Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE2165F0866B11F1BD42EF1DCF1D38B0.roa
File: EE2165F0866B11F1BD42EF1DCF1D38B0.roa (raw, json)
Hash identifier: T6lC7VL12eb6rY9BPy98rdML0JVVF7k2fCjKidrlJYg=
Subject key identifier: 47:2B:58:94:54:DE:85:B8:C4:66:BE:5F:92:7B:B8:4F:8B:BD:B9:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE2165F0866B11F1BD42EF1DCF1D38B0.roa
Signing time: Thu 23 Jul 2026 07:55:54 +0000
ROA not before: Thu 23 Jul 2026 07:55:50 +0000
ROA not after: Thu 03 Sep 2026 07:55:50 +0000
asID: 198652
IP address blocks: 154.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121625 (0x1db19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:55:50 2026 GMT
Not After : Sep 3 07:55:50 2026 GMT
Subject: CN=6a61c90a-dba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:1e:c6:ef:f0:2b:90:da:7a:e2:f2:37:70:
ca:1a:35:f0:06:ec:f0:5b:aa:a3:60:51:aa:73:63:
82:7b:7d:cd:f4:e0:41:98:ce:e2:0a:43:f3:44:5c:
80:b1:51:6a:4b:bd:b0:97:25:3d:92:d8:94:0e:14:
5d:fe:b2:3a:88:50:50:7e:a8:ca:f3:26:c7:38:d0:
15:58:d3:d7:cb:37:01:8b:33:27:33:f9:e5:75:3c:
f7:99:27:00:6f:47:a6:3d:0b:31:85:55:d7:a4:56:
a9:c0:a1:13:57:73:de:26:70:b3:b6:97:be:31:dd:
34:5e:f6:6c:a3:b8:19:37:fc:2d:42:91:65:fc:e7:
11:b4:9d:27:95:75:83:d7:1b:5f:a0:dc:c9:b0:8b:
5d:27:45:1e:81:e4:25:58:24:10:48:83:b8:bc:2e:
d3:d1:39:0a:93:58:f6:ea:87:86:93:0c:17:a4:f4:
c5:0e:13:77:29:27:6d:a3:af:ea:28:7b:13:c3:e0:
b0:98:79:bb:fb:28:c1:1f:f3:df:87:66:2c:d8:98:
89:29:7c:79:fe:6e:19:83:2c:2e:85:2a:12:b2:0e:
29:38:17:d9:53:28:96:ab:cc:de:65:86:bc:f2:bb:
33:16:4b:98:79:41:fe:1c:0e:0a:3b:26:86:ee:23:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:58:94:54:DE:85:B8:C4:66:BE:5F:92:7B:B8:4F:8B:BD:B9:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE2165F0866B11F1BD42EF1DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6a:b5:a5:23:9b:8d:17:9f:02:4a:83:35:b6:00:eb:e2:1a:
59:f3:a2:f6:13:14:30:3a:e3:44:9e:88:bd:d3:bd:d8:ba:25:
9f:c5:a7:99:67:d4:23:fc:05:3f:b4:e6:16:79:a8:6d:c3:74:
fc:07:63:c7:0a:d4:92:d8:95:bc:54:fb:d1:0d:3a:5a:e5:b2:
e3:94:2a:8d:01:dc:12:0c:ab:64:de:a7:88:ef:e0:8a:f7:7b:
89:9e:dd:07:5d:f6:85:1f:07:c5:8d:95:38:6b:f4:46:e7:10:
8d:ec:82:29:ca:93:ab:8b:92:f1:54:b0:9d:dc:3b:d4:74:63:
0d:b1:72:8e:77:d1:5f:88:0a:f9:56:c3:04:8b:b4:96:8c:7d:
75:5f:76:a3:a0:b5:93:1d:a4:02:5b:99:f6:3b:57:8c:33:fe:
80:7e:3e:2d:95:48:f4:16:53:a6:df:2a:1c:90:a4:3c:a8:04:
b1:fb:ed:30:03:e1:da:45:83:fd:2e:85:e1:5e:67:27:0f:dc:
a0:66:50:7e:8f:d7:68:e9:7b:66:a2:03:60:3b:bf:97:c9:7c:
67:90:32:58:c6:dc:df:e1:9a:75:03:d2:24:a0:41:d2:5b:ac:
cb:2f:9e:35:69:54:d3:39:fa:9f:79:35:68:ac:36:94:1a:67:
80:f0:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:38 2026 by rpki-client