86:35:97:ef:
c1:a3:91:2c:ba:38:11:66:15:10:60:ae:37:17:fa:
f0:3f:15:b6:07:30:61:7d:ad:de:4a:8f:58:43:de:
b1:23:51:9f:5a:3e:7d:16:dd:1f:b1:28:79:82:a0:
9f:d2:2b:5c:b3:95:22:48:73:77:93:dc:a8:a5:ae:
f2:78:cd:3f:23:77:6c:66:10:68:87:20:63:11:2b:
5f:d8:3a:47:a2:ed:76:38:eb:55:de:8e:e2:2f:bb:
26:0b:17:cf:2c:bc:b3:cf:83:8c:48:dd:ab:44:47:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:CC:72:EB:C5:8E:29:0E:75:C1:33:22:BA:D1:8B:48:10:3C:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD23042116D11F1A60113ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.168.0-154.195.177.255
Signature Algorithm: sha256WithRSAEncryption
1a:01:37:2f:20:f8:c8:36:d5:81:b3:0e:dc:da:31:3d:f0:d0:
ec:28:49:4c:1a:fc:d1:10:5c:28:7b:1a:34:e6:2a:6e:79:af:
42:1b:e9:95:5f:01:57:92:da:d6:c9:b6:a0:92:a1:e5:4d:82:
50:b9:9b:ef:cd:2f:1f:f8:62:6f:d4:79:18:6e:f8:fc:83:69:
b6:52:8f:a5:b3:a2:4a:bc:49:5e:b7:1d:ec:af:89:3f:16:3f:
95:51:c4:8a:78:67:bd:70:90:c5:36:8a:08:25:91:69:1b:30:
f1:2d:4d:a9:b0:aa:65:44:e3:7c:d8:76:ac:9e:ed:b9:25:b7:
93:f8:1e:38:21:21:61:b1:44:72:9c:56:35:0e:57:d1:26:e3:
b0:b6:58:dc:37:3a:7d:ea:04:2d:9e:f4:70:cf:b7:58:a1:93:
23:f5:77:4c:8b:c6:80:f2:24:01:17:a4:19:fb:44:ca:e0:f2:
a9:c0:31:d0:c3:29:a7:2b:94:e9:4a:d2:f1:86:b5:2d:99:c0:
6d:af:15:8a:01:4a:9c:2b:9d:c1:62:fe:d5:37:10:a0:0d:1b:
66:0f:59:39:2d:8f:a2:05:d0:55:fa:a6:0e:0d:2a:f7:99:30:
50:40:8a:9d:50:75:5f:63:ad:ed:34:f4:eb:d9:e5:ea:42:77:
47:90:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:45:17 2026 by rpki-client