Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9C1148740911F189F696B1CE1D38B0.roa
File: 7B9C1148740911F189F696B1CE1D38B0.roa (raw, json)
Hash identifier: xK1XSrWYj2CNY5HYF05OcTBIOHyBP/TvQvdJnNwrkOc=
Subject key identifier: DB:82:8E:E8:51:40:0C:98:A1:12:D7:F4:3B:53:F3:45:0B:27:55:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D61E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9C1148740911F189F696B1CE1D38B0.roa
Signing time: Mon 29 Jun 2026 22:25:51 +0000
ROA not before: Mon 29 Jun 2026 22:25:46 +0000
ROA not after: Wed 05 Aug 2026 22:25:46 +0000
asID: 204548
IP address blocks: 154.222.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120350 (0x1d61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 22:25:46 2026 GMT
Not After : Aug 5 22:25:46 2026 GMT
Subject: CN=6a42f0ee-c2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:64:de:c0:7d:f9:9d:ee:ab:a5:46:c2:c8:
cb:64:61:2e:3e:c7:ce:77:b6:d3:00:db:1f:a9:b0:
8d:c8:32:0e:0c:a9:69:e8:bb:8c:1b:ce:57:1b:de:
75:e3:aa:a6:60:e1:39:83:c9:53:59:7a:b9:a5:68:
ca:40:ae:e0:57:de:f6:66:9a:90:54:7e:e2:38:96:
e0:69:72:4d:ed:58:9d:65:ef:cf:c5:2f:fb:e5:f4:
e7:83:c7:c0:dd:1e:68:7c:a9:12:15:e1:a6:9f:70:
e5:b9:7f:61:75:f9:e0:3a:b7:68:31:b2:b6:c2:c7:
c4:4e:d6:39:a7:2d:c9:48:a0:34:01:51:b2:b6:4f:
3a:d1:4b:3d:90:fa:4c:fa:43:9a:e1:f3:44:a4:e3:
04:27:6c:e7:6a:9b:d3:89:69:3f:4a:09:e8:d9:79:
79:c0:8b:ad:dc:bc:b4:56:6a:f7:ee:8a:f1:5c:3a:
d9:e7:fa:97:45:33:bb:30:16:3d:15:49:65:5f:80:
bf:02:30:90:d6:18:f5:5f:b2:80:48:96:44:a3:2c:
fb:0e:e5:4c:ae:68:9d:f1:f0:13:ba:d2:e3:08:dc:
b1:da:ab:a8:97:c2:9d:f5:b1:fb:e1:ee:da:ab:6e:
e5:b0:09:5f:e3:19:07:05:77:86:58:1f:59:cf:74:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:82:8E:E8:51:40:0C:98:A1:12:D7:F4:3B:53:F3:45:0B:27:55:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9C1148740911F189F696B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ff:b8:84:72:25:e3:b5:ad:e5:fe:de:a0:a6:7c:8b:70:72:
3b:aa:7d:32:03:e3:5c:2b:35:dc:b8:e1:2b:73:20:c2:72:9d:
df:ed:25:af:2f:97:45:b8:88:43:33:d0:b4:1c:41:d1:3c:79:
b0:73:89:16:ce:24:f2:80:91:1f:5b:2f:39:7c:4e:da:50:88:
7d:1b:8d:f8:6b:59:ca:2c:d6:bf:9d:0e:46:0a:4a:cb:a5:df:
36:ed:b9:4c:58:1f:29:8f:b0:97:75:64:b7:dd:b6:14:49:9d:
27:18:7b:78:e0:c9:ba:39:a0:69:10:cb:0e:4a:5a:5a:80:44:
04:41:fb:9a:60:67:a0:54:b7:bc:50:c1:5a:54:01:db:1a:d6:
29:19:0e:ce:6a:44:e0:e1:09:64:bb:87:2f:8f:54:88:03:99:
d6:7f:9b:57:b9:c7:93:90:6d:8c:ea:57:78:db:1f:bf:e1:7b:
0c:d2:f9:f5:f8:79:2b:10:c7:b7:20:e5:02:da:58:7b:45:5a:
58:35:81:7b:2c:13:61:3e:ea:cb:cf:61:59:0a:ab:e1:4c:3c:
23:91:11:3d:49:1a:01:2c:9d:c4:d4:88:0a:fa:3d:40:c5:1f:
99:ad:47:25:40:a9:a5:67:e6:c0:de:c7:ea:ad:dc:56:5f:b8:
86:6c:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:06 2026 by rpki-client