Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F00B766899511F1BA6D60E9CE1D38B0.roa
File: 7F00B766899511F1BA6D60E9CE1D38B0.roa (raw, json)
Hash identifier: hQG2OejmM5BRDNva8lktWJ58Wt01TEvmDjinTFNTshc=
Subject key identifier: D9:BB:78:80:3A:BC:38:14:10:DA:0B:3F:7C:FA:FB:6C:BA:F6:97:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F00B766899511F1BA6D60E9CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:31:00 +0000
ROA not before: Mon 27 Jul 2026 08:30:56 +0000
ROA not after: Mon 31 Aug 2026 08:30:56 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
154.194.113.0/24 maxlen: 24
154.195.16.0/24 maxlen: 24
154.195.17.0/24 maxlen: 24
154.195.18.0/24 maxlen: 24
154.195.19.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121709 (0x1db6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 08:30:56 2026 GMT
Not After : Aug 31 08:30:56 2026 GMT
Subject: CN=6a671744-d47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:99:59:30:37:82:1a:4e:09:84:e7:ee:b2:
45:01:59:32:b8:a4:4c:79:36:e0:f2:f9:bd:8b:55:
08:51:c7:3e:e5:03:fd:fd:90:6b:51:01:45:7a:f0:
f2:26:c7:7a:89:c5:b1:e0:80:2f:3d:b2:a4:23:ba:
d6:57:6e:5b:d8:d8:f1:03:59:68:12:e6:6c:b5:a7:
cc:bb:fe:f8:61:23:92:16:75:e9:57:4f:76:b5:0b:
5c:f5:47:a7:26:de:e8:b4:5f:bd:45:fb:58:70:33:
f6:96:35:6e:7e:4f:0c:1c:63:0d:8f:5c:53:df:c4:
ad:99:54:7d:c6:60:f3:36:8a:76:4a:bb:a4:c8:66:
99:aa:01:54:07:67:fc:1c:4e:b5:fd:af:4f:96:f7:
e3:19:08:65:38:ac:ef:12:03:c6:b5:02:1e:4d:7b:
a4:9a:14:bb:b0:8a:1d:cd:70:c3:9b:59:97:7e:c5:
81:ec:0d:58:fd:47:5f:33:30:42:5d:c7:bf:54:42:
df:9e:11:09:f5:f2:b3:7c:31:80:8b:fb:3d:33:43:
29:4e:0a:95:7f:d0:2a:3b:75:e1:e5:2b:7b:9e:d6:
34:29:c9:66:6f:14:00:29:8d:48:4c:cb:53:ad:e4:
26:f2:fa:fa:82:93:3d:44:9c:96:bc:91:d1:42:c7:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:78:80:3A:BC:38:14:10:DA:0B:3F:7C:FA:FB:6C:BA:F6:97:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F00B766899511F1BA6D60E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0/23
154.195.16.0/22
154.195.148.0/23
154.196.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:06:05:5c:0b:e7:b6:9a:a5:78:e6:6b:da:c2:9d:03:db:28:
2a:a4:d1:89:b5:c5:f0:a4:0f:10:d4:12:cf:bb:af:c0:f4:da:
d9:60:21:e1:5a:23:6b:48:0b:42:c2:3c:92:9e:16:c1:63:41:
ec:ce:85:a7:6a:1e:86:13:70:5c:e0:b8:03:9b:55:b3:e6:c5:
9b:bf:23:c1:10:3a:78:98:df:98:dc:cc:31:7d:89:1c:bc:e5:
ba:05:26:36:c1:b6:0f:72:7a:72:63:a1:94:0f:bf:25:b2:ca:
e5:43:1e:1a:42:d3:4f:47:d0:f5:aa:69:eb:a7:35:c4:23:6f:
d5:13:0f:97:10:27:91:a4:dd:a8:27:0e:97:aa:54:12:55:60:
dc:5c:52:e1:4d:72:89:07:97:14:df:d7:11:1e:c1:fd:40:7b:
00:b6:60:6d:62:01:a0:fc:9f:0d:b5:d8:54:68:17:85:d2:7f:
c4:41:a1:2d:9d:91:6c:f0:44:9b:a5:94:17:4c:0c:32:6f:58:
81:f2:aa:c7:b4:1f:86:7c:ab:c3:22:2b:91:a0:3e:da:2c:51:
53:fb:93:db:6b:36:4c:b4:13:0a:73:f6:c2:a3:bc:dd:a2:73:
13:34:95:c4:30:92:2c:69:b1:74:28:7d:48:a0:8a:02:99:d5:
c0:f3:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:07 2026 by rpki-client