Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBF1AF1E898C11F1BFB2D4B7CE1D38B0.roa
File: EBF1AF1E898C11F1BFB2D4B7CE1D38B0.roa (raw, json)
Hash identifier: q5m1nG13Hi6eB1h8meaO/lky+KPh1PSmlEVeWYL3ZaU=
Subject key identifier: 87:E7:81:12:AE:58:3C:05:AD:A5:DA:10:3C:D8:37:F0:46:CD:AA:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBF1AF1E898C11F1BFB2D4B7CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:29:37 +0000
ROA not before: Mon 27 Jul 2026 07:29:33 +0000
ROA not after: Mon 31 Aug 2026 07:29:33 +0000
asID: 62240
IP address blocks: 154.194.117.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.63.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121683 (0x1db53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:29:33 2026 GMT
Not After : Aug 31 07:29:33 2026 GMT
Subject: CN=6a6708e1-3420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:0e:d1:e9:22:00:e8:01:26:00:a4:0a:c5:
32:69:b9:ca:76:5c:06:c8:68:00:14:a2:aa:2c:28:
85:2a:0b:38:61:a6:76:61:27:61:16:30:1f:02:c0:
2d:30:46:40:ae:b6:fc:62:c1:75:66:40:ec:62:e5:
d0:13:95:7d:92:50:45:a8:aa:32:3d:ec:fb:5a:88:
5e:b3:df:06:b9:41:ea:85:5c:7d:e3:7c:07:1e:c7:
da:07:ad:0d:7b:3c:a0:cb:7e:3c:9a:f2:20:a4:c2:
2c:e6:27:87:ea:9b:a7:bf:c2:b5:d9:24:99:89:87:
94:c8:da:82:d2:49:0f:d6:8d:a6:5b:d3:33:c0:ab:
73:26:20:12:6a:48:b0:c5:3d:90:ac:88:16:77:6f:
b2:b1:e1:4e:4c:4a:b4:7b:6b:ca:a2:43:a8:91:d6:
0f:6b:b3:0a:a2:f4:5b:2d:9d:a3:a8:b5:a5:e1:6b:
b1:96:e5:c5:8e:c1:87:b3:a2:5f:79:b0:f4:07:c8:
d9:3e:ee:1e:f7:e8:9d:bd:f2:38:cc:35:a5:d5:1c:
a5:b4:49:64:2f:ad:21:d7:1e:f4:cb:70:44:db:62:
8a:5c:ad:4b:48:a4:c3:6c:93:65:be:2a:1f:68:52:
ae:f4:05:f2:cc:14:db:a2:58:2c:df:fc:22:2f:d8:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E7:81:12:AE:58:3C:05:AD:A5:DA:10:3C:D8:37:F0:46:CD:AA:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBF1AF1E898C11F1BFB2D4B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.117.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.196.63.0/24
154.196.65.0-154.196.67.255
154.196.69.0/24
154.196.71.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0e:7e:93:2e:ad:bb:bd:37:8d:c6:a1:f5:24:b3:07:0b:77:
4e:90:2e:33:05:3b:81:66:f2:96:91:6d:8e:d7:ca:d7:81:6a:
ba:c7:17:19:4e:f1:84:ea:7f:04:4c:46:e9:41:80:9e:fc:8b:
d4:bd:09:64:54:df:29:b9:5f:99:98:f4:4e:02:d9:97:42:70:
f4:98:c1:d5:86:6b:26:b4:76:29:17:b2:1f:e8:e2:1a:19:c6:
3d:97:c7:18:c1:57:e6:cb:f0:d3:96:0f:72:0f:44:aa:c7:fc:
31:95:1c:00:3a:26:21:86:7c:bf:e3:c1:35:1c:b9:f5:84:84:
79:50:23:37:37:d9:d9:3f:91:59:1d:a0:ab:a5:ea:49:e5:9e:
91:60:43:f0:b5:41:7c:a9:c6:b8:69:d6:33:ce:23:8a:37:4d:
79:93:0d:c0:03:de:01:ab:54:11:56:6c:15:bd:d0:13:9a:1a:
11:12:29:d1:ce:60:a1:a7:43:9d:3e:15:a9:ff:7d:d4:7d:1c:
5e:14:e0:b8:c6:7d:1f:a4:cf:30:2c:03:49:43:5d:be:6b:1a:
04:77:aa:93:8e:6a:71:4f:2a:13:6e:2e:8e:0f:69:ed:f5:05:
7c:1e:ad:9b:dd:67:18:45:96:65:29:eb:bd:80:dc:d5:e9:6c:
63:a6:9b:b7
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAdtTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI3MDcyOTMzWhcNMjYwODMxMDcyOTMzWjAYMRYw
FAYDVQQDEw02YTY3MDhlMS0zNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqhYO0ekiAOgBJgCkCsUyabnKdlwGyGgAFKKqLCiFKgs4YaZ2YSdhFjAf
AsAtMEZArrb8YsF1ZkDsYuXQE5V9klBFqKoyPez7Wohes98GuUHqhVx943wHHsfa
B60Nezygy348mvIgpMIs5ieH6punv8K12SSZiYeUyNqC0kkP1o2mW9MzwKtzJiAS
akiwxT2QrIgWd2+yseFOTEq0e2vKokOokdYPa7MKovRbLZ2jqLWl4WuxluXFjsGH
s6JfebD0B8jZPu4e9+idvfI4zDWl1RyltElkL60h1x70y3BE22KKXK1LSKTDbJNl
viofaFKu9AXyzBTbolgs3/wiL9hpGwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFIfn
gRKuWDwFraXaEDzYN/BGzaq8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQkYxQUYxRTg5OEMxMUYxQkZCMkQ0QjdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmsJ1AwQAmsNxMAwDBACa
w40DBACaw44DBACaxD8wDAMEAJrEQQMEAprEQAMEAJrERQMEAJrERzANBgkqhkiG
9w0BAQsFAAOCAQEArw5+ky6tu703jcah9SSzBwt3TpAuMwU7gWbylpFtjtfK14Fq
uscXGU7xhOp/BExG6UGAnvyL1L0JZFTfKblfmZj0TgLZl0Jw9JjB1YZrJrR2KRey
H+jiGhnGPZfHGMFX5svw05YPcg9Eqsf8MZUcADomIYZ8v+PBNRy59YSEeVAjNzfZ
2T+RWR2gq6XqSeWekWBD8LVBfKnGuGnWM84jijdNeZMNwAPeAatUEVZsFb3QE5oa
ERIp0c5goadDnT4Vqf991H0cXhTguMZ9H6TPMCwDSUNdvmsaBHeqk45qcU8qE24u
jg9p7fUFfB6tm91nGEWWZSnrvYDc1elsY6abtw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:25 2026 by rpki-client