Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC3216C7D4411F1B2555610CF1D38B0.roa
File: EFC3216C7D4411F1B2555610CF1D38B0.roa (raw, json)
Hash identifier: Y8H3hz/dStPwHypd3nLvvVQWTITH7PREdp35kDO/o5A=
Subject key identifier: 0D:ED:23:94:AC:74:C4:C2:46:A9:7D:6D:CF:38:20:9B:85:68:2A:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D83A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC3216C7D4411F1B2555610CF1D38B0.roa
Signing time: Sat 11 Jul 2026 16:24:06 +0000
ROA not before: Sat 11 Jul 2026 16:24:01 +0000
ROA not after: Mon 10 Aug 2026 16:24:01 +0000
asID: 17497
IP address blocks: 154.90.174.0/23 maxlen: 24
154.90.174.0/24 maxlen: 24
154.90.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120890 (0x1d83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 16:24:01 2026 GMT
Not After : Aug 10 16:24:01 2026 GMT
Subject: CN=6a526e26-c0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:a1:f9:de:a0:3a:7d:90:2f:bb:29:e3:d4:
4d:4e:e1:90:40:50:0d:d0:1e:af:6a:6c:51:b2:ba:
af:4f:e1:de:d6:6a:2e:2e:15:14:f3:8d:ab:18:c2:
5a:c4:24:de:c5:4a:34:e8:b2:24:f8:11:0b:09:19:
bc:93:5a:50:40:f6:81:3b:a7:9c:fb:ab:af:df:97:
58:98:17:6b:ee:88:10:b1:59:04:52:b9:71:8c:04:
b9:34:38:1e:ca:f0:ee:46:87:9f:14:ef:42:9a:dd:
fe:07:ef:a8:48:df:de:5d:ac:37:1f:73:1d:f1:4b:
e3:70:28:44:50:99:4a:1b:47:0e:4d:a0:a7:35:8a:
b8:2d:17:14:c8:38:66:1f:29:90:70:b1:a2:79:0b:
bf:1e:54:5d:fc:6f:b2:75:9b:95:d7:82:c2:c5:a3:
e6:ac:5d:dc:d6:3d:cb:fe:a5:83:0c:89:f3:3c:2e:
ac:cd:15:40:76:25:db:4f:c3:f9:fa:59:19:d5:f8:
b7:c7:20:d4:06:ad:1c:a0:2c:2d:ae:b3:52:91:d8:
5d:59:96:36:19:cf:3c:c2:1b:22:cd:ef:c6:90:63:
15:68:10:85:15:04:f3:14:c0:c2:3b:1c:07:cc:63:
1d:eb:47:78:cf:37:db:c9:99:8b:3d:8a:77:04:eb:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:23:94:AC:74:C4:C2:46:A9:7D:6D:CF:38:20:9B:85:68:2A:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC3216C7D4411F1B2555610CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.174.0/23
Signature Algorithm: sha256WithRSAEncryption
96:c4:65:3e:61:6e:6a:af:86:ca:62:5b:66:40:9d:73:9c:93:
38:66:62:d0:d5:68:0d:2a:91:8b:26:f5:e6:0d:15:0c:a7:8a:
60:4b:f0:2d:97:51:6c:89:18:99:8c:6f:85:2d:e3:d4:ad:04:
42:5c:45:02:f8:f8:bf:95:c2:24:b9:d0:31:cf:86:5d:3d:4f:
7d:a1:43:b8:5d:63:f2:68:74:44:67:ad:b7:57:a9:7d:c9:de:
bd:df:a3:ca:80:ea:14:53:c7:10:22:94:44:e9:c1:99:82:69:
42:a5:c8:61:74:90:2f:e2:79:05:c8:ec:f5:e1:2b:2f:8f:7f:
bf:7e:7c:0f:6d:76:e1:d9:58:5f:9a:62:34:8e:d8:93:f3:d4:
20:c8:ea:d3:2d:ee:d6:dd:67:bb:26:9d:ab:d3:31:2c:47:32:
32:b6:15:63:da:90:7f:33:0d:4c:b5:24:74:77:4b:eb:95:1d:
b8:d4:98:82:67:09:53:80:1f:db:0b:b3:b0:66:aa:df:eb:5e:
9b:48:0f:be:5f:3a:60:3f:82:cd:24:34:94:bf:b2:ea:a7:3c:
03:5e:3e:ab:74:04:a2:fc:38:a6:76:93:7b:f2:94:bf:ba:41:
28:85:c6:a4:e8:31:23:57:f9:df:5b:1a:e9:2e:65:4e:c7:67:
f4:04:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:17 2026 by rpki-client