Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0F79332122011F1A0516F82DAE4EC9C.roa
File: E0F79332122011F1A0516F82DAE4EC9C.roa (raw, json)
Hash identifier: FOebjOkGLcqmZMrEDVqzABY6WCTU8AYn9xFw/CawfkA=
Subject key identifier: 96:80:01:BD:0F:09:92:A0:EE:3C:3F:9A:AF:AE:BB:69:8C:C5:8C:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0F79332122011F1A0516F82DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 08:06:25 +0000
ROA not before: Wed 25 Feb 2026 08:06:21 +0000
ROA not after: Wed 01 Apr 2026 08:06:21 +0000
asID: 984
IP address blocks: 154.193.62.0/24 maxlen: 24
154.193.85.0/24 maxlen: 24
154.196.133.0/24 maxlen: 24
154.196.161.0/24 maxlen: 24
154.200.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113551 (0x1bb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 08:06:21 2026 GMT
Not After : Apr 1 08:06:21 2026 GMT
Subject: CN=699ead81-0fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:32:1a:a2:be:b2:36:21:3a:79:95:8c:80:
20:3f:4a:f7:cf:bd:ad:b6:33:51:bf:8e:2c:3b:94:
09:08:fb:7e:fa:da:1b:1d:36:5f:20:ac:9b:a0:ca:
6a:f8:c5:94:18:d0:ab:8f:2b:b4:a1:84:b2:6f:7f:
20:9b:e4:03:b2:4f:46:f6:78:d5:d5:79:7b:84:7f:
2e:cb:e7:40:ec:87:d1:83:8d:80:79:93:9a:d2:99:
d2:80:02:29:ba:64:81:09:97:76:4c:81:ce:d0:57:
a5:6c:75:b3:1d:6a:62:d7:75:d4:43:9c:56:5b:a0:
1d:22:98:34:e2:0c:40:ea:97:1a:55:bc:97:ff:87:
68:0c:ea:7d:26:d6:e7:3c:9c:b8:4e:94:5a:92:fb:
43:55:0a:0a:3c:7f:21:99:8d:b5:1c:68:40:97:37:
07:42:69:ae:54:b8:4f:04:77:5d:c2:0b:68:0b:bf:
14:cb:98:06:6f:db:26:fa:6b:7a:b4:cb:f3:65:0d:
46:06:1e:fe:51:73:6f:88:57:12:e4:98:23:3d:ec:
73:4d:8f:98:1f:a3:d6:9e:dd:2e:76:fe:84:c7:97:
b2:b9:c8:6a:ad:5d:40:65:a3:66:58:d6:c6:80:99:
0d:7a:2a:3c:16:53:05:8f:e8:d5:c0:c5:e1:4b:3e:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:01:BD:0F:09:92:A0:EE:3C:3F:9A:AF:AE:BB:69:8C:C5:8C:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0F79332122011F1A0516F82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.62.0/24
154.193.85.0/24
154.196.133.0/24
154.196.161.0/24
154.200.155.0/24
Signature Algorithm: sha256WithRSAEncryption
82:55:31:af:40:04:54:1e:95:3f:f7:a3:64:2f:db:87:46:7e:
08:88:49:a5:17:da:0a:39:e7:27:1a:93:22:b0:24:47:32:d6:
27:35:41:60:50:6a:30:5e:29:37:26:a5:82:f6:05:b7:bd:c3:
be:bf:53:1b:ba:7f:f4:71:0c:3e:d0:86:b6:c5:0f:d7:56:57:
02:56:63:92:ce:b6:0c:c5:e1:83:56:df:8f:58:d9:30:df:66:
49:c5:ba:b7:57:df:17:c1:1b:96:9a:b7:86:c5:76:d0:f7:ba:
6f:cf:1b:25:c7:2c:66:e7:5f:47:8b:0c:06:09:d3:48:7d:72:
6c:f9:58:0d:87:03:11:18:80:fd:6a:a7:86:6b:53:1f:b8:2f:
e9:cc:fe:7c:6b:8e:91:dc:26:50:66:7d:b5:07:d6:a6:2c:6f:
73:16:8e:cd:06:dc:7d:60:f5:e8:73:dd:80:82:95:8c:72:86:
7a:b1:e7:83:72:38:8b:d1:a3:3e:78:8d:b3:30:b0:bf:10:59:
b6:7a:6d:b3:00:39:35:b6:30:a7:99:2c:ca:7b:ff:2f:9b:7f:
11:1a:90:ee:5b:9d:30:4e:6c:0f:bd:ff:ff:6e:5c:8d:ab:76:
0e:11:14:76:26:eb:a1:3a:6a:e6:28:06:9b:e9:a8:9f:f7:29:
ee:e8:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:42 2026 by rpki-client