Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6631441E4B11F18EEDFFE4DAE4EC9C.roa
File: EF6631441E4B11F18EEDFFE4DAE4EC9C.roa (raw, json)
Hash identifier: 2GXANuxpWMof3rGMia+fLz/F5jRIFBSOLfN4ddG1H0E=
Subject key identifier: 60:66:F0:F5:32:93:5C:28:BA:17:C1:A7:93:1F:67:4B:61:69:B3:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6631441E4B11F18EEDFFE4DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 19:44:52 +0000
ROA not before: Thu 12 Mar 2026 19:44:46 +0000
ROA not after: Thu 16 Apr 2026 19:44:46 +0000
asID: 22773
IP address blocks: 154.82.12.0/24 maxlen: 24
154.82.13.0/24 maxlen: 24
154.82.14.0/24 maxlen: 24
154.82.15.0/24 maxlen: 24
154.85.12.0/24 maxlen: 24
154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114472 (0x1bf28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 19:44:46 2026 GMT
Not After : Apr 16 19:44:46 2026 GMT
Subject: CN=69b317b4-0c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:6b:c7:0c:aa:20:09:e8:3a:5a:d6:be:7d:
17:6b:19:7d:f1:11:7c:ca:fb:e3:e5:61:01:1b:9d:
95:44:20:51:12:76:10:b2:b0:eb:0a:cd:9c:88:e8:
94:a1:bc:a7:70:07:b1:2e:36:9b:02:39:33:22:ed:
c3:32:f8:95:f0:3e:49:38:83:c5:d6:cc:2a:11:13:
99:91:28:15:62:fd:4c:e3:26:0b:c9:f4:27:f8:dc:
80:26:38:e3:6f:27:7d:8b:1f:01:79:7d:6e:ba:8b:
c2:9e:47:dd:cf:30:94:64:30:7e:d7:ed:ff:a1:29:
fd:c3:ff:09:c4:98:cc:c3:d1:22:3d:62:64:52:9c:
3f:77:87:ff:18:31:6a:4e:a0:ef:69:54:39:97:36:
c4:4c:92:0a:af:96:2c:90:ab:41:1b:03:04:6a:95:
4a:92:19:10:9e:bc:e7:52:9f:c9:39:b0:19:27:80:
75:61:26:3a:22:9b:88:ec:61:7a:7e:98:28:0d:b3:
28:23:f0:dd:42:1d:84:2e:8a:08:b6:09:ce:30:0a:
c4:1a:96:26:68:9f:7d:9a:75:2c:ef:87:32:fa:56:
49:8b:52:d1:b6:fe:c9:38:19:4b:2f:97:ed:63:fa:
12:f0:21:a4:e5:02:fe:36:67:33:e7:84:52:9b:a1:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:F0:F5:32:93:5C:28:BA:17:C1:A7:93:1F:67:4B:61:69:B3:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6631441E4B11F18EEDFFE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.12.0/22
154.85.12.0/24
154.85.22.0/23
154.85.104.0-154.85.106.255
Signature Algorithm: sha256WithRSAEncryption
7d:e1:db:03:f9:a2:71:44:af:cf:f5:e7:5d:5d:aa:62:0e:a7:
52:9f:a0:af:ca:6c:95:95:44:b4:53:3e:06:eb:6d:28:ed:05:
8f:68:05:80:40:2d:b4:9f:c5:7b:f2:c3:2e:28:d9:2f:6d:d7:
57:e6:43:26:af:63:80:ad:40:c1:fc:0d:1d:39:9c:5c:f4:00:
10:52:c9:c8:ed:60:ad:7d:ce:9b:61:50:93:cf:4d:27:29:0b:
b6:3a:12:06:10:71:16:06:55:02:c5:ff:37:9f:8e:0f:63:fc:
6d:de:ad:36:5e:7a:1e:54:9d:12:d9:30:7b:d1:b5:3b:87:47:
ca:23:96:57:f7:3a:88:08:f2:d8:f1:b8:94:0e:5b:29:e6:62:
f0:1d:e3:26:6a:f4:86:6b:63:8f:f4:0f:13:56:6e:7a:aa:79:
2b:24:fd:f7:ec:20:25:c1:97:95:12:37:e3:e9:36:22:9c:4f:
58:8c:bd:0d:a8:63:c9:d8:33:68:19:1f:a2:56:4a:5f:26:86:
a1:39:22:27:69:5f:9f:7a:42:20:8f:de:a0:f0:3c:d0:1b:93:
af:bb:73:67:44:ab:50:4c:76:2f:26:63:5f:52:48:b6:50:5d:
be:ca:6f:16:f6:9b:85:7d:92:52:2d:21:3c:92:8b:7f:14:17:
84:64:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:36 2026 by rpki-client