Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFAED41C81B511F1811D63EBCE1D38B0.roa
File: EFAED41C81B511F1811D63EBCE1D38B0.roa (raw, json)
Hash identifier: Oo+01VLuDWbpS6BRtK3WiWJjRXT0KbM5lPQ2FGyWJSg=
Subject key identifier: 9B:FB:20:8E:AA:50:4A:10:90:B6:02:EE:B9:C8:C6:E9:F6:86:8A:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D953
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFAED41C81B511F1811D63EBCE1D38B0.roa
Signing time: Fri 17 Jul 2026 08:03:04 +0000
ROA not before: Fri 17 Jul 2026 08:03:00 +0000
ROA not after: Mon 24 Aug 2026 08:03:00 +0000
asID: 400619
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121171 (0x1d953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:03:00 2026 GMT
Not After : Aug 24 08:03:00 2026 GMT
Subject: CN=6a59e1b8-a510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:4b:40:7a:73:0e:c6:01:13:35:9d:db:b6:
72:d8:cc:c0:e3:8a:50:6b:47:f2:82:7d:84:38:25:
cc:9e:d2:20:1a:ff:0c:69:0e:f3:b2:aa:53:2e:bc:
43:24:27:0e:82:ab:1e:d2:11:09:49:62:85:17:79:
0d:68:fd:4c:2d:fb:2c:08:a9:45:b0:1c:61:0e:4e:
90:a8:31:5c:ee:bf:b7:55:88:15:03:63:aa:65:bd:
78:c6:53:0b:fc:7b:91:97:a5:dc:84:f1:82:c3:9e:
f3:e5:cf:35:db:41:d1:a8:c2:58:82:21:0e:95:38:
1c:10:5f:93:1d:de:c0:5d:8f:36:14:88:39:88:39:
cd:71:9b:10:ff:86:0e:1f:e8:56:bc:d6:87:35:2a:
3f:12:79:ba:1f:d4:54:11:ae:14:69:aa:dd:79:6c:
fc:39:cc:ed:76:17:67:36:34:00:48:e8:f9:87:3f:
18:a7:e2:e6:59:7d:9c:56:c8:7b:dc:be:a4:11:ae:
72:84:54:83:35:65:7e:ec:71:fb:52:89:77:34:b4:
7c:28:3b:0d:8b:56:f5:63:c2:f6:39:c2:78:4c:ac:
5c:d8:c5:6f:64:70:5c:89:b1:08:1d:6e:02:81:ae:
dd:3f:57:8e:07:18:b7:ee:16:43:ad:b7:de:34:4c:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:20:8E:AA:50:4A:10:90:B6:02:EE:B9:C8:C6:E9:F6:86:8A:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFAED41C81B511F1811D63EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0-154.202.127.255
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
4b:1f:54:60:7c:5b:c4:67:d7:63:62:db:fa:4a:98:63:72:43:
f0:16:9d:a8:1d:e8:6e:0e:0a:80:db:37:90:ed:ad:52:3a:41:
89:69:03:40:e9:ed:b4:bf:d5:e8:8f:d7:d8:a6:f4:7a:1d:e0:
ab:30:e0:ca:78:a6:68:0c:7a:4d:23:fd:74:a0:c5:43:a5:77:
ae:5f:03:7c:a5:63:95:30:4b:c4:e1:68:72:49:2d:a1:74:bc:
ca:e1:b9:1c:5d:f1:6d:54:26:7c:b9:0f:ce:61:aa:05:86:97:
f0:f4:09:e7:50:fa:83:b8:49:bb:d2:8a:3d:f2:8c:99:25:87:
05:6f:e9:7d:89:c4:24:a8:00:57:2c:a8:b8:c9:7f:b4:20:12:
ee:63:ab:ce:ec:ec:08:85:2f:33:a8:4f:45:71:25:2a:47:a8:
f1:cc:0f:db:ac:34:b3:72:f8:f5:45:93:46:fe:be:5f:7a:36:
ab:51:bc:3a:c6:38:e3:b4:aa:6c:44:a6:3a:4e:87:c4:f4:e3:
04:b5:26:b4:f9:bf:66:4b:22:e5:1f:83:7b:4b:de:58:18:28:
54:be:9f:54:53:bd:b1:c4:fa:3e:ab:5f:2f:ad:9b:5a:4a:98:
d6:91:a0:b2:68:a5:88:04:d9:2b:a0:f0:0f:d7:f7:8e:9d:f6:
bc:a2:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:09:23 2026 by rpki-client