Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE7E112C7F6F11F1A1B061CACE1D38B0.roa
File: EE7E112C7F6F11F1A1B061CACE1D38B0.roa (raw, json)
Hash identifier: p/4Dpd3d61/aAFlCdcRtDlUcej2azeNYoA2EYyLO5PA=
Subject key identifier: 5B:49:7B:27:2B:51:B5:FD:1E:CF:5E:F4:3E:74:40:BB:F8:9D:9B:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE7E112C7F6F11F1A1B061CACE1D38B0.roa
Signing time: Tue 14 Jul 2026 10:36:55 +0000
ROA not before: Tue 14 Jul 2026 10:36:50 +0000
ROA not after: Fri 21 Aug 2026 10:36:50 +0000
asID: 32043
IP address blocks: 154.194.5.0/24 maxlen: 24
154.197.104.0/22 maxlen: 24
154.200.22.0/24 maxlen: 24
154.200.38.0/23 maxlen: 24
154.200.40.0/24 maxlen: 24
154.200.47.0/24 maxlen: 24
154.200.110.0/24 maxlen: 24
154.203.8.0/22 maxlen: 24
154.203.12.0/22 maxlen: 24
154.203.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121058 (0x1d8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:36:50 2026 GMT
Not After : Aug 21 10:36:50 2026 GMT
Subject: CN=6a561147-a278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:cb:b8:fb:12:43:f2:ff:85:26:10:e8:6c:
f7:8e:21:91:0f:d8:83:4b:ba:b3:f0:4e:70:47:98:
cc:1e:ef:88:c5:a5:39:26:39:4d:e1:3f:0c:85:66:
84:7c:4c:ea:ac:d9:4b:79:e9:36:d2:6a:46:1f:96:
9c:c0:d8:34:8c:6c:8b:f2:7a:44:77:9f:1e:5c:25:
db:28:66:6f:46:2b:ec:5b:12:06:d7:e2:79:2f:69:
55:2a:e4:32:66:12:4f:c5:65:68:ea:2f:8f:f5:1d:
ef:4a:09:7d:71:92:95:e3:d4:e3:72:ce:3a:ad:3a:
8b:81:d5:f8:9e:f9:7e:df:79:17:55:33:03:58:cd:
73:50:b2:55:6a:2b:b2:3e:94:f9:82:93:53:eb:31:
8c:cc:d9:e4:bd:d9:e8:3f:0a:16:14:90:d1:87:d8:
95:41:2b:13:c6:ef:cd:81:2b:ac:74:4e:e2:ee:ad:
f9:17:58:1f:7c:90:25:93:76:80:60:8f:b4:00:81:
c2:4a:37:89:0b:f4:b9:e9:74:51:b9:ae:7c:09:16:
3e:73:8f:ef:20:8f:e3:00:dc:3c:42:05:ff:28:29:
fe:d9:dd:5e:11:f8:52:dd:53:30:32:38:51:a5:0c:
44:dc:63:bc:c4:e3:8b:d4:00:1f:36:d2:3d:56:ed:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:7B:27:2B:51:B5:FD:1E:CF:5E:F4:3E:74:40:BB:F8:9D:9B:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE7E112C7F6F11F1A1B061CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.5.0/24
154.197.104.0/22
154.200.22.0/24
154.200.38.0-154.200.40.255
154.200.47.0/24
154.200.110.0/24
154.203.8.0/21
154.203.243.0/24
Signature Algorithm: sha256WithRSAEncryption
46:24:02:5f:e1:d5:c8:29:a5:b3:d4:fc:1a:14:c7:ce:20:1f:
62:9c:76:6e:7a:be:4f:05:1e:ce:7e:40:d6:e3:76:f0:38:33:
7e:a9:6e:ab:f4:4d:1e:42:25:72:05:cc:f6:0d:22:c4:47:53:
c6:65:7c:3a:54:d1:8c:d6:33:19:61:d7:5b:bf:cc:d0:5e:bc:
94:5c:25:79:24:9f:06:0f:7a:0a:b1:11:0d:5d:e0:87:92:ad:
69:88:60:d1:94:7b:3a:09:95:2f:ba:40:5a:ae:a7:10:16:46:
6b:1b:8f:aa:a8:3f:c0:1b:03:c9:2f:89:0f:9d:25:5f:db:d5:
8d:79:50:04:3c:87:aa:b0:a6:1d:b3:73:00:7c:b2:1a:52:a3:
58:7a:27:bb:c8:b5:2d:d5:5d:44:f7:8a:5a:fa:c2:78:79:ea:
b8:0e:1c:e1:7b:02:20:b7:aa:76:7d:7e:7e:27:2a:aa:c7:d6:
1d:1e:ca:ae:2a:c3:13:08:a5:45:70:d0:04:f7:80:1e:7d:87:
24:6b:8f:65:0b:99:6e:e0:2e:d2:7e:f6:03:5c:39:16:c3:b1:
af:c3:df:a4:99:0b:8a:4d:81:7b:28:5b:92:c8:2c:a1:9e:89:
88:ee:f0:34:29:c7:b6:77:e8:66:9b:71:60:43:4a:5d:d1:d7:
e2:3c:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:19 2026 by rpki-client