Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB9EBA681B811F18E69D9FCCE1D38B0.roa
File: EFB9EBA681B811F18E69D9FCCE1D38B0.roa (raw, json)
Hash identifier: SX/g0x7iEHnSASlX8HdNfqsETzs0rZnm4jXtXUXhna8=
Subject key identifier: 1F:7B:E4:E8:AC:56:17:36:A1:03:65:A3:84:BD:57:42:91:E8:E3:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D959
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB9EBA681B811F18E69D9FCCE1D38B0.roa
Signing time: Fri 17 Jul 2026 08:24:33 +0000
ROA not before: Fri 17 Jul 2026 08:24:28 +0000
ROA not after: Wed 19 Aug 2026 08:24:28 +0000
asID: 11404
IP address blocks: 154.207.144.0/20 maxlen: 24
154.207.160.0/20 maxlen: 24
154.208.96.0/20 maxlen: 24
154.222.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121177 (0x1d959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:24:28 2026 GMT
Not After : Aug 19 08:24:28 2026 GMT
Subject: CN=6a59e6c0-a01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:b4:92:a4:81:e3:4e:37:d3:5a:31:fc:9a:
33:03:cd:a5:48:a5:69:e2:23:df:5f:7a:0c:1a:2b:
e7:24:d1:f9:db:06:3c:d4:40:c6:b3:ef:9a:2f:b8:
4f:71:d1:5b:9f:05:27:f2:e3:1e:c6:ef:0e:c8:86:
a6:b5:75:4e:63:78:28:a8:c9:65:3f:8e:04:f1:ec:
7a:61:4c:e6:ad:73:85:19:cb:25:ef:92:2f:88:a2:
87:87:36:9d:58:3d:b8:7e:55:17:d8:6a:8b:c6:6f:
97:ef:f9:fe:9c:6d:dc:37:f6:2d:23:6c:bb:f7:2d:
11:ed:3a:71:fd:04:c1:fb:b8:dd:ce:bb:66:b0:38:
06:29:16:51:f8:75:1d:70:6b:8f:db:42:bf:17:a2:
8c:93:34:e7:49:eb:c9:bd:e0:bb:c4:68:b6:f6:39:
54:3b:21:0c:ff:82:95:66:90:c2:b7:0a:ba:da:fa:
f5:a5:f2:eb:c3:5c:8f:4f:d6:e7:94:68:95:72:99:
eb:09:4e:f2:7c:09:45:31:6d:96:1b:57:ad:63:fd:
a6:ef:eb:07:e5:7f:86:5e:56:dc:12:5d:a4:74:6b:
67:85:67:7d:60:04:b8:d5:59:26:20:58:71:aa:48:
f9:69:68:12:06:cb:9e:43:1a:44:02:3a:0a:15:65:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:E4:E8:AC:56:17:36:A1:03:65:A3:84:BD:57:42:91:E8:E3:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB9EBA681B811F18E69D9FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.144.0-154.207.175.255
154.208.96.0/20
154.222.96.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:a1:6f:10:be:37:4f:1a:cb:45:4f:0e:85:82:8b:37:4f:87:
70:22:cd:55:e4:28:ea:24:d2:cf:cb:4a:c7:3a:53:80:fb:f0:
54:20:0f:c1:57:c2:08:93:f4:81:77:65:4d:ed:18:d5:41:70:
d6:3f:16:fd:d4:14:29:3e:69:1a:dc:97:91:1a:a6:4f:ee:f5:
d9:c8:64:09:02:eb:14:66:dd:fa:4a:34:9e:5c:e7:61:6e:93:
6d:c8:55:8d:56:b9:cf:5c:a1:2b:09:5d:c6:e8:83:0a:03:1f:
33:2d:00:66:1f:34:de:c8:0f:ee:b7:b0:7a:1f:b9:35:37:88:
19:f1:19:f6:e0:5a:e9:81:e4:c1:20:aa:10:21:16:26:8d:dd:
1c:4e:e3:3f:86:07:8c:ad:5c:f0:90:a0:b4:61:33:d0:94:9d:
f2:9f:c5:ce:0d:04:c6:c5:11:c6:9d:f2:dd:18:96:de:d4:0f:
70:bc:b6:d4:ac:87:bf:89:c4:5d:e3:8d:15:10:c7:2f:32:e4:
6f:0b:a3:e7:b8:a7:3f:09:af:5d:18:46:33:f4:ac:f5:29:f6:
36:bf:9b:a4:fd:b6:f2:cb:8f:63:f2:96:1e:3c:e2:e9:b1:b7:
f2:04:00:e2:bc:a5:ae:52:0f:20:f2:e7:25:d1:8d:3a:24:d6:
c2:7d:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:35 2026 by rpki-client