Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7D79D5206A411F18FA5DADFDAE4EC9C.roa
File: C7D79D5206A411F18FA5DADFDAE4EC9C.roa (raw, json)
Hash identifier: KiAwWaDDgilP7zkUI5RQBRi4Ig4+TdHwwbrQSxfhxwc=
Subject key identifier: 90:EB:16:2C:49:93:53:D0:42:70:06:3B:88:AB:9C:1E:EC:5B:68:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B917
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7D79D5206A411F18FA5DADFDAE4EC9C.roa
Signing time: Tue 10 Feb 2026 17:20:23 +0000
ROA not before: Tue 10 Feb 2026 17:20:17 +0000
ROA not after: Tue 17 Mar 2026 17:20:17 +0000
asID: 400175
IP address blocks: 154.82.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112919 (0x1b917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 10 17:20:17 2026 GMT
Not After : Mar 17 17:20:17 2026 GMT
Subject: CN=698b68d6-7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:a3:35:c7:a9:97:bb:47:6d:f6:b4:c6:e7:
47:57:e3:8a:53:1a:8d:c1:52:54:7d:dc:8f:bb:e0:
82:72:42:b9:a9:19:bc:3c:ca:eb:c0:21:ef:0e:55:
37:d4:b6:86:ce:54:5b:f8:99:43:60:7e:85:e8:3f:
5f:33:68:6f:94:e1:bd:49:8c:78:91:35:c6:a1:0b:
83:fd:ca:48:1b:1c:ec:2e:46:b3:d9:86:92:26:21:
4c:fd:f9:9b:6c:53:7e:10:db:07:fb:4a:db:c9:dd:
90:1b:4d:db:fd:38:b4:52:2b:66:21:eb:52:79:5c:
98:9d:3a:c2:74:8b:4a:d8:27:1e:97:af:f5:64:e3:
5f:80:1d:ad:55:f7:e8:45:9e:5e:3c:61:f1:56:8c:
78:f2:2b:c8:f7:f7:cb:d6:20:7e:21:4e:db:58:02:
18:20:67:53:c8:79:c3:75:49:67:da:05:20:2e:d2:
a1:30:db:ac:db:bf:91:2a:0c:ae:b5:01:94:9e:fe:
17:8b:e7:b2:b2:25:c1:c4:16:09:87:40:e6:9f:8f:
fa:d2:35:c6:8e:02:f8:14:4a:96:c4:a5:33:87:ca:
75:4f:77:80:77:9a:56:12:6f:43:85:df:46:07:78:
c2:c6:cc:4b:b1:fd:5f:b6:e7:01:fd:6d:0d:fb:28:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:16:2C:49:93:53:D0:42:70:06:3B:88:AB:9C:1E:EC:5B:68:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7D79D5206A411F18FA5DADFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.25.0/24
Signature Algorithm: sha256WithRSAEncryption
87:08:34:08:2e:37:f5:95:09:78:11:10:c0:0a:61:71:dd:43:
88:f3:0a:de:9d:ea:3a:20:73:2e:1a:e2:90:8e:c1:70:28:45:
7a:25:e5:8d:a5:7b:ce:72:44:ae:02:4d:1d:0b:86:74:52:c5:
9d:8d:e0:11:93:42:56:9c:c4:c7:69:5e:e8:a8:60:b2:21:a7:
95:29:86:f2:58:5a:2a:98:90:74:ea:31:1a:11:fe:10:c9:5f:
38:15:c9:6f:a8:20:1f:62:fa:af:ec:0e:f8:3f:85:dd:9b:d8:
39:b1:80:2e:69:be:1f:e4:68:28:64:07:79:1e:0b:69:4d:ec:
f0:ef:62:52:ae:04:21:7a:82:85:40:c8:9f:c4:e5:05:3b:33:
56:3a:20:68:a4:af:20:b8:bd:dc:f5:a3:8b:ed:f8:69:a6:1a:
67:f2:51:c2:8e:bf:2f:28:2e:23:a0:55:98:b7:0c:5e:5b:5b:
7f:6a:93:9e:69:6d:1c:12:8c:0a:5a:7e:8b:d8:25:af:6e:95:
57:b8:27:f5:de:ad:33:a6:2a:c8:21:6b:1c:b0:9a:35:56:d1:
03:34:99:aa:e2:99:10:0b:23:e1:a6:8f:a4:cb:c2:b2:d5:5b:
32:04:2d:4f:22:e3:db:b3:8d:ea:e9:0e:0e:ff:56:d9:03:84:
df:04:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:03 2026 by rpki-client