Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF290BAA312111F1B74A3AEFDAE4EC9C.roa
File: EF290BAA312111F1B74A3AEFDAE4EC9C.roa (raw, json)
Hash identifier: vJT3XJmQHDYp1UYbok9q674JWYrmYF64gPZ4iAFhWHI=
Subject key identifier: CF:3F:35:16:6B:C1:F8:EE:51:8D:44:F0:71:DD:54:1E:75:95:F5:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C349
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF290BAA312111F1B74A3AEFDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 19:02:04 +0000
ROA not before: Sun 05 Apr 2026 19:02:00 +0000
ROA not after: Sun 10 May 2026 19:02:00 +0000
asID: 215691
IP address blocks: 154.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115529 (0x1c349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 19:02:00 2026 GMT
Not After : May 10 19:02:00 2026 GMT
Subject: CN=69d2b1ac-e2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:60:8c:21:4e:7b:4c:da:0d:02:02:02:18:35:
5a:51:26:3e:dd:39:32:3b:20:fb:85:5a:af:b9:ad:
01:84:63:04:be:b1:4e:3d:15:d2:d1:d6:f5:bf:b8:
c5:c2:3c:62:cc:62:19:81:5c:b9:d7:d3:cf:ee:71:
38:5e:72:a1:97:26:f5:b1:f8:b0:18:1d:04:f5:98:
6f:5a:73:70:5c:a3:e3:14:8c:e6:b8:59:b3:de:13:
38:59:5d:4d:fd:3e:1c:d2:3e:b1:80:3c:e5:1f:97:
07:92:7f:d7:0e:59:4d:f5:23:ae:82:49:86:e1:23:
87:a8:4c:dc:55:98:9b:2a:f4:14:08:3b:c5:f2:0d:
27:d6:78:6e:28:70:ca:73:cd:1f:29:ea:f6:7a:e5:
9b:81:2b:fd:d1:89:58:91:28:aa:b9:01:b7:78:e3:
0f:37:57:82:c4:5d:7e:a2:74:74:d4:ce:17:a6:c0:
2a:e1:a0:c9:be:e6:d7:c7:1c:2b:41:78:20:d7:f1:
aa:89:e7:1d:d0:59:6f:c0:c4:8f:60:30:ab:9a:43:
0d:d5:62:55:a2:49:ed:70:76:3d:c1:fb:da:2f:47:
3b:d7:da:bc:07:ce:de:3f:ec:97:bc:62:dc:13:1c:
ed:c4:03:3f:d3:7d:e0:5e:da:b9:99:4b:e3:20:91:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:35:16:6B:C1:F8:EE:51:8D:44:F0:71:DD:54:1E:75:95:F5:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF290BAA312111F1B74A3AEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:02:24:44:13:d7:58:e3:8a:9e:d7:30:a2:11:c4:c5:b3:e2:
ed:72:85:74:d1:0f:b1:32:b8:8a:4b:1a:c7:69:f1:b3:80:19:
62:a3:6f:e5:2c:e5:42:34:92:76:4e:9b:a0:3d:47:3c:da:4d:
db:c0:5b:ed:66:09:ba:d5:b2:b7:ec:33:16:73:db:f2:87:d7:
3e:9c:e5:4b:59:fd:34:4c:cc:e2:2e:4d:09:c5:63:43:27:d6:
9d:7f:99:da:99:fd:21:cd:e6:3e:50:fe:24:20:b9:b7:9d:63:
be:d9:b7:b3:ae:30:3b:87:f7:03:60:e1:68:a0:42:00:df:96:
d2:65:d2:52:2d:24:94:d0:e2:d8:d9:4e:1d:b7:f3:3e:66:02:
1a:41:bd:ea:44:ab:03:b5:0c:b5:60:3e:1c:3b:1c:38:69:64:
de:ba:1a:72:b4:aa:b1:ac:c6:9b:b7:bd:59:9d:e4:7e:b9:d4:
f1:68:e6:03:ac:53:2d:23:71:cc:39:75:93:bc:d0:35:97:80:
3b:6e:68:a0:cc:3e:a6:70:f1:98:ac:8b:39:61:5e:cf:2c:83:
ff:b4:a7:9b:01:b0:f6:48:ae:91:ac:aa:f6:8e:f8:f8:79:97:
a8:83:c0:da:d8:8c:6a:b9:66:f9:f3:be:b1:05:04:bb:e0:39:
75:ac:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:22 2026 by rpki-client