Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB307F9A135A11F19D3EC2F4DAE4EC9C.roa
File: EB307F9A135A11F19D3EC2F4DAE4EC9C.roa (raw, json)
Hash identifier: SwM4szy3zqXaOwNr/aAw9M2uu0ommBy9ZmBAuUCOKbo=
Subject key identifier: B7:78:33:DE:C1:91:96:07:75:66:3C:01:78:49:92:1B:07:BB:FC:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB307F9A135A11F19D3EC2F4DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 21:34:24 +0000
ROA not before: Thu 26 Feb 2026 21:34:20 +0000
ROA not after: Mon 30 Mar 2026 21:34:20 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113697 (0x1bc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 21:34:20 2026 GMT
Not After : Mar 30 21:34:20 2026 GMT
Subject: CN=69a0bc60-22e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:6e:29:41:a7:78:fb:7e:44:c1:84:18:e5:
58:3e:d3:29:84:1d:5c:8d:c4:1a:8f:9a:26:c4:e5:
7d:20:a3:1c:92:ee:65:fa:be:23:67:1e:86:96:51:
3e:9b:98:4e:cf:25:b6:7b:63:2b:e2:10:f9:09:6d:
aa:5a:b9:49:bd:99:5c:86:69:85:3e:cb:5d:4a:2b:
1a:76:29:d4:e6:2a:54:9f:b0:b9:75:fb:97:1b:76:
b1:e0:fc:c4:7c:01:a4:53:68:9a:6e:64:d8:38:d2:
a8:b8:44:3b:05:f5:e4:74:e6:22:ec:3d:4a:54:b4:
36:a3:46:b0:b2:bb:90:2f:e6:e0:7a:71:e6:9c:ec:
8b:33:a9:f5:49:9a:15:f8:dd:c4:be:78:84:8c:1e:
25:2c:73:45:6b:87:72:81:cf:5a:50:29:2c:9f:c3:
4b:bc:0c:cd:5a:f8:9c:86:67:e4:75:b3:c9:7c:89:
c2:ed:0c:30:50:09:e9:8b:c2:83:d9:55:ad:36:1f:
1a:a3:cf:a3:34:c6:ba:16:15:12:f2:57:39:3f:95:
e5:cb:82:78:44:9e:e6:67:aa:fb:e2:8a:6b:b4:d5:
3d:e9:1e:76:01:4c:8d:bd:49:1e:d8:dc:36:91:7f:
e9:ef:f0:89:83:22:6a:37:52:d6:09:21:7e:22:18:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:33:DE:C1:91:96:07:75:66:3C:01:78:49:92:1B:07:BB:FC:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB307F9A135A11F19D3EC2F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.200.130.0/23
154.200.156.0-154.200.162.255
Signature Algorithm: sha256WithRSAEncryption
ad:89:07:3a:26:6d:35:78:96:72:76:8f:61:88:78:d2:08:56:
7b:e8:2e:62:df:d6:50:5f:f1:b3:66:5b:06:26:97:1e:8e:ef:
dc:fe:09:34:1e:e2:9b:07:2e:60:f3:55:6f:9b:d9:29:2e:52:
78:b9:80:9f:d2:84:8e:4b:09:e3:cf:c7:a3:ab:09:b9:b0:b3:
99:cf:fb:3a:b5:83:70:64:f5:bb:04:ed:3d:18:47:1b:78:8e:
e9:a5:94:3d:91:bb:f2:ad:d9:2f:ed:5e:9a:ae:ff:13:27:fe:
cb:f4:07:cd:87:75:ea:6d:d0:ed:e6:32:28:d2:bb:e4:08:1e:
f5:b7:cb:e5:50:66:e9:35:c9:f4:c0:03:74:99:12:62:87:52:
37:54:a7:85:47:e2:47:a3:93:2e:ba:21:5b:0f:3a:53:3f:2c:
61:82:61:9d:95:e7:9f:f3:d0:52:23:ec:f6:a2:5f:b9:5f:0e:
dd:5c:0c:e0:cd:86:98:d8:99:fc:25:7e:b3:74:e4:57:b4:c1:
77:7d:11:51:e9:f1:54:87:51:a1:8d:3c:eb:66:51:a8:13:7f:
ac:e7:dc:69:c3:66:fb:90:b4:6e:fb:32:1a:43:b3:5b:10:26:
94:bc:a1:0c:a2:b2:21:d1:04:ed:43:8c:5f:a9:51:aa:96:ba:
9d:b8:4e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:19 2026 by rpki-client