Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC6953E7AA311F19988E6E2CE1D38B0.roa
File: EFC6953E7AA311F19988E6E2CE1D38B0.roa (raw, json)
Hash identifier: MDZrwuNQin1q+tABJZzQmmJ0KEFtXoIUHugplIHLbv0=
Subject key identifier: 16:3E:64:DE:89:C6:38:72:D9:78:79:3A:4F:82:2D:8A:CA:3D:57:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D786
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC6953E7AA311F19988E6E2CE1D38B0.roa
Signing time: Wed 08 Jul 2026 08:06:35 +0000
ROA not before: Wed 08 Jul 2026 08:06:30 +0000
ROA not after: Sat 15 Aug 2026 08:06:30 +0000
asID: 135377
IP address blocks: 154.81.12.0/24 maxlen: 24
154.81.13.0/24 maxlen: 24
154.81.14.0/24 maxlen: 24
154.81.15.0/24 maxlen: 24
154.82.21.0/24 maxlen: 24
154.83.196.0/24 maxlen: 24
154.83.197.0/24 maxlen: 24
154.83.198.0/24 maxlen: 24
154.83.199.0/24 maxlen: 24
154.85.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120710 (0x1d786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 08:06:30 2026 GMT
Not After : Aug 15 08:06:30 2026 GMT
Subject: CN=6a4e050b-8b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:0e:fa:e3:2a:2b:7d:0c:58:77:f9:ad:bd:
f7:62:0e:1e:80:ec:6d:32:06:eb:4f:8c:f2:b8:27:
b5:98:55:a4:48:51:ab:4c:98:c2:0c:6c:f0:7d:5f:
dc:30:fb:3c:8a:71:33:c7:70:1d:43:dd:2a:de:ec:
a5:37:e2:5c:54:7f:59:43:a3:ab:06:49:3d:4b:5f:
af:92:71:13:ea:33:3d:58:e1:87:72:0a:c1:73:31:
e4:3b:cc:44:7b:b9:29:aa:63:02:ff:d3:80:21:99:
38:c3:61:3a:72:a1:55:a5:f0:32:22:f4:ba:4c:6a:
40:ae:f9:83:23:d3:fd:ee:af:44:ef:b7:d5:75:55:
b3:aa:f6:dc:73:fc:25:2b:ad:9b:2e:16:72:9a:e0:
59:71:62:60:aa:21:f5:7e:86:7d:79:4f:27:f1:50:
13:6d:f5:c3:b1:37:17:92:eb:51:b6:bb:aa:0f:3f:
46:5b:59:b5:20:c5:77:be:e3:46:4b:9b:d6:89:5b:
41:b8:18:32:fe:09:5c:aa:d4:d3:cd:a5:2c:cb:7e:
c2:5d:c4:ce:47:dc:6d:ea:c9:bc:26:c6:04:e0:70:
90:76:5a:b1:da:c4:c5:eb:94:45:13:78:69:ed:f9:
7d:e7:3d:03:a8:73:80:68:25:bd:1d:00:f8:a6:bd:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:64:DE:89:C6:38:72:D9:78:79:3A:4F:82:2D:8A:CA:3D:57:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC6953E7AA311F19988E6E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.12.0/22
154.82.21.0/24
154.83.196.0/22
154.85.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:01:8c:45:f4:0a:1f:5d:fa:84:b8:b2:60:ec:dd:7f:a5:ca:
a2:8e:43:d7:a5:33:3d:f5:c9:81:6c:83:fe:4f:23:3d:e0:31:
f6:1b:ac:86:db:b1:ce:ee:e2:5a:5b:3f:d2:67:c2:c0:8e:35:
0c:e2:2e:ee:83:84:2f:96:84:2c:39:af:5d:93:ea:05:4a:5a:
1c:a7:c3:cc:fc:6b:48:df:b7:86:ae:a7:19:0c:3f:93:98:18:
06:1c:27:bd:0f:c9:8c:11:15:50:b7:bc:13:9a:52:53:ce:6d:
5b:33:b9:a5:8e:6d:74:90:e0:f3:80:27:18:17:e4:8e:81:c4:
eb:f8:3d:9a:e9:04:c9:76:17:0a:63:85:c4:21:bd:ac:9e:56:
df:f9:3d:95:3a:0d:96:a9:18:bf:a2:72:0a:cf:38:5d:65:47:
42:f7:a6:25:a5:e2:bf:12:d4:75:12:a5:16:72:99:c0:70:7b:
0d:59:31:06:26:08:94:5f:d3:f3:08:ea:29:d5:3c:e4:4a:6f:
cf:9f:aa:16:63:6e:8a:a4:3b:b3:df:ec:a9:a6:7d:e1:19:86:
2d:39:b6:2b:26:82:86:98:d5:18:c1:21:17:a6:7f:86:f1:6c:
99:ca:f3:ce:b9:c0:3c:b2:7b:6f:63:f6:18:2f:6b:87:af:5c:
8a:71:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:47 2026 by rpki-client