Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C915EB8370B11F19F6424A3CE1D38B0.roa
File: 7C915EB8370B11F19F6424A3CE1D38B0.roa (raw, json)
Hash identifier: Z1lTLKgBbZj47nn3JO4GN0xnwSN1GFveM0OJg6DcAww=
Subject key identifier: A4:9D:08:6B:57:81:2D:47:29:CA:8A:44:26:41:C3:2D:83:54:01:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C915EB8370B11F19F6424A3CE1D38B0.roa
Signing time: Mon 13 Apr 2026 07:36:30 +0000
ROA not before: Mon 13 Apr 2026 07:36:26 +0000
ROA not after: Thu 12 Apr 2029 07:36:26 +0000
asID: 17561
IP address blocks: 154.218.113.0/24 maxlen: 24
154.218.114.0/24 maxlen: 24
154.218.115.0/24 maxlen: 24
154.218.116.0/24 maxlen: 24
154.218.117.0/24 maxlen: 24
154.218.118.0/24 maxlen: 24
154.218.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115948 (0x1c4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 07:36:26 2026 GMT
Not After : Apr 12 07:36:26 2029 GMT
Subject: CN=69dc9cfe-b706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:54:6d:7b:f2:31:5c:22:09:a3:1d:2f:66:
30:d4:aa:fc:fd:17:29:6f:59:33:b7:8e:b7:a6:21:
ae:4e:2e:d7:64:4d:ab:bc:c8:b2:a4:cf:65:30:3c:
ca:34:84:bb:00:f2:62:27:c7:51:33:b4:13:b3:97:
0f:f9:53:7a:3b:f3:79:45:de:b1:85:b9:55:2b:1a:
cb:35:f5:02:82:c1:7f:85:42:3f:67:80:24:f0:8a:
57:78:13:6f:6c:8f:73:b2:a9:d5:93:e2:5d:e4:1c:
dd:34:13:db:47:60:94:6a:81:7c:91:6a:68:6e:d0:
d6:d9:18:43:9c:10:f1:85:00:9e:9d:88:9b:fd:00:
66:41:d6:0c:9b:4d:99:5d:ae:6a:bd:49:b3:03:5c:
08:ad:a5:a1:46:00:56:67:25:6d:2a:ea:2e:22:3b:
ea:22:61:15:53:d1:79:87:12:d7:1f:b6:4c:92:f8:
76:33:e6:2e:18:6a:83:90:fe:4a:4a:9e:8e:fa:44:
63:42:c8:30:9f:1b:f9:c9:50:12:5c:c1:2f:ac:8d:
54:38:d0:9e:a9:61:36:e4:14:ab:72:ec:54:41:b6:
59:74:c5:2d:71:a6:c2:4c:38:bb:39:cc:c5:64:07:
64:d1:34:fa:2a:15:b1:d9:23:3e:7e:2e:1c:a5:2e:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9D:08:6B:57:81:2D:47:29:CA:8A:44:26:41:C3:2D:83:54:01:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C915EB8370B11F19F6424A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.113.0-154.218.119.255
Signature Algorithm: sha256WithRSAEncryption
ce:9d:bd:64:72:10:ed:46:5d:d7:13:85:7c:7a:02:4f:94:06:
7a:87:af:50:af:83:29:32:02:13:ec:ac:7e:17:c8:ed:f8:e5:
eb:d6:85:e9:a4:a7:89:b9:0c:7a:d0:d7:57:a9:9c:dd:ae:c3:
1a:9d:26:50:a9:ff:52:59:41:7b:24:39:65:25:fe:43:cd:b6:
b2:00:ff:1d:04:15:7c:7e:26:7e:66:62:07:17:78:2c:2b:b0:
22:20:ba:8d:61:a5:0d:92:57:86:6c:b3:f3:08:99:81:2d:1e:
9f:e5:28:fa:45:35:f7:38:7f:a0:66:61:78:c5:f9:c8:c9:07:
57:79:08:1d:76:ad:71:0e:dc:8c:0d:ae:0e:69:c1:3d:cb:4d:
c0:35:6f:e9:87:c7:ef:32:18:01:16:92:ef:aa:0c:0e:d2:7c:
26:14:5f:15:ee:b8:e5:57:29:97:39:a0:ff:50:e8:46:a5:02:
31:10:76:6b:75:6f:a0:01:ea:94:cf:b5:b2:34:a6:40:3a:2c:
a8:2d:4d:39:bf:93:16:cf:bb:5f:3c:4c:76:87:fb:5b:ad:ac:
0a:1f:b1:6a:6d:a4:6c:ff:93:0d:3c:65:c5:0e:4b:23:4a:fd:
03:e9:a4:f9:4f:51:88:c2:63:e2:05:95:68:70:47:69:94:25:
fd:21:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:12 2026 by rpki-client