Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE7DA1ECFE8211F0B5191AEEDAE4EC9C.roa
File: EE7DA1ECFE8211F0B5191AEEDAE4EC9C.roa (raw, json)
Hash identifier: Nuz5zV3S9Soh+LLh0SaH5Gey6hfPiVr6ZTAB6wH9q50=
Subject key identifier: 79:21:C0:A8:32:0C:D5:21:00:7F:00:D4:7B:2D:21:38:AC:14:40:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE7DA1ECFE8211F0B5191AEEDAE4EC9C.roa
Signing time: Sat 31 Jan 2026 08:57:55 +0000
ROA not before: Sat 31 Jan 2026 08:57:51 +0000
ROA not after: Sun 08 Mar 2026 08:57:51 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112590 (0x1b7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 08:57:51 2026 GMT
Not After : Mar 8 08:57:51 2026 GMT
Subject: CN=697dc413-c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:81:b8:be:80:f4:ec:de:5f:4a:b1:fe:33:
6a:c4:ff:62:15:b2:15:ac:aa:82:de:ed:49:c7:c5:
75:ce:9f:d4:b1:f2:93:91:0a:94:57:73:d1:15:e5:
45:15:be:c5:b7:1a:ae:ba:2b:d7:7c:f5:ef:a3:6b:
87:34:c0:c5:4f:6e:83:6b:14:11:58:20:dd:e2:37:
72:5e:2b:52:b1:19:39:dc:48:08:45:9c:17:2e:0c:
58:fd:7e:d5:ca:ee:03:d8:a9:e6:af:3e:b8:3c:e6:
94:c0:8f:7d:c5:56:98:a2:17:d0:b3:81:39:61:58:
45:8f:52:00:33:57:a7:cf:98:f2:36:25:56:2e:2b:
d5:15:b4:b7:56:5a:14:52:4a:e3:cb:72:87:0d:31:
cc:6f:c3:f1:57:f7:68:a8:9f:4a:2a:4b:cd:77:d2:
58:b3:d7:1b:0b:48:9c:a7:3f:56:86:01:d1:ac:83:
6f:11:b3:e9:a7:ad:61:7e:88:c9:86:3f:d4:20:0d:
58:09:39:67:67:dc:42:ac:d5:5f:39:75:7d:1e:b7:
cf:b6:e5:b8:6a:a0:aa:ae:b8:f9:85:19:d1:6b:e3:
57:f2:5a:c5:2d:38:78:c0:95:c7:ac:7b:d2:64:4e:
72:50:97:fa:85:f1:e5:05:fa:d7:2d:6d:b7:0f:03:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:21:C0:A8:32:0C:D5:21:00:7F:00:D4:7B:2D:21:38:AC:14:40:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE7DA1ECFE8211F0B5191AEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.218.31.0/24
154.219.237.0-154.219.243.255
Signature Algorithm: sha256WithRSAEncryption
b1:e1:6f:85:c3:48:4c:8e:df:81:f3:d9:6b:ff:ff:58:de:2f:
03:be:ad:04:91:66:48:38:38:88:21:7e:e0:16:a2:72:a1:ed:
6e:71:27:56:dc:e6:6c:d5:9f:f3:42:99:c0:a7:d6:c7:b0:41:
c2:c3:e4:bb:ff:a5:b5:78:68:09:23:f0:41:73:94:ca:5e:2a:
4f:d2:e2:fb:85:09:ef:9f:92:ef:b6:18:b6:ce:bc:67:41:4c:
e8:3a:5b:51:5a:03:16:ef:8a:22:60:16:6a:eb:64:49:f4:6d:
ea:c0:b7:90:03:22:1c:38:49:f0:17:cd:73:4b:c5:64:f3:c4:
38:61:14:45:62:ca:39:0e:86:a1:18:e6:3b:08:3b:0b:00:41:
bc:d1:c1:84:b3:60:1e:bf:19:12:54:50:41:06:ff:a4:0f:6b:
44:d0:f9:11:a3:7d:97:a8:b6:fb:9e:33:21:c0:d5:6e:2c:67:
73:db:81:92:3f:e3:f1:f4:33:fd:19:72:c3:80:ae:2f:e3:40:
9d:3b:88:da:b0:16:33:b2:a7:ae:b2:1f:64:1f:75:89:01:d1:
0e:0d:77:58:cf:4e:c5:cc:8b:6c:63:83:8f:85:61:48:9b:fa:
b1:35:50:94:9c:64:79:2b:a1:e8:af:16:13:63:96:66:cc:cf:
23:f5:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:58 2026 by rpki-client