Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBAF3647C5611F1862FACEECE1D38B0.roa
File: EFBAF3647C5611F1862FACEECE1D38B0.roa (raw, json)
Hash identifier: h0/TRN/zPH7DrE9jHhe0vRfr47stpY2ed6pGp/F7Plk=
Subject key identifier: 97:70:FC:7B:61:CE:8F:08:48:0B:01:07:38:3B:CA:98:32:BD:9A:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D80B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBAF3647C5611F1862FACEECE1D38B0.roa
Signing time: Fri 10 Jul 2026 12:00:26 +0000
ROA not before: Fri 10 Jul 2026 12:00:21 +0000
ROA not after: Mon 10 Aug 2026 12:00:21 +0000
asID: 139613
IP address blocks: 154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120843 (0x1d80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 12:00:21 2026 GMT
Not After : Aug 10 12:00:21 2026 GMT
Subject: CN=6a50deda-c233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:25:52:67:89:a3:b2:eb:30:ae:94:39:22:
8c:ed:96:93:0a:2a:b3:ad:47:c3:80:d7:fb:d3:4e:
a6:67:37:a4:26:3a:d2:97:83:5e:07:45:0f:5a:03:
14:5a:e6:82:11:eb:d7:23:b0:ad:72:8b:6b:c9:87:
41:d3:60:b6:1f:53:bf:d4:58:37:d3:20:0b:61:56:
ba:f2:54:8f:f8:b9:20:88:7d:67:37:3d:d1:c1:1e:
e1:10:16:75:b9:09:db:e8:84:49:f9:70:df:f3:55:
83:10:8c:aa:72:ac:82:a8:20:1e:04:a1:31:7e:29:
74:39:91:34:eb:eb:33:63:08:6c:af:89:9b:2d:a5:
0d:56:b8:60:67:6c:5b:34:b7:a0:3c:ff:41:df:2b:
7c:11:c0:b5:3c:cb:54:c8:a1:73:66:07:8c:ce:76:
7d:4e:fd:76:17:9c:ca:83:df:93:42:72:91:c4:b1:
83:4c:b8:22:44:03:0b:9d:81:20:d4:2c:6e:dc:92:
e5:3c:19:a9:bc:a3:58:bd:6e:66:aa:c9:f3:f7:be:
ee:41:b6:b3:bd:39:51:50:7c:e9:f9:e1:0d:4a:c2:
b6:b0:1a:a3:51:fc:30:b8:c0:74:6f:a7:7c:95:7a:
8c:7b:5b:f5:81:7f:17:76:04:1c:34:5f:02:7b:f2:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:FC:7B:61:CE:8F:08:48:0B:01:07:38:3B:CA:98:32:BD:9A:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBAF3647C5611F1862FACEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.12.0-154.208.31.255
Signature Algorithm: sha256WithRSAEncryption
59:1b:db:e1:62:f7:2a:be:bf:82:00:72:1d:52:e7:4e:04:22:
e5:b9:51:a7:33:c8:32:a9:6b:2b:66:c1:0b:1e:85:83:99:c7:
4d:86:fc:cf:a7:89:1f:27:6a:e8:86:1b:bd:76:22:c9:42:01:
bc:13:d4:7f:d0:e4:e3:33:b4:84:fc:78:86:de:f2:54:1b:99:
09:bf:20:e1:f3:96:0a:3a:05:65:5d:95:d5:2a:39:b6:fc:9f:
02:9e:30:87:b3:67:39:b4:6c:4b:d4:92:cd:1f:ce:1d:1f:26:
92:00:e4:3b:bc:59:1f:15:14:d6:28:85:ca:ab:b4:d9:14:a8:
3e:9c:e8:d4:6a:f1:a5:34:22:67:f3:04:8a:c8:12:3e:7e:5a:
ae:bd:14:7f:5d:2d:45:55:8f:b6:e5:e1:68:69:c6:4f:c3:d5:
f0:76:a1:6c:7d:be:1d:57:81:54:55:47:28:f8:ad:17:b1:9b:
52:44:9c:f2:57:f5:f2:0b:5a:a1:5f:2b:9a:f9:76:e6:71:bc:
31:43:b2:a2:82:b9:a8:33:8a:22:9d:bd:20:f4:26:8a:5c:21:
36:e0:2a:39:02:8b:b6:f7:f3:8a:23:0d:bc:8a:c6:29:11:33:
ed:a9:94:c7:a8:2d:a2:02:5a:b0:70:4c:7c:76:31:75:83:5b:
75:fd:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:57 2026 by rpki-client