Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EB4EC41B8F11F1A64551F0DAE4EC9C.roa
File: 13EB4EC41B8F11F1A64551F0DAE4EC9C.roa (raw, json)
Hash identifier: JjdUXLmYKNkIhn36iOTHrU+lM5OeGX6BN1pBpBB7fo0=
Subject key identifier: 0E:79:00:79:BE:39:28:28:ED:4B:E5:DB:C9:E1:5E:FC:70:CF:8A:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EB4EC41B8F11F1A64551F0DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:07:55 +0000
ROA not before: Mon 09 Mar 2026 08:07:51 +0000
ROA not after: Wed 25 Mar 2026 08:07:51 +0000
asID: 139613
IP address blocks: 154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114292 (0x1be74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 08:07:51 2026 GMT
Not After : Mar 25 08:07:51 2026 GMT
Subject: CN=69ae7fdb-685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:77:a8:ec:43:8a:48:79:46:de:62:bd:6d:
a6:b2:23:50:c5:3c:af:0c:7b:7e:35:98:c1:68:41:
32:58:10:6f:88:b4:7c:c0:8c:92:f5:34:a9:57:5f:
95:a3:36:2f:57:80:df:6b:a6:26:50:60:6c:c7:d4:
0e:62:eb:32:56:db:3b:04:38:6d:ea:68:ef:d5:29:
6f:f3:c4:d4:11:e7:58:5c:5b:ec:ee:0c:c5:0a:34:
8c:d6:69:35:da:0b:87:13:ee:35:fd:38:4c:11:b3:
e0:6d:37:94:3c:23:83:a2:36:ff:6a:f7:77:23:a3:
ea:97:1c:5d:4c:c7:de:a8:f1:49:2a:4f:02:f2:45:
55:72:b5:d8:fe:45:37:e7:d2:41:9d:b5:af:a5:74:
38:fc:4b:1c:10:c5:82:ae:f1:95:ea:60:9d:26:2b:
f1:55:ce:22:e3:bc:a8:eb:2c:99:d3:44:df:04:de:
36:c6:25:c3:63:60:65:72:68:f5:e0:1b:75:71:66:
da:43:1f:5d:df:86:12:9f:01:32:82:55:2c:2f:6b:
3d:c4:19:1f:15:33:f6:60:5f:31:29:78:bc:c5:ca:
32:8e:1c:1c:a2:51:08:a3:cf:5f:d0:7d:a1:8a:31:
7a:01:d7:68:36:92:4f:fe:5f:40:36:0e:fa:91:95:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:00:79:BE:39:28:28:ED:4B:E5:DB:C9:E1:5E:FC:70:CF:8A:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EB4EC41B8F11F1A64551F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
85:f7:f4:c1:c8:a9:de:e7:02:e0:b8:4f:88:3d:df:e0:c0:ec:
65:cc:35:b5:f0:21:03:5b:e5:22:cb:e9:f6:13:f0:ee:e5:59:
3e:f0:77:09:ce:7f:ee:0b:17:08:00:31:26:23:c0:e4:41:99:
d1:4b:11:e3:6a:9f:ff:0b:16:7d:af:49:5c:57:3f:42:67:d8:
5a:74:63:1d:0c:67:90:9e:38:f2:3e:e5:45:d7:29:42:08:a7:
dc:3d:25:75:2b:63:08:c1:5c:c3:9e:34:9d:0e:1d:42:e9:d9:
c4:2c:28:f3:90:a4:61:1d:be:fa:95:1a:51:41:75:a8:5e:8f:
b9:7a:77:0c:38:4a:60:b3:cb:59:93:72:40:62:fc:db:fa:59:
5b:51:d0:90:16:e1:9c:1f:20:81:a8:91:b4:0a:57:f3:b4:e4:
13:31:9e:aa:06:0e:2f:df:b5:4e:48:c4:34:c8:46:6c:99:cb:
c6:76:0d:53:2b:fd:22:10:7b:b8:54:57:6c:44:9e:0e:f6:a9:
e1:44:ed:94:d7:81:b9:ee:7b:75:3c:1f:6b:4c:d3:cd:bb:46:
2e:1d:52:54:ee:82:54:c7:52:94:99:2d:2d:eb:2c:02:e1:9e:
46:9a:18:c4:de:8e:b8:23:ea:83:c7:ef:fb:47:a5:f4:33:3f:
4a:5d:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 14:04:26 2026 by rpki-client