Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC59AA1C245411F1A254359FDAE4EC9C.roa
File: EC59AA1C245411F1A254359FDAE4EC9C.roa (raw, json)
Hash identifier: ER8ggLHQucHLucTvHxLgBMi3PucbsRaxs28UA6fPh9g=
Subject key identifier: 2F:8F:D2:40:8E:0A:11:C0:ED:E8:53:78:FA:04:76:FC:15:00:C6:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C034
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC59AA1C245411F1A254359FDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 12:04:19 +0000
ROA not before: Fri 20 Mar 2026 12:04:14 +0000
ROA not after: Sun 26 Apr 2026 12:04:14 +0000
asID: 138915
IP address blocks: 154.93.72.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.93.98.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114740 (0x1c034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 12:04:14 2026 GMT
Not After : Apr 26 12:04:14 2026 GMT
Subject: CN=69bd37c3-b6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:75:c9:33:9c:ba:55:8d:47:90:5d:8e:32:
a7:b4:39:61:68:19:8c:87:16:83:8d:69:b3:6c:43:
71:40:41:78:56:64:f1:86:d2:95:24:5d:ad:f2:07:
b4:56:f3:56:9e:02:77:34:43:07:d9:44:a1:5b:51:
72:2c:4f:60:fa:f3:4f:90:b9:da:94:18:68:32:55:
bc:55:89:84:bf:93:76:5b:17:5f:df:58:71:14:6f:
b0:6e:19:bd:ac:5c:46:1e:20:be:7c:59:3c:7a:6d:
56:85:47:12:0b:87:12:11:27:73:4a:bd:75:a0:56:
0c:fe:36:76:18:24:d3:c1:6c:ab:5c:f0:54:87:b0:
05:61:bd:0e:47:c4:99:8d:03:c1:45:b7:92:80:41:
d6:87:19:58:c1:57:a0:11:b5:83:d8:90:db:bb:04:
45:ed:cf:6b:fb:19:55:6b:8a:0f:6c:0c:df:ce:e6:
0e:9f:2d:6c:a0:92:3f:25:00:0e:05:27:c0:3e:5c:
71:bf:4d:dc:f1:2e:1f:4a:97:db:b9:4c:10:51:93:
4a:92:cc:f1:d3:38:ba:c2:b9:67:5d:d2:a1:b8:6c:
04:59:b4:7b:58:c9:bd:2e:3f:0c:a7:b1:a6:7d:1a:
50:6d:35:33:d8:35:81:83:b3:a1:3d:29:7d:e5:df:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:D2:40:8E:0A:11:C0:ED:E8:53:78:FA:04:76:FC:15:00:C6:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC59AA1C245411F1A254359FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
154.93.74.0/24
154.93.96.0-154.93.98.255
154.94.86.0/23
154.94.100.0/24
154.94.116.0/24
154.94.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2c:e9:4a:cf:70:13:b1:a8:c4:59:b3:67:f8:4a:f9:d5:09:
27:45:b8:e4:f5:b1:d4:e4:d5:da:2f:13:85:3d:40:b7:bd:52:
10:11:7c:fc:31:96:91:3e:f9:e8:e2:e9:09:80:4b:b4:5f:5e:
c9:ce:53:aa:32:29:bd:10:40:4d:f2:84:a1:f1:e5:d3:a6:43:
b0:d6:3c:35:bd:a4:04:2c:98:8f:e8:29:68:62:dd:d7:d6:e3:
27:6e:14:84:4d:94:d3:b4:1b:0a:d9:fa:e2:31:63:41:90:33:
e0:6b:dc:91:ea:47:b3:e4:ac:96:ab:59:39:63:fd:d5:74:8b:
43:51:29:0e:f2:9e:b7:46:7f:cb:82:46:07:77:75:f5:e5:94:
6d:db:1f:6c:79:50:d3:12:08:8a:b4:2d:57:7f:af:74:9d:33:
93:2b:3b:34:e4:f2:ba:24:e9:d2:81:55:29:b9:ac:2b:06:30:
86:fa:f9:6f:df:3f:e1:0f:1d:df:42:ff:66:e8:b3:f1:61:ab:
95:e1:24:08:1b:d2:98:5a:f8:b0:ea:67:dc:9a:67:01:17:09:
86:e0:a0:4b:5a:d3:1a:5d:f0:67:5c:80:f5:3e:41:bc:f2:1d:
71:ec:22:4f:58:36:8f:9a:97:69:e2:2e:17:a6:cf:8c:a8:71:
ac:2a:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:45 2026 by rpki-client