Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA9228A27AE11F18543F2A2DAE4EC9C.roa
File: 7CA9228A27AE11F18543F2A2DAE4EC9C.roa (raw, json)
Hash identifier: TxMsuPcSJGhi+men33YFXDjPRqRqPK9CMqPzz1MkfMc=
Subject key identifier: 35:87:52:A7:10:0B:3F:4D:C3:53:40:7B:CB:B8:60:E6:20:17:33:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA9228A27AE11F18543F2A2DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 18:23:00 +0000
ROA not before: Tue 24 Mar 2026 18:22:55 +0000
ROA not after: Sat 02 May 2026 18:22:55 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114875 (0x1c0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 18:22:55 2026 GMT
Not After : May 2 18:22:55 2026 GMT
Subject: CN=69c2d684-daca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:70:39:f7:97:c4:5e:10:66:7d:f6:09:8e:
3a:08:62:82:5b:b2:b5:fc:ff:2d:44:e6:b0:40:e1:
2d:52:5d:6f:1d:dc:a6:e5:a6:dc:4e:a9:d5:90:02:
20:74:33:e8:1a:b1:1b:5c:d4:7f:85:b4:fb:9f:e8:
8d:12:8e:1f:c4:f4:ed:6a:15:e3:45:59:d0:80:5c:
a3:70:cd:76:9f:e9:1e:40:82:0b:ca:dd:e0:6d:46:
83:f6:72:57:88:d5:44:e1:7b:cd:04:4e:36:3b:7d:
b9:c3:f9:a3:e6:59:0a:ca:5f:4a:99:37:ad:92:ae:
ef:76:b4:d4:4d:41:14:b6:6c:1e:ab:be:3d:74:be:
e3:39:69:0a:14:81:7f:97:98:7e:63:0f:54:45:86:
7a:c2:21:f0:e0:4a:1b:6e:b0:5e:d3:e5:1b:82:32:
17:4a:6a:4d:58:40:03:df:87:b0:95:5c:bd:d0:6a:
b9:82:04:4a:80:0e:c1:c3:1c:ed:21:13:76:71:1f:
35:c1:45:d0:8d:0e:17:16:a3:ff:91:2f:2a:73:21:
fc:6e:ab:6f:24:41:7a:2f:42:c9:8a:f5:c3:99:eb:
ba:3e:d3:51:92:21:88:a3:7c:64:f0:9b:da:b7:d2:
d0:94:a1:25:9e:45:29:14:8e:f9:69:f3:f5:bf:8e:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:87:52:A7:10:0B:3F:4D:C3:53:40:7B:CB:B8:60:E6:20:17:33:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA9228A27AE11F18543F2A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
Signature Algorithm: sha256WithRSAEncryption
20:04:e8:7b:e6:ae:ca:21:3e:66:04:d2:8e:b8:e8:50:66:9b:
de:66:5a:09:05:46:07:36:40:8f:ed:43:19:8c:e0:39:b6:a2:
45:71:e1:ef:6c:54:10:87:3f:08:40:27:17:e7:d1:33:05:cb:
9f:f0:87:68:89:82:72:35:81:6a:10:59:a5:1e:67:13:fa:de:
49:d8:b4:4a:91:3c:15:a2:a3:82:7d:37:b3:d9:00:9d:c9:30:
11:d7:b7:b6:46:1f:dc:dd:84:b3:5f:1a:64:c5:bb:eb:8d:61:
d5:26:ff:03:09:df:b1:de:e5:00:4a:fd:47:b3:ed:be:1d:98:
d0:c5:46:0a:79:16:a7:db:98:cc:e9:87:73:1c:ca:ba:33:c1:
0c:aa:1d:b2:60:5c:3c:87:85:be:c8:01:f3:69:3b:ea:f3:0b:
f6:29:53:89:b8:6d:b3:8d:e8:d5:c9:b5:3a:ef:68:a5:e5:e9:
8f:a9:0f:79:d0:2b:d0:32:c2:f4:f8:24:33:91:96:87:a6:e6:
9d:64:e4:87:e6:ce:e0:9c:d6:b3:4c:01:8c:a7:86:3b:da:f5:
b1:37:a5:06:ff:7a:7b:16:3a:12:35:5f:3c:0e:19:43:30:4a:
c0:84:e5:f0:c8:74:5a:cc:94:2b:3a:ea:6c:95:da:45:3c:9e:
16:18:ab:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:56 2026 by rpki-client