Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA13D36066911F18786017CDAE4EC9C.roa
File: 7EA13D36066911F18786017CDAE4EC9C.roa (raw, json)
Hash identifier: M2Ds8Gi3xHK3kTd68Ly5K+LJ1mXjGIsdxaNpuydPs7w=
Subject key identifier: 36:36:09:BD:27:D3:23:64:D2:54:F5:07:45:AE:82:5F:EC:29:8F:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B907
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA13D36066911F18786017CDAE4EC9C.roa
Signing time: Tue 10 Feb 2026 10:15:59 +0000
ROA not before: Tue 10 Feb 2026 10:15:54 +0000
ROA not after: Thu 02 Apr 2026 10:15:54 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
154.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112903 (0x1b907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 10 10:15:54 2026 GMT
Not After : Apr 2 10:15:54 2026 GMT
Subject: CN=698b055f-486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:dc:6c:aa:15:37:87:45:ea:98:24:f6:d2:
62:9f:e5:a2:0f:45:b5:06:28:a7:d4:f7:7b:62:b9:
cb:b3:6a:db:bb:a0:f4:2d:a6:b6:77:74:bd:45:19:
68:38:29:c7:6a:a7:ef:89:0c:eb:23:90:7f:23:e4:
20:4d:31:64:b9:9f:b7:d8:d2:b0:30:ab:b7:d1:64:
7b:43:ae:13:e5:52:dc:77:ad:ce:98:0e:5b:78:38:
4e:aa:5c:85:be:52:14:7c:56:56:1e:0f:c2:fc:2b:
61:dd:fe:81:b2:91:9a:9e:87:4c:90:6d:8d:ce:8b:
10:48:ba:b0:dc:fe:52:85:09:21:23:54:9f:ab:17:
54:29:bc:75:37:51:37:7a:ab:e1:ba:df:51:25:d4:
6d:af:9e:6b:04:c7:ef:33:c6:fd:11:27:fb:9b:22:
81:d8:24:ba:7a:9b:7e:bb:b4:53:d3:04:9b:07:ac:
53:73:29:66:8f:60:98:cb:58:07:ce:b2:75:db:77:
4d:0e:30:8e:86:51:6c:11:fc:ee:ff:ae:d1:f3:df:
6f:9a:87:ec:3f:50:c2:9a:93:ae:0f:16:6e:33:52:
c1:47:0b:df:61:e1:e7:cf:db:44:71:7d:fe:6d:3a:
bf:96:ff:47:3c:3d:8b:00:a1:55:82:92:ac:02:21:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:36:09:BD:27:D3:23:64:D2:54:F5:07:45:AE:82:5F:EC:29:8F:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA13D36066911F18786017CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
154.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:96:ee:84:c3:bb:77:48:72:e5:b0:ed:77:67:bf:2a:31:7a:
45:27:92:13:1e:f6:84:9b:b5:fd:ed:e5:54:fe:51:b3:9e:6d:
e7:f2:22:17:71:95:26:42:a3:9d:e1:bc:06:2f:6e:25:29:b4:
13:c4:c3:42:0b:03:78:f6:2e:ea:7c:74:7f:9c:82:63:cc:ba:
b3:e9:d1:34:78:f6:9e:6c:40:34:66:50:e7:e4:51:34:e7:1a:
c5:ed:ce:e5:3d:d1:22:c0:86:fd:37:ee:f5:a2:2a:05:59:68:
0f:2e:6f:b8:e5:fd:a8:07:5b:ae:02:79:74:ed:d0:ca:9c:63:
0e:8d:3e:ef:9c:17:09:67:02:2b:48:e5:07:91:63:47:05:ad:
8b:0b:4f:8b:49:79:bf:04:b6:2d:e1:7f:4b:95:c4:ea:bc:dd:
98:04:ab:c6:e3:77:74:37:ed:9e:e6:54:08:1c:3a:25:11:8f:
cd:6a:c9:7a:34:f1:76:a8:46:3b:21:74:2c:0c:21:b6:ba:29:
b9:95:d0:01:51:69:d0:69:67:30:35:41:cf:d6:dc:8a:ca:53:
1e:66:0e:9a:84:f1:d4:dc:47:20:6d:2f:92:2d:99:00:a7:99:
0f:f3:56:1f:15:8d:cd:08:17:35:99:2e:6b:d1:55:09:cb:5e:
55:90:fb:55
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAbkHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjEwMTAxNTU0WhcNMjYwNDAyMTAxNTU0WjAYMRYw
FAYDVQQDEw02OThiMDU1Zi00ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApazcbKoVN4dF6pgk9tJin+WiD0W1Biin1Pd7YrnLs2rbu6D0Laa2d3S9
RRloOCnHaqfviQzrI5B/I+QgTTFkuZ+32NKwMKu30WR7Q64T5VLcd63OmA5beDhO
qlyFvlIUfFZWHg/C/Cth3f6BspGanodMkG2NzosQSLqw3P5ShQkhI1SfqxdUKbx1
N1E3eqvhut9RJdRtr55rBMfvM8b9ESf7myKB2CS6ept+u7RT0wSbB6xTcylmj2CY
y1gHzrJ123dNDjCOhlFsEfzu/67R899vmofsP1DCmpOuDxZuM1LBRwvfYeHnz9tE
cX3+bTq/lv9HPD2LAKFVgpKsAiHKCwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDY2
Cb0n0yNk0lT1B0Wugl/sKY+bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RUExM0QzNjA2NjkxMUYxODc4NjAxN0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlqHAwQAml4BMA0GCSqG
SIb3DQEBCwUAA4IBAQDMlu6Ew7t3SHLlsO13Z78qMXpFJ5ITHvaEm7X97eVU/lGz
nm3n8iIXcZUmQqOd4bwGL24lKbQTxMNCCwN49i7qfHR/nIJjzLqz6dE0ePaebEA0
ZlDn5FE05xrF7c7lPdEiwIb9N+71oioFWWgPLm+45f2oB1uuAnl07dDKnGMOjT7v
nBcJZwIrSOUHkWNHBa2LC0+LSXm/BLYt4X9LlcTqvN2YBKvG43d0N+2e5lQIHDol
EY/Nasl6NPF2qEY7IXQsDCG2uim5ldABUWnQaWcwNUHP1tyKylMeZg6ahPHU3Ecg
bS+SLZkAp5kP81YfFY3NCBc1mS5r0VUJy15VkPtV
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:12 2026 by rpki-client