Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC1425C0F0611F19BA252F3DAE4EC9C.roa
File: 7EC1425C0F0611F19BA252F3DAE4EC9C.roa (raw, json)
Hash identifier: LrRRRnvtQzCUxT0bCtVR8Vj3bC/KaVCA6/YbVUfPPGs=
Subject key identifier: 00:12:2D:7D:7D:A2:A8:F0:B1:AB:79:6E:E4:CF:AD:71:D6:97:66:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BADE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC1425C0F0611F19BA252F3DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:20:00 +0000
ROA not before: Sat 21 Feb 2026 09:19:55 +0000
ROA not after: Tue 24 Mar 2026 09:19:55 +0000
asID: 8796
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113374 (0x1bade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 09:19:55 2026 GMT
Not After : Mar 24 09:19:55 2026 GMT
Subject: CN=699978bf-bfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:87:59:b3:e0:e3:e6:6b:18:d4:47:59:3d:
1d:fc:c9:8e:11:51:9d:51:0c:c4:c4:e8:80:b2:d6:
51:8d:25:9d:f4:3e:ff:81:b1:d7:b3:fb:ec:cc:bb:
1e:16:da:fb:4e:e0:9a:2a:9e:14:37:29:a7:36:c3:
78:13:ed:81:d1:f6:1c:35:bd:fd:8d:69:97:20:98:
bb:92:56:69:62:d2:69:54:40:9b:b9:2e:da:fc:43:
89:e8:0c:ed:c9:f6:d4:5b:cc:f5:78:f8:fc:60:ba:
02:f3:42:ae:09:49:5f:6c:6f:ec:f5:66:cb:e4:49:
a1:52:63:0f:c6:1f:ab:3a:43:85:78:71:4a:45:b9:
0e:9a:3f:d1:28:29:7d:23:11:d1:58:7f:35:1e:54:
c4:93:1f:1a:df:e3:b9:05:ca:54:f7:b2:5a:3d:db:
da:79:fd:ac:e4:c9:56:d8:be:eb:a1:2f:8a:a2:3d:
80:9c:8e:57:f6:e7:81:d3:64:d5:1b:17:c6:73:cb:
5a:86:4b:75:2c:62:d3:43:a8:a4:27:a4:3a:c7:f1:
5c:64:eb:61:3a:de:aa:c3:83:37:6f:8c:3a:54:16:
35:f3:99:7e:13:31:07:5d:4d:ac:3f:7b:72:ad:4f:
41:63:7a:dc:3c:ba:0f:aa:12:51:0d:09:8f:ca:1f:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:2D:7D:7D:A2:A8:F0:B1:AB:79:6E:E4:CF:AD:71:D6:97:66:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC1425C0F0611F19BA252F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:87:a6:4f:bf:e2:53:3b:2c:10:de:d1:2d:97:6f:96:5e:1b:
d5:4c:97:62:e2:e8:6d:4d:fc:cc:4c:d3:b0:e4:24:a6:c1:9c:
4d:64:f1:9c:3b:66:7e:f0:8f:d3:ef:51:a6:cd:12:55:57:18:
ce:e4:51:45:66:71:73:51:3f:99:5d:e9:00:e8:32:08:55:08:
ef:8b:12:7c:6f:d3:89:e3:b3:fe:27:b4:d8:43:ff:af:ff:f1:
30:7b:6b:b6:54:14:66:18:f3:59:ba:54:c8:c1:66:a6:25:b5:
03:33:42:75:fd:a5:fc:2a:07:f3:2c:f6:e6:0c:9e:9f:26:89:
5b:14:db:31:b5:92:56:9f:f8:58:a6:17:89:ff:de:41:ea:8c:
1f:3c:cc:94:6a:09:f1:e7:ea:ce:93:6b:22:26:d0:00:21:09:
7b:78:69:43:99:6f:7e:ef:fc:0d:c5:48:11:23:ef:a1:7a:d9:
ae:2f:9c:cb:b4:dc:fc:5d:6a:78:ae:ef:b8:f7:e2:9b:77:a7:
bd:7c:61:c2:25:1e:de:73:08:fc:68:cb:a6:ef:41:21:a1:74:
8b:f2:8b:f6:40:99:01:7d:9a:bb:41:78:b6:51:1e:a6:5e:d2:
b6:73:f2:fc:25:bb:5e:17:4e:c8:52:15:96:ca:b1:ec:17:d5:
4a:53:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:01 2026 by rpki-client