Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0474EF6790F11F1867D14C9CE1D38B0.roa
File: C0474EF6790F11F1867D14C9CE1D38B0.roa (raw, json)
Hash identifier: xfDw66dq6FspxjfcDUe6CzixLmMz0RMRvV3ZctjFdMk=
Subject key identifier: 8C:77:57:0C:AC:29:23:07:6C:83:96:C7:97:D9:D5:23:36:A7:D2:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D728
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0474EF6790F11F1867D14C9CE1D38B0.roa
Signing time: Mon 06 Jul 2026 07:53:19 +0000
ROA not before: Mon 06 Jul 2026 07:53:13 +0000
ROA not after: Fri 07 Aug 2026 07:53:13 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120616 (0x1d728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 07:53:13 2026 GMT
Not After : Aug 7 07:53:13 2026 GMT
Subject: CN=6a4b5eee-72ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:94:cb:5e:e5:ee:c3:e2:95:00:63:bb:13:
c5:0a:01:b4:b4:bd:98:13:1b:26:76:7d:c2:37:1d:
0b:e1:97:a8:1d:ca:85:3d:6c:2b:60:fb:64:26:ed:
5f:9a:28:dc:4e:d2:5d:b4:b5:61:2d:55:9c:30:30:
ac:ae:e7:54:20:36:d8:a6:5c:a4:5c:42:98:54:e1:
70:e9:02:4a:a5:05:78:90:2c:44:82:9b:1d:d8:ca:
42:80:b7:c0:e2:1e:3c:7b:11:8a:04:fd:2a:15:3f:
8a:13:d0:eb:54:6b:0b:80:60:24:15:bb:2e:dc:2d:
22:c2:d6:a7:d5:29:3d:2a:70:5a:5a:e9:74:c9:d0:
bf:e2:67:73:f6:d8:8f:5e:99:1e:38:3d:57:02:bb:
ac:a6:a6:61:9e:28:8e:4e:d6:df:d5:92:8d:dc:9e:
57:4b:c8:61:51:1e:1d:09:94:ac:36:49:e5:a3:2f:
9c:8b:30:9e:34:11:77:10:08:8f:36:eb:90:08:ba:
b3:80:ec:9b:2b:72:73:3d:36:ca:ea:cd:fd:48:dc:
8a:1b:69:e2:b5:6a:7a:f0:63:0f:fe:9c:0e:b3:60:
96:20:00:64:19:cd:3c:1c:0c:30:26:42:e1:0d:2b:
b6:ff:21:18:20:95:05:bb:26:e5:8d:0a:01:5d:03:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:77:57:0C:AC:29:23:07:6C:83:96:C7:97:D9:D5:23:36:A7:D2:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0474EF6790F11F1867D14C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.116.0/24
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
22:78:4c:c0:8e:49:39:9d:84:e9:f7:22:b3:93:ae:25:46:b2:
7f:b9:29:dd:06:b1:38:d0:69:62:34:68:69:b1:a2:00:6a:ed:
04:79:16:e0:90:03:6b:7a:bb:25:92:a5:9d:8f:a5:99:63:b9:
6d:fc:39:e8:2a:04:00:67:71:60:67:b3:6b:1a:f3:bd:30:48:
56:ac:cf:7a:5f:28:48:b6:9a:f4:1b:09:6a:5b:f2:59:00:7f:
57:9d:8c:48:2a:c7:2b:70:1c:bc:cb:59:74:fa:85:46:54:eb:
63:52:32:96:2f:60:61:96:c4:aa:45:a3:f7:b0:49:77:09:b4:
4c:42:70:1d:35:47:22:77:4f:d9:23:97:49:15:af:6e:97:fb:
8e:1a:ce:d3:5b:0c:37:42:f8:e6:7f:34:63:94:1a:0c:ae:1f:
74:8c:10:3a:ae:4e:4c:9f:90:87:b2:90:18:07:8b:35:64:4f:
bf:5c:f7:d8:41:44:60:49:ff:26:c0:6d:3c:65:79:63:bc:14:
2d:f4:aa:a0:72:6a:3e:6c:b8:42:c3:19:e7:88:20:dd:81:e2:
de:fe:d2:3b:c1:16:f3:72:1e:c0:f6:fe:54:98:37:bc:2d:5e:
ac:e7:ad:a3:02:a7:76:79:93:25:0d:87:9a:9d:3c:b1:a5:86:
69:c1:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:03 2026 by rpki-client