Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A3C5524D0D11F18ACF60F1CE1D38B0.roa
File: E7A3C5524D0D11F18ACF60F1CE1D38B0.roa (raw, json)
Hash identifier: d10pViR7exR3a9XNsKqb9CiwMGgqoko6WgU3AHsMgaI=
Subject key identifier: 31:74:00:07:F1:8A:59:C2:A3:CB:2A:44:16:CD:87:77:D0:57:AE:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A3C5524D0D11F18ACF60F1CE1D38B0.roa
Signing time: Mon 11 May 2026 07:49:14 +0000
ROA not before: Mon 11 May 2026 07:49:09 +0000
ROA not after: Mon 08 Jun 2026 07:49:09 +0000
asID: 151347
IP address blocks: 154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.226.0/24 maxlen: 24
154.84.227.0/24 maxlen: 24
154.84.228.0/24 maxlen: 24
154.84.229.0/24 maxlen: 24
154.84.230.0/24 maxlen: 24
154.84.231.0/24 maxlen: 24
154.84.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117517 (0x1cb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:49:09 2026 GMT
Not After : Jun 8 07:49:09 2026 GMT
Subject: CN=6a0189fa-71a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:30:6f:a8:d9:27:8d:91:3e:47:1f:fe:f3:
f3:81:4d:39:6a:80:3f:21:77:8d:40:30:9e:1f:24:
31:0c:03:0d:50:bc:8e:de:a5:4f:37:99:07:15:5b:
33:e7:69:d7:20:cd:3d:1c:c0:53:ce:e0:20:4c:04:
af:61:67:53:30:23:ca:84:16:1a:26:31:4d:74:99:
4e:d1:d4:e7:d9:71:f1:2a:ff:bf:40:22:69:32:d6:
2e:40:fe:a5:55:92:44:f1:40:52:06:2b:97:e6:43:
68:32:79:5a:e8:5a:36:59:5b:21:a8:6f:53:fc:41:
74:2e:2d:5f:d2:b1:20:51:b5:d1:5f:2c:12:0d:be:
94:02:a6:0a:3a:f6:df:b7:51:d3:ea:bd:42:b9:2d:
e9:02:2c:5c:9d:bc:b0:d0:d8:7e:a9:d3:b5:62:a0:
ab:51:12:ee:6c:ab:bf:cb:51:d9:db:bd:24:e0:a8:
38:4e:08:7f:f0:2b:1a:99:0c:ea:71:61:28:8d:6b:
d3:bb:ed:7e:84:95:31:ea:ef:63:e7:b4:7b:56:c1:
15:9c:53:be:b0:2b:37:6b:ef:03:18:1f:7b:99:be:
e3:4d:8a:88:b3:fb:45:b1:50:0a:cf:79:bd:1a:3d:
c6:1e:4e:57:b2:0f:3b:c2:1b:4c:69:0b:1f:22:71:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:00:07:F1:8A:59:C2:A3:CB:2A:44:16:CD:87:77:D0:57:AE:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A3C5524D0D11F18ACF60F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.222.0/24
154.84.224.0/21
154.84.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ff:2f:a9:d1:91:eb:59:03:d5:0c:12:15:f6:c3:f4:3a:ce:
21:5e:a4:4a:d3:52:88:7a:be:c9:b2:0f:47:ad:9b:63:6a:12:
b4:fc:6d:8e:2e:62:06:f5:45:a6:7e:7b:90:ff:f2:e8:b0:38:
4a:5b:ca:bb:b5:ea:a1:8b:f6:88:5f:aa:78:71:b9:93:0e:6a:
ca:42:7d:d0:f6:0e:ed:13:3b:78:28:6d:4a:21:a5:59:1a:45:
ef:93:c8:59:a5:f1:2f:83:bc:b9:97:a2:a7:42:8b:19:41:08:
6f:ff:7a:c6:4f:f0:5e:5c:3c:f9:cf:c5:de:42:ad:cc:75:e2:
59:67:e2:e3:c6:90:a2:08:17:0c:0e:51:ff:5e:8e:de:6c:d6:
08:d2:ab:96:fb:a5:4b:fe:af:8b:fa:e5:58:55:9b:3c:6c:bb:
f2:7e:50:fa:07:96:06:a5:54:b8:e8:fd:e1:9a:06:ba:9f:71:
43:67:cf:36:4d:db:ba:2f:e9:44:52:03:ae:06:60:7d:31:26:
50:b8:7b:dd:dc:eb:67:6f:62:ee:cb:4d:a5:7f:a8:a5:d4:83:
ac:5a:ab:64:b1:df:6e:c8:7c:98:c1:c6:f4:13:f1:6b:1e:cf:
8c:55:77:26:da:41:21:5b:7c:a8:e7:c6:2b:e8:f7:af:66:1d:
44:ca:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:42 2026 by rpki-client