Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3B9DBA458B11F1A6199EBACE1D38B0.roa
File: EE3B9DBA458B11F1A6199EBACE1D38B0.roa (raw, json)
Hash identifier: 47+owj7oB/lcKsSuU+75/dA43ouw1gD/J4WobFSoNEc=
Subject key identifier: 02:E9:A8:7B:0E:24:8A:F1:68:24:A1:F9:8D:6F:73:7C:0F:3F:B3:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3B9DBA458B11F1A6199EBACE1D38B0.roa
Signing time: Fri 01 May 2026 18:31:13 +0000
ROA not before: Fri 01 May 2026 18:31:08 +0000
ROA not after: Fri 05 Jun 2026 18:31:08 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
154.219.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116959 (0x1c8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 18:31:08 2026 GMT
Not After : Jun 5 18:31:08 2026 GMT
Subject: CN=69f4f171-e04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8e:25:70:1a:66:15:30:d8:a6:56:67:a6:cf:
47:2e:11:9b:dd:24:9a:62:b3:40:32:b7:82:2e:75:
2b:4d:1f:c5:5d:0e:52:c7:64:68:d5:92:ee:05:c1:
ba:4b:95:f9:46:80:02:34:fc:2b:b3:e9:d8:1b:e8:
ec:b5:0b:02:6c:47:db:dc:92:c0:12:bb:e7:05:28:
30:82:eb:1d:ed:9b:d1:2b:05:f2:b3:7d:e9:65:e8:
16:cc:5d:d8:81:4a:9c:24:61:92:84:f6:9f:f6:92:
84:4e:9d:6d:3f:a0:1c:c7:01:07:6a:60:95:bc:23:
85:27:21:2c:f9:f4:1d:de:81:92:10:5d:06:18:43:
5f:c3:cb:67:c3:dd:e2:81:95:03:c7:c2:81:18:fb:
2f:20:0c:e3:92:c2:e1:ff:13:a0:00:19:3c:08:75:
06:1b:df:20:56:ab:e7:13:d1:f8:14:34:ce:3f:98:
31:a8:57:0b:fb:c9:dd:6e:dc:78:7d:47:40:28:83:
db:5c:6b:69:63:89:74:9b:f5:99:06:41:0c:e4:13:
40:bb:83:50:90:d7:63:cd:70:28:f9:86:94:f7:27:
20:c5:2b:2b:f1:d3:2f:5a:38:64:c2:6a:e5:cd:13:
16:59:9f:e0:23:6e:cf:b2:4a:1d:f6:e2:fe:51:b0:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:A8:7B:0E:24:8A:F1:68:24:A1:F9:8D:6F:73:7C:0F:3F:B3:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3B9DBA458B11F1A6199EBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.218.31.0/24
154.219.217.0-154.219.221.255
154.219.223.0-154.219.224.255
Signature Algorithm: sha256WithRSAEncryption
99:32:c1:cd:ac:68:31:f8:06:3d:d4:49:d5:85:a3:7b:ea:50:
e8:ae:83:b1:5f:00:9d:9d:68:d5:99:35:42:c2:19:57:e3:17:
fd:bd:70:14:c1:ea:aa:4f:11:01:27:bf:0c:76:8f:d6:26:e3:
be:31:0a:da:f1:aa:96:d2:64:43:85:05:7a:d9:1f:cf:c8:bd:
28:7d:b1:09:0b:c7:38:fb:55:44:c9:f3:15:3c:95:b9:9f:62:
1f:ad:10:89:be:7d:69:bd:a8:5f:30:41:9c:dc:41:75:f4:a9:
67:1a:1d:1a:9c:28:90:2d:40:09:d2:1b:3b:82:1f:6a:d4:aa:
85:70:04:eb:1a:57:36:f8:1d:00:19:ec:79:21:b5:12:95:11:
53:4f:e4:f2:aa:c7:c9:b4:53:53:6d:4c:d1:61:c2:4c:09:1e:
6d:4a:88:22:60:72:c8:13:43:57:24:7e:51:e8:c5:9f:73:6d:
41:4d:cf:64:de:7a:fb:15:4e:f1:86:db:b0:b4:1f:92:71:07:
f9:33:a6:fa:9a:67:18:48:00:91:ec:36:fb:de:4f:f9:4a:c6:
72:50:5e:5b:aa:30:67:d8:ca:79:29:5e:3f:82:b3:c2:60:ba:
f6:82:da:57:ec:29:f9:8f:9e:64:23:9a:5e:19:88:63:e1:2e:
85:7f:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:49 2026 by rpki-client