Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7A09BC177711F1B3823DC7DAE4EC9C.roa
File: ED7A09BC177711F1B3823DC7DAE4EC9C.roa (raw, json)
Hash identifier: Ry7plaG0Ug0QMhJaz3nHtdUE+9kBOl32cQJY9P6gbig=
Subject key identifier: 80:F1:93:50:3B:19:52:71:55:65:26:62:15:65:3C:C9:F8:6C:EF:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7A09BC177711F1B3823DC7DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 03:12:08 +0000
ROA not before: Wed 04 Mar 2026 03:12:04 +0000
ROA not after: Wed 01 Apr 2026 03:12:04 +0000
asID: 984
IP address blocks: 154.82.132.0/24 maxlen: 24
154.82.135.0/24 maxlen: 24
154.90.133.0/24 maxlen: 24
154.95.2.0/24 maxlen: 24
154.95.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113993 (0x1bd49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 03:12:04 2026 GMT
Not After : Apr 1 03:12:04 2026 GMT
Subject: CN=69a7a308-2f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:76:e4:1c:f6:e5:93:db:91:75:69:a7:3a:
57:62:c0:93:68:f8:de:4f:95:b8:c2:60:49:f8:31:
ce:6b:85:f3:77:c9:40:6b:05:8e:81:ac:13:8a:09:
a4:da:e2:11:04:de:5b:69:2a:19:7a:e3:7b:68:69:
0e:c1:d0:79:c2:8e:d7:33:9d:a7:74:3d:c0:dd:9d:
b8:88:29:9a:ac:fe:44:42:5e:bb:58:0a:e5:20:4a:
8a:35:4b:08:03:40:cc:d1:c3:a0:95:22:51:fb:41:
59:ee:3e:67:2e:29:63:6f:2a:8d:c9:4e:b7:71:cc:
94:0f:d6:ad:c9:0b:96:a6:f2:8e:f6:75:d9:91:a0:
8a:e7:0a:22:25:2b:14:9f:98:33:5f:8c:9f:a6:29:
04:d1:cf:6d:a6:5f:97:4f:de:89:ee:5d:fc:35:ae:
eb:af:c6:6a:bb:83:43:13:87:90:5e:9a:a5:65:99:
4c:22:13:57:0a:0b:76:cd:ce:1c:16:32:a9:81:13:
21:3e:b4:6a:86:97:6f:46:a2:10:3c:ac:26:13:10:
48:be:ab:cc:2a:d0:d6:ef:a9:ad:a4:91:96:e8:ba:
7c:cd:f3:e8:ec:fd:53:2d:e9:e8:bd:0d:88:37:39:
2d:27:41:e1:7c:61:8b:12:5f:30:ca:88:19:ad:41:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F1:93:50:3B:19:52:71:55:65:26:62:15:65:3C:C9:F8:6C:EF:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7A09BC177711F1B3823DC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.132.0/24
154.82.135.0/24
154.90.133.0/24
154.95.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:10:77:81:b9:4d:a2:58:b7:01:a9:b0:6b:5d:f3:52:f3:b1:
3c:d0:8f:ea:a8:eb:38:55:d3:37:87:d6:3e:79:da:0c:1a:c4:
73:d4:0f:16:24:86:b2:52:ad:8e:8a:8d:7c:67:c4:b4:db:6c:
10:3d:e7:e7:02:69:fb:bb:bb:6a:7c:79:ca:41:42:aa:5c:91:
dc:2d:33:f4:8f:d4:a7:94:79:b1:4d:ef:49:66:fd:d9:ad:be:
99:40:41:d3:fa:81:d1:a1:bc:68:3a:fb:fc:1b:5e:c9:12:ef:
8e:86:af:74:41:03:b0:04:79:e6:e8:4a:07:5d:bd:84:cb:bb:
98:58:78:d0:30:c9:da:54:b8:5a:66:75:4a:da:c2:85:0a:cb:
81:b3:a8:af:b4:14:2a:93:59:86:bd:7f:1a:fe:28:9c:44:44:
dc:9c:a6:9b:eb:f7:2e:7d:2f:06:31:ac:49:19:36:e8:ea:02:
37:52:71:dd:a0:c2:f3:2b:7a:3b:e3:9f:70:55:be:db:81:ec:
cd:68:88:32:8b:8f:6c:d1:e4:03:cb:ee:9d:98:eb:bd:93:ea:
99:bf:58:64:32:fe:85:5d:b8:34:e1:d7:b6:75:ba:b0:ac:85:
01:19:bd:4e:ac:4a:30:06:62:79:90:ae:30:7c:e2:b8:56:7e:
db:b4:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:10:18 2026 by rpki-client