Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F4709B2342411F193C694FECE1D38B0.roa
File: 7F4709B2342411F193C694FECE1D38B0.roa (raw, json)
Hash identifier: 4dlMXYmWwmDxB6Crb6oaCgXLeUL5agiz8KHxzvCNksM=
Subject key identifier: A1:7D:09:07:D1:EB:CF:B8:E1:E6:4C:AE:67:B3:E2:BA:64:9E:1C:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C410
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F4709B2342411F193C694FECE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:57:59 +0000
ROA not before: Thu 09 Apr 2026 14:57:54 +0000
ROA not after: Mon 09 Apr 2029 14:57:54 +0000
asID: 17561
IP address blocks: 154.81.64.0/24 maxlen: 24
154.81.65.0/24 maxlen: 24
154.81.66.0/24 maxlen: 24
154.81.67.0/24 maxlen: 24
154.81.68.0/24 maxlen: 24
154.81.69.0/24 maxlen: 24
154.93.252.0/24 maxlen: 24
154.93.253.0/24 maxlen: 24
154.93.254.0/24 maxlen: 24
154.93.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115728 (0x1c410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 14:57:54 2026 GMT
Not After : Apr 9 14:57:54 2029 GMT
Subject: CN=69d7be77-e20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:22:3c:22:60:91:d1:1c:da:39:ac:bd:1d:
2a:44:48:bd:f0:2e:c9:c0:a2:e5:d7:c9:32:68:25:
ec:6f:70:8b:7e:93:6c:40:ae:be:16:9a:45:e8:c5:
41:40:bf:3c:26:ab:3d:4e:c4:5c:a0:5e:5d:f7:bd:
30:3c:b0:32:75:39:b9:ee:13:bc:3b:d2:86:d4:b5:
28:f4:56:d1:4d:e7:ea:76:b4:b0:04:46:16:e5:c6:
f6:56:08:6f:a2:7b:e0:bf:79:70:6f:a9:b0:33:f9:
d7:b5:f5:bd:24:a3:7e:5d:8b:9d:1b:a8:b0:01:42:
07:9a:10:54:59:df:51:1f:3e:9f:57:88:d3:81:30:
d3:c8:47:59:65:6b:fd:36:c9:39:50:b6:ae:4c:43:
4c:eb:a5:89:d5:85:eb:71:b9:58:3d:ef:a5:7d:88:
fd:04:79:de:00:77:a4:32:32:89:68:eb:07:f4:d3:
c1:51:8f:9b:65:db:61:10:de:cf:c6:d2:5c:8e:3d:
29:3a:ae:00:eb:b9:ca:6a:08:62:9f:40:74:12:bd:
da:58:c9:0f:41:e7:1f:4f:e3:52:c5:9f:b1:2f:a4:
e2:9b:a8:f8:bf:49:1b:6a:d4:6b:04:07:9c:50:68:
3e:90:47:3d:d3:26:86:88:a5:6b:7d:69:ed:37:ab:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:09:07:D1:EB:CF:B8:E1:E6:4C:AE:67:B3:E2:BA:64:9E:1C:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F4709B2342411F193C694FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.64.0-154.81.69.255
154.93.252.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ae:7c:92:1e:e1:92:00:79:ec:8a:a4:1e:98:66:16:6d:2c:
90:73:93:e3:6d:63:04:78:76:14:3f:f8:fa:08:93:6a:67:bb:
da:ef:57:66:f9:4b:ac:7e:29:7e:da:1d:1a:7e:36:7b:3d:e1:
f4:55:0a:47:75:50:b8:85:f1:92:ef:71:77:d8:c1:41:e9:d2:
36:26:f5:3e:97:75:3d:bd:29:9b:0c:cf:13:c0:38:5e:bf:c6:
01:8e:6d:83:2e:a9:de:7e:db:be:48:8f:06:ac:70:f0:33:79:
38:a8:98:73:c8:d3:f8:e5:fd:3c:f4:57:12:e0:64:6b:c6:de:
5d:5a:3b:85:38:41:d6:a5:b9:7e:f3:21:5b:9f:3e:ac:9f:70:
70:b6:20:b0:c4:10:ce:0e:ce:82:0d:b6:ab:06:fe:99:8f:1b:
ba:f9:99:ea:2e:46:2a:f8:24:92:88:98:2c:39:01:f2:f7:b1:
d0:8d:e6:b5:99:1b:89:50:7d:b9:b6:50:ec:74:0f:47:55:a8:
9f:e1:23:21:85:86:6d:85:09:95:16:a1:c4:a6:42:49:9b:19:
7e:25:6c:a7:f0:2d:9c:23:0f:a0:af:31:f5:6a:95:b3:68:f8:
1b:2b:0b:db:ac:4f:48:0c:ce:34:a1:c7:23:d6:d6:c2:5a:7b:
5e:56:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:15 2026 by rpki-client