Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9276801F8611F194E2CCA0DAE4EC9C.roa
File: EC9276801F8611F194E2CCA0DAE4EC9C.roa (raw, json)
Hash identifier: AXfE2PNlZPYpYKktfZPl3VWnfXK0Oy6UDE0r9Uq5rHI=
Subject key identifier: 59:73:37:88:0A:32:D3:BB:BC:2B:D9:E4:EC:A8:3A:A2:00:A9:21:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9276801F8611F194E2CCA0DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 09:19:38 +0000
ROA not before: Sat 14 Mar 2026 09:19:33 +0000
ROA not after: Sun 31 May 2026 09:19:33 +0000
asID: 399077
IP address blocks: 154.91.107.0/24 maxlen: 24
154.91.108.0/24 maxlen: 24
154.91.109.0/24 maxlen: 24
154.91.110.0/24 maxlen: 24
154.91.111.0/24 maxlen: 24
154.91.112.0/24 maxlen: 24
154.91.113.0/24 maxlen: 24
154.91.114.0/24 maxlen: 24
154.91.115.0/24 maxlen: 24
154.91.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114522 (0x1bf5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 09:19:33 2026 GMT
Not After : May 31 09:19:33 2026 GMT
Subject: CN=69b5282a-c2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:89:45:43:5f:43:33:ec:76:9a:c2:1f:b2:
a5:eb:dc:92:0d:aa:d3:50:a4:04:0a:7d:05:1c:19:
c7:f0:ed:f9:59:f8:49:7b:93:d5:1d:30:88:95:77:
f5:49:35:da:0d:3a:f7:b9:86:88:dc:2e:2f:16:87:
1d:d0:1f:99:26:1b:0c:b7:a2:e6:bf:58:40:ec:ef:
ff:f9:71:f2:90:b4:06:0b:9a:ed:46:b1:59:b9:75:
a1:28:ea:47:ab:a8:63:66:67:81:c8:52:ad:c5:bf:
1e:61:93:88:ab:c0:33:e8:44:07:ec:9b:4d:b8:73:
d1:e7:53:3b:bf:f2:74:76:8c:c7:f0:e5:ce:bb:67:
8c:cd:e1:0e:65:bb:8c:57:c9:80:5a:ee:0a:d1:44:
3b:55:cb:bf:4e:fa:8f:da:36:c6:5d:01:7b:dc:00:
bf:f7:f4:de:68:b3:49:f2:3d:c9:dc:7c:f5:db:d4:
b0:cc:8f:bb:16:b2:c4:5d:7b:c8:69:c1:03:bc:d4:
d3:12:a8:7b:68:93:22:62:8f:e1:34:23:4f:07:3f:
65:44:60:85:53:f4:73:df:59:8f:4d:dd:7e:81:1f:
0b:07:5f:51:5f:f4:97:2a:2d:61:84:01:90:92:26:
31:71:4b:6e:f9:33:80:e1:66:c0:61:39:06:70:e1:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:37:88:0A:32:D3:BB:BC:2B:D9:E4:EC:A8:3A:A2:00:A9:21:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9276801F8611F194E2CCA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.107.0-154.91.116.255
Signature Algorithm: sha256WithRSAEncryption
3d:12:3e:a3:fa:f1:ba:24:dc:dd:cc:6e:05:90:94:21:dc:6f:
e7:8a:57:a9:5a:96:a9:6d:49:b6:f8:8f:30:58:6d:37:f4:55:
b9:a7:0d:cb:0d:23:3e:64:05:55:a9:b3:e2:f2:1f:5a:aa:ce:
9d:45:21:30:34:54:08:8f:87:8f:8c:55:5d:6f:05:a7:47:95:
3a:76:d3:51:8b:4c:ee:55:51:2f:db:aa:58:56:d0:28:59:58:
e6:a2:f8:96:33:46:4f:9a:e2:e5:73:c8:6a:29:fc:95:e5:b3:
c6:66:41:86:dc:e7:1e:3f:1e:19:be:53:d6:81:2c:8e:e9:a1:
69:ca:61:4b:e6:48:54:19:0c:8f:4d:60:6c:af:f3:3c:01:60:
e3:b5:6a:6c:31:73:7e:4f:7b:a0:17:20:6d:0b:53:05:de:d5:
90:15:b6:11:6e:4b:fc:65:3b:26:49:5a:72:31:f1:41:5a:11:
b3:b5:a1:60:18:16:93:46:a2:2b:0e:58:63:3a:86:80:d3:40:
39:76:bb:0d:8b:e6:be:54:d1:36:c5:fd:95:92:d3:03:9e:9e:
68:60:d4:aa:63:be:b8:7d:1b:fc:09:36:2d:14:d1:1b:da:e3:
f8:b1:cb:81:4b:c5:14:9e:42:ee:d1:d8:60:cd:46:dc:e5:57:
49:06:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:13 2026 by rpki-client