Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D4A8114019A11F1B7C4FAF2DAE4EC9C.roa
File: 7D4A8114019A11F1B7C4FAF2DAE4EC9C.roa (raw, json)
Hash identifier: 9dvsQC2VozlxucbILU4Xrb6XewIQwHtPBim4SxgKabs=
Subject key identifier: E9:A5:76:9F:55:33:84:4C:17:72:1B:E1:F6:45:07:DE:64:44:F9:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B871
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D4A8114019A11F1B7C4FAF2DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 07:24:07 +0000
ROA not before: Wed 04 Feb 2026 07:24:01 +0000
ROA not after: Thu 12 Mar 2026 07:24:01 +0000
asID: 138915
IP address blocks: 154.93.38.0/23 maxlen: 24
154.93.40.0/23 maxlen: 24
154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.47.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.93.49.0/24 maxlen: 24
154.93.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112753 (0x1b871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 07:24:01 2026 GMT
Not After : Mar 12 07:24:01 2026 GMT
Subject: CN=6982f417-ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:ac:8c:81:8d:00:61:23:a7:66:d8:b1:4f:
8d:21:3d:2f:61:c6:4d:a6:79:bd:05:7e:1d:eb:3f:
15:02:b6:2c:5f:dd:97:d6:d7:d0:d1:a5:49:22:66:
7a:19:ff:81:c4:52:26:b7:8d:95:a9:97:1d:79:f9:
ef:2f:3d:51:df:0c:2a:82:1a:95:6a:56:2c:a5:f7:
29:2e:71:3b:5d:22:2b:b2:f0:88:5c:90:dc:d0:35:
d2:fb:e2:14:6a:72:6a:b6:4d:2f:b6:57:92:7a:1f:
d7:7e:13:b4:ba:d2:cd:6b:3c:83:31:66:93:ee:47:
13:59:96:0f:84:ad:67:9e:38:4d:ad:85:ba:75:21:
99:d3:5d:d4:d0:d0:7c:04:66:cb:6a:0d:bf:87:4f:
53:9f:3a:16:99:58:df:56:4b:56:96:99:72:d2:21:
b6:65:85:9d:51:ba:42:48:b6:df:45:96:8b:35:b9:
f3:ef:f2:0e:7f:b0:ac:26:9c:df:9d:ef:99:ff:4a:
fd:d8:fb:c2:46:ad:64:ea:20:36:bf:70:53:4e:32:
f4:7f:f2:e9:e7:cc:51:e1:15:88:9b:c7:49:50:d6:
f3:8c:64:76:7f:4d:e8:fe:64:3e:b4:66:bc:14:1f:
1c:cf:a3:aa:6a:10:63:d8:7e:90:d1:11:02:cb:8e:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:76:9F:55:33:84:4C:17:72:1B:E1:F6:45:07:DE:64:44:F9:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D4A8114019A11F1B7C4FAF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.38.0-154.93.49.255
154.93.52.0/23
Signature Algorithm: sha256WithRSAEncryption
00:5c:1f:dd:3b:98:7c:db:05:b7:02:78:b3:2a:4a:da:d2:c3:
e5:f2:5e:40:5d:81:77:ed:60:49:48:47:d4:cc:32:7b:40:75:
c4:10:45:54:8c:6d:bd:e9:5d:1f:b3:31:94:85:f0:6f:96:03:
49:6e:f9:ba:c4:08:8d:fe:6a:e2:7f:ec:5c:ea:53:63:6b:93:
03:28:32:33:1a:81:ea:ba:6d:55:c9:74:77:61:be:16:2d:14:
6a:f1:15:1c:61:60:d7:07:72:15:a1:d2:37:74:b5:36:0b:05:
cc:6d:89:57:99:9e:be:6e:18:2b:8a:af:b0:88:05:d7:7e:93:
ea:65:bc:0f:a7:3c:0d:a3:1f:e9:b1:2d:5c:19:e5:33:fb:f8:
df:a8:e3:11:ac:82:ed:ec:18:5b:94:12:41:a3:44:5a:c8:be:
06:52:3b:4e:37:01:a3:bc:b8:80:49:6f:75:8c:57:a6:4c:4a:
8a:61:96:0b:c8:70:02:96:15:31:3a:53:40:48:f6:21:da:25:
68:c7:9a:e3:6b:43:59:bc:90:1e:7c:a4:9a:78:4e:5c:46:02:
9a:8f:97:d4:eb:7e:38:13:b3:41:a1:8f:cb:d3:9b:28:05:fc:
7f:1b:3f:a5:c6:6d:62:0d:f8:d6:23:91:7e:f1:a2:c6:fc:69:
ef:63:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:18 2026 by rpki-client