Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF8D125C80F011F1A9E40BBBCE1D38B0.roa
File: EF8D125C80F011F1A9E40BBBCE1D38B0.roa (raw, json)
Hash identifier: 6jfRdWrmfrCgexQig+acTW4G5dwfTwU6UeYE+zDVNWw=
Subject key identifier: F6:74:E8:5E:ED:7F:1F:D2:7A:43:59:EC:2D:DE:EF:91:43:0D:0C:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D91A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF8D125C80F011F1A9E40BBBCE1D38B0.roa
Signing time: Thu 16 Jul 2026 08:32:53 +0000
ROA not before: Thu 16 Jul 2026 08:32:49 +0000
ROA not after: Sun 26 Jul 2026 08:32:49 +0000
asID: 152179
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121114 (0x1d91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 08:32:49 2026 GMT
Not After : Jul 26 08:32:49 2026 GMT
Subject: CN=6a589735-fcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:6d:5d:f0:3e:c3:93:9a:e4:b0:ac:1d:2a:
0f:c0:7e:1e:9c:bd:e1:89:77:29:66:47:d3:fa:d2:
04:8b:55:3f:44:84:53:f0:8f:21:13:2b:2d:fd:ca:
00:de:89:11:13:d3:72:18:a9:af:4b:c8:4c:c0:7f:
8d:86:87:27:c4:89:5f:87:0d:db:2d:c8:47:73:dd:
dc:34:52:53:ec:74:c8:47:ba:73:35:54:9a:f9:c0:
31:52:25:37:54:1e:2b:ae:91:1c:46:d6:7d:dc:b2:
98:af:59:ae:cb:47:52:38:1f:64:8f:a7:b5:7c:28:
07:f4:b0:32:c1:a8:bf:d0:fe:58:a1:d4:2c:e2:d9:
86:1e:16:69:60:aa:25:79:d1:82:f6:6c:30:4d:0f:
51:e1:cc:8a:73:d3:25:a1:17:90:21:d6:24:7b:89:
92:ce:47:64:b8:57:cd:ec:32:f7:3b:68:fb:a1:f2:
82:bc:9d:04:f7:e6:d9:c1:58:ec:49:7a:51:0a:55:
21:99:25:72:c8:ca:19:66:3c:82:14:99:bf:c7:c7:
96:39:07:24:bd:f4:d0:50:21:56:a0:cd:ac:2f:36:
4c:a5:f2:6f:84:62:77:42:f8:bb:5b:35:62:3f:03:
5d:37:39:69:f6:4a:e6:55:ac:b0:54:01:62:93:7c:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:E8:5E:ED:7F:1F:D2:7A:43:59:EC:2D:DE:EF:91:43:0D:0C:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF8D125C80F011F1A9E40BBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
75:45:a3:da:37:87:f8:49:1b:8d:b5:6b:cd:2b:b8:97:55:82:
d9:8f:fe:63:d5:d7:e8:a0:39:94:0e:c4:76:50:85:8a:95:ed:
bf:27:38:22:9a:61:bc:94:81:9b:37:20:dc:f8:4e:95:55:f4:
8b:00:16:44:80:fa:91:64:ad:9e:68:ab:7c:78:a1:ad:60:e7:
b1:8b:3e:93:20:dd:69:13:5f:b1:39:ea:c4:11:f6:74:d1:96:
a3:08:d5:bc:4a:08:1f:4a:93:92:ce:76:20:18:62:54:cf:60:
2d:bf:cc:77:28:60:8e:64:6c:e7:79:2f:d4:aa:c7:e0:09:4c:
f1:e0:dd:a0:8f:a8:0b:c1:4e:0a:0a:b4:34:88:11:1d:88:9b:
7a:a2:f4:9a:b9:ab:52:42:9e:7f:9c:e7:4b:38:7e:f4:74:f3:
b5:39:04:80:29:b9:be:c0:25:27:08:b0:75:43:a1:d4:ed:50:
55:b9:76:9c:2a:63:2c:61:ab:ac:ad:81:0a:95:1f:13:70:95:
2d:ab:7e:07:60:fd:67:ac:9c:06:b7:e0:13:f7:ca:b8:5b:33:
3b:07:4b:9f:8b:68:5d:bb:2d:c4:7c:8d:f5:ed:8f:9e:2a:e7:
7d:c7:0f:fc:a0:6e:3d:85:1b:15:3e:5c:2f:95:b8:aa:69:82:
6d:df:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:57 2026 by rpki-client