Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF27EA4C6C7F11F1A98AB0A2CE1D38B0.roa
File: EF27EA4C6C7F11F1A98AB0A2CE1D38B0.roa (raw, json)
Hash identifier: WrC0ribPmKyQwMPn2FdbyLZLAm3+XPg3ufickx/I6xA=
Subject key identifier: E0:F5:2B:8B:A5:5A:68:D8:77:78:DD:63:37:32:93:C4:97:1F:9E:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D407
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF27EA4C6C7F11F1A98AB0A2CE1D38B0.roa
Signing time: Sat 20 Jun 2026 08:13:36 +0000
ROA not before: Sat 20 Jun 2026 08:13:31 +0000
ROA not after: Mon 27 Jul 2026 08:13:31 +0000
asID: 63139
IP address blocks: 154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119815 (0x1d407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 08:13:31 2026 GMT
Not After : Jul 27 08:13:31 2026 GMT
Subject: CN=6a364bb0-a9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:c6:3e:09:1f:28:b6:9b:3d:82:02:f9:e8:
f3:56:9e:96:2d:d6:3f:33:24:f7:be:c5:21:07:42:
f1:cd:92:5d:85:f7:53:89:43:16:f7:87:b4:50:0d:
e1:56:a7:51:77:14:5a:70:be:0c:47:f2:73:64:4d:
fa:9f:90:a1:27:da:41:a9:06:48:5a:f5:e5:97:77:
b8:42:d9:a1:4d:19:ec:d1:30:7c:8d:3c:1a:56:85:
75:e1:3d:68:39:97:41:38:8f:19:f0:f1:1a:e4:5b:
91:05:d4:9c:4f:36:4e:ac:91:f6:4b:b8:f6:ed:27:
73:60:7a:a8:ef:01:0b:6f:29:f3:50:ae:a7:8d:8c:
49:9e:7b:93:c8:40:5f:2f:bc:be:59:a5:14:6b:67:
b1:fb:c4:4c:5f:99:e8:47:6c:98:9e:56:2c:1c:1f:
f6:b5:40:bc:ca:65:66:0d:22:cb:72:a6:8d:6c:1b:
2f:3b:bc:7b:81:11:10:bf:0c:87:69:93:7a:34:c7:
f4:ba:0d:70:8e:c4:44:86:1e:a0:47:36:18:75:74:
73:19:19:9e:b6:15:07:3f:f3:35:be:82:cb:6b:6e:
dd:56:45:ed:a8:39:31:6c:db:7b:d0:77:c8:9b:3c:
15:e6:f4:7e:f4:19:65:08:b3:2d:06:44:c0:bd:c9:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:2B:8B:A5:5A:68:D8:77:78:DD:63:37:32:93:C4:97:1F:9E:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF27EA4C6C7F11F1A98AB0A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.112.0-154.94.121.255
Signature Algorithm: sha256WithRSAEncryption
44:4f:7a:b6:fa:a7:15:a3:ef:9f:59:b4:ea:f8:8c:01:63:9a:
8b:76:31:1b:87:b5:9a:7c:f6:cd:cf:b4:0e:8a:c6:d4:9a:8c:
ba:a4:78:b0:75:58:b3:43:11:02:26:a1:79:75:52:e8:43:a2:
4f:d1:99:12:0d:09:e2:e6:44:6f:7a:2a:10:41:e9:f1:25:fe:
f1:f6:85:e6:3d:3b:ee:bf:cd:71:bd:20:ee:8b:6f:ce:f1:cf:
ee:94:4c:15:bb:fe:0a:2c:6a:d1:76:00:d7:fd:22:0c:06:0a:
e3:50:2e:5b:cd:bb:83:d6:07:68:c1:c8:43:86:b6:38:32:4e:
7a:c2:68:d2:12:78:4e:51:b3:ca:50:b7:0b:ec:22:06:5b:88:
9f:91:ed:92:99:b4:dd:23:11:63:b9:da:f8:d1:b2:20:a9:ed:
91:09:2c:c7:3b:5d:e9:3a:4a:de:91:3c:78:80:fa:dd:23:37:
a0:fe:b8:2a:78:32:89:ef:50:b1:ce:a6:9b:84:fe:97:99:d4:
8c:03:d8:b6:96:44:ee:cb:4c:99:43:eb:60:46:d4:e9:dc:5e:
42:b2:19:c1:6a:4d:81:15:6f:42:74:b2:3e:e4:7a:6a:9b:d0:
ea:f9:05:40:82:77:43:a2:ea:6a:39:1c:17:47:a9:73:e6:3b:
03:b3:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:15 2026 by rpki-client