Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE1924824AB411F1BA4261AACE1D38B0.roa
File: EE1924824AB411F1BA4261AACE1D38B0.roa (raw, json)
Hash identifier: 98PNhLzbcfPxyXU7EwfLsnBMmUUnoPySqE1UA1KMOTA=
Subject key identifier: 0A:96:1E:55:DE:BC:E7:1F:54:12:B8:05:AD:6E:76:75:AB:BA:28:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE1924824AB411F1BA4261AACE1D38B0.roa
Signing time: Fri 08 May 2026 08:07:18 +0000
ROA not before: Fri 08 May 2026 08:07:13 +0000
ROA not after: Wed 07 Jul 2027 08:07:13 +0000
asID: 328608
IP address blocks: 154.200.197.0/24 maxlen: 24
154.200.198.0/24 maxlen: 24
154.200.199.0/24 maxlen: 24
154.200.200.0/24 maxlen: 24
154.200.201.0/24 maxlen: 24
154.200.202.0/24 maxlen: 24
154.200.203.0/24 maxlen: 24
154.200.204.0/24 maxlen: 24
154.200.205.0/24 maxlen: 24
154.200.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117329 (0x1ca51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 08:07:13 2026 GMT
Not After : Jul 7 08:07:13 2027 GMT
Subject: CN=69fd99b6-449c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:0a:f3:bc:f3:39:9f:2d:0b:3b:e3:de:54:
cf:5b:81:a8:29:25:8b:fa:fc:a7:96:69:7f:d2:08:
72:25:70:d2:c2:33:57:11:18:c5:88:e4:ec:c7:83:
5c:88:19:f9:05:bb:8c:65:4f:02:be:f9:99:17:ae:
ad:38:a8:84:7f:7d:6a:5f:27:a4:c0:15:28:8c:7d:
39:e0:df:18:8e:1b:ad:85:d4:a5:32:47:30:51:af:
b8:cb:17:17:18:07:bc:22:54:90:18:5f:7e:aa:65:
24:7f:6d:12:57:cc:24:ad:e9:8b:7d:52:10:4e:3a:
b4:d1:5f:97:8a:0d:73:2d:bd:65:f2:94:e5:3e:65:
d5:4a:40:6e:cb:45:69:55:cd:e0:e9:06:ae:80:30:
81:e7:ad:95:1c:1f:d4:3d:12:31:ea:f8:60:c4:e0:
76:62:53:d3:66:f8:38:be:98:58:01:54:47:13:fe:
c1:95:2a:be:c3:c2:ca:c5:10:40:69:19:d3:a1:80:
de:bd:af:62:93:1b:a6:38:06:00:32:fe:ce:e6:b9:
00:84:1a:9b:fa:d4:f0:d5:da:b6:6a:6e:f3:b6:c3:
54:fe:c0:f0:43:38:e4:e7:c7:3e:90:63:88:d8:0c:
03:0e:34:35:08:1e:c0:9f:75:93:aa:a3:19:e2:66:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:96:1E:55:DE:BC:E7:1F:54:12:B8:05:AD:6E:76:75:AB:BA:28:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE1924824AB411F1BA4261AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.197.0-154.200.206.255
Signature Algorithm: sha256WithRSAEncryption
13:44:13:7c:65:b8:18:98:4f:5a:36:e4:65:b7:6f:74:84:08:
92:e6:e2:8f:dd:05:b8:59:6c:b2:47:4f:12:25:1b:ca:f1:93:
ba:8d:67:bd:64:d1:34:dd:3c:7a:94:bc:12:a7:9f:82:5c:37:
5f:4d:b2:9b:0e:f8:2a:b3:b1:6d:26:62:8b:ee:bf:67:34:db:
1a:5c:f4:4c:78:62:b0:33:a3:60:3a:3d:76:76:63:32:f9:21:
ff:e7:c6:ac:79:d2:4f:3c:8a:0d:ab:5f:e5:7f:15:00:7e:f3:
c0:9f:83:f8:03:e7:97:d8:19:7c:21:81:11:a3:d0:72:70:5c:
35:99:c2:8b:a9:b9:61:41:d7:e5:40:55:7d:b0:19:d8:e2:d1:
75:7a:00:0f:ab:c9:8a:d9:54:cb:f2:07:78:97:54:6c:9f:ac:
4b:49:ad:1b:ea:9e:4a:50:c0:4e:5f:93:df:66:75:20:ac:2f:
d0:c6:2d:17:62:63:7d:b8:f7:d1:9b:17:14:2c:07:9c:55:ab:
c6:93:ac:e3:b2:ed:53:2f:37:2f:2d:f8:a0:66:53:76:f9:2b:
89:21:bb:1c:16:bd:11:aa:50:d8:54:8a:72:d7:dd:e3:06:4b:
17:f5:e9:87:a5:0c:f9:d2:0a:6f:4a:97:8a:f8:fc:29:6c:5c:
19:4b:0c:49
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcpRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA4MDgwNzEzWhcNMjcwNzA3MDgwNzEzWjAYMRYw
FAYDVQQDEw02OWZkOTliNi00NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs2IK87zzOZ8tCzvj3lTPW4GoKSWL+vynlml/0ghyJXDSwjNXERjFiOTs
x4NciBn5BbuMZU8CvvmZF66tOKiEf31qXyekwBUojH054N8YjhuthdSlMkcwUa+4
yxcXGAe8IlSQGF9+qmUkf20SV8wkremLfVIQTjq00V+Xig1zLb1l8pTlPmXVSkBu
y0VpVc3g6QaugDCB562VHB/UPRIx6vhgxOB2YlPTZvg4vphYAVRHE/7BlSq+w8LK
xRBAaRnToYDeva9ikxumOAYAMv7O5rkAhBqb+tTw1dq2am7ztsNU/sDwQzjk58c+
kGOI2AwDDjQ1CB7An3WTqqMZ4maROQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAqW
HlXevOcfVBK4Ba1udnWruiieMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRTE5MjQ4MjRBQjQxMUYxQkE0MjYxQUFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACayMUDBACayM4wDQYJ
KoZIhvcNAQELBQADggEBABNEE3xluBiYT1o25GW3b3SECJLm4o/dBbhZbLJHTxIl
G8rxk7qNZ71k0TTdPHqUvBKnn4JcN19NspsO+CqzsW0mYovuv2c02xpc9Ex4YrAz
o2A6PXZ2YzL5If/nxqx50k88ig2rX+V/FQB+88Cfg/gD55fYGXwhgRGj0HJwXDWZ
woupuWFB1+VAVX2wGdji0XV6AA+ryYrZVMvyB3iXVGyfrEtJrRvqnkpQwE5fk99m
dSCsL9DGLRdiY32499GbFxQsB5xVq8aTrOOy7VMvNy8t+KBmU3b5K4khuxwWvRGq
UNhUinLX3eMGSxf16YelDPnSCm9Kl4r4/ClsXBlLDEk=
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:46 2026 by rpki-client