Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBF87C81BA111F19A46C9DDDAE4EC9C.roa
File: EFBF87C81BA111F19A46C9DDDAE4EC9C.roa (raw, json)
Hash identifier: FpZJLJNrh5QQGQafJgFliLzAI4dGmhsEeBsKdJP3QQ8=
Subject key identifier: DC:69:3F:AE:FC:D6:D1:C8:02:C9:8E:E0:4F:80:C8:74:25:F4:6E:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBF87C81BA111F19A46C9DDDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 10:22:55 +0000
ROA not before: Mon 09 Mar 2026 10:22:50 +0000
ROA not after: Wed 25 Mar 2026 10:22:50 +0000
asID: 139613
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114314 (0x1be8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 10:22:50 2026 GMT
Not After : Mar 25 10:22:50 2026 GMT
Subject: CN=69ae9f7f-8135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:35:a0:1c:83:4e:66:9b:9f:76:97:78:bf:
91:80:82:93:39:4c:39:3c:a2:06:e3:c2:77:08:84:
1e:db:f4:e1:1a:bc:6d:a0:9e:7e:12:f6:b9:0e:b5:
49:0c:9f:2a:73:b6:01:74:6e:fb:33:52:f5:eb:9e:
b9:36:29:ea:53:5e:f1:aa:29:59:7c:e9:a0:59:18:
df:08:2c:09:82:d6:ff:c6:9c:89:61:ff:ad:38:f4:
0e:4f:2a:98:51:d2:d9:94:35:08:14:e7:1f:b3:21:
fa:88:28:c1:a8:48:c0:39:17:c9:d0:2d:14:cd:e7:
76:9c:6a:3a:73:a1:b5:02:16:4a:6c:43:3b:3d:fc:
72:d2:fd:12:93:0a:41:71:22:06:cb:d6:7a:fe:e8:
af:6b:99:01:55:fa:42:c3:bf:82:a3:f3:6d:7f:e6:
a3:47:fd:e3:f8:7b:f0:71:ed:86:35:95:f4:b6:00:
3d:01:06:ef:04:fc:7c:7c:26:b9:4f:c2:37:5e:0b:
2e:30:aa:d6:0a:48:54:04:e8:27:78:d7:68:57:d8:
15:05:8f:e9:23:93:89:24:9d:18:b5:69:b0:25:eb:
d9:0a:e6:ec:1e:7b:16:be:eb:c9:d9:43:16:aa:2c:
d5:5e:8b:7c:a7:a3:50:12:2f:eb:78:31:23:29:62:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:3F:AE:FC:D6:D1:C8:02:C9:8E:E0:4F:80:C8:74:25:F4:6E:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBF87C81BA111F19A46C9DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
60:61:72:36:e4:cf:03:1b:3e:f2:26:56:ec:60:67:4c:ac:92:
05:6f:8c:5e:8d:72:6b:03:60:e9:e9:03:0b:cd:26:5d:90:5c:
cd:7f:11:6d:5f:89:8b:3c:cd:e6:92:61:d9:da:49:4e:6f:d7:
6d:26:1a:42:ab:1b:76:ef:57:d5:69:f7:d4:2e:7a:a8:c6:ab:
34:37:f0:ae:03:d5:08:a3:9f:b4:18:36:a4:82:21:91:42:78:
05:a6:34:ae:8a:d5:f4:54:a3:5c:90:e9:4f:d4:47:55:f0:6b:
0e:99:76:7c:58:41:f6:56:b3:d8:c5:8f:74:6c:65:79:97:15:
1f:7e:4d:91:65:24:e5:52:3c:76:9b:f4:42:7c:1a:87:31:61:
38:5f:71:06:9b:f6:a9:15:4b:c4:10:20:f4:aa:d5:d4:8d:8d:
eb:01:af:fe:28:be:11:57:46:07:11:f3:74:d6:ba:be:0f:47:
82:92:fe:37:ea:29:8f:b6:90:c6:94:e0:71:5d:e7:9b:bb:08:
2d:33:ce:f2:28:bd:bc:78:c4:d2:3a:95:0d:25:ca:e4:4b:27:
6f:ad:9d:2a:ac:38:78:0b:bd:af:15:0f:78:4a:60:5b:9e:df:
61:3c:34:2a:48:fd:63:2a:a3:0e:36:c5:c8:c0:ff:ee:1e:a5:
88:bc:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 14:04:32 2026 by rpki-client