Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF693CD0116311F1933715F2DAE4EC9C.roa
File: EF693CD0116311F1933715F2DAE4EC9C.roa (raw, json)
Hash identifier: JtUMpXfomVtgbcIV3IZ6vZizzfoQdQr2P688z/HK1WE=
Subject key identifier: 82:C1:DE:DB:2C:0C:E9:A0:E7:C5:AE:73:0B:52:CB:83:25:C3:6A:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF693CD0116311F1933715F2DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 09:33:54 +0000
ROA not before: Tue 24 Feb 2026 09:33:50 +0000
ROA not after: Tue 31 Mar 2026 09:33:50 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.194.119.0/24 maxlen: 24
154.194.120.0/24 maxlen: 24
154.194.121.0/24 maxlen: 24
154.194.122.0/24 maxlen: 24
154.194.123.0/24 maxlen: 24
154.194.124.0/24 maxlen: 24
154.194.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113464 (0x1bb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 09:33:50 2026 GMT
Not After : Mar 31 09:33:50 2026 GMT
Subject: CN=699d7082-9cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:92:0b:54:2d:45:c5:71:37:65:ef:63:9c:
bd:b9:62:03:8b:cc:26:75:5e:8c:02:28:05:c6:0c:
f2:3b:f8:0a:12:31:66:28:c4:67:89:d7:9b:e9:d1:
be:d5:69:c8:99:bc:fd:d9:35:f2:fe:cc:25:61:5b:
b5:c8:9a:44:56:43:33:f8:1e:2b:93:d6:0b:24:35:
37:58:73:8c:43:fa:e0:7f:2f:ae:10:c3:0b:3c:c5:
8f:4d:6a:b5:1c:d5:51:75:f8:12:13:a5:15:a1:97:
46:98:7c:6b:c1:8e:e2:3d:1d:14:50:c9:0c:85:b8:
e5:e0:87:a5:3c:45:01:11:fb:13:3c:85:1b:7e:45:
39:32:75:73:5a:32:64:b7:db:4d:5a:85:d8:4c:31:
2f:f1:59:b4:fd:3d:e5:77:5c:bf:94:de:83:9b:83:
85:1d:34:8b:58:b5:5c:4a:7a:2b:5d:8f:86:50:0b:
8a:45:35:39:e4:24:e7:e8:30:54:d6:b2:df:b1:4d:
53:b3:4f:ad:65:64:89:57:52:32:aa:3b:f8:c5:e3:
1d:f9:b9:b6:26:f3:69:65:92:de:e6:bc:45:8e:42:
cf:67:eb:26:0b:fa:bd:ec:de:42:cc:2f:b1:08:3e:
ab:34:12:28:42:a8:6c:b5:f9:df:36:10:c6:db:dc:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C1:DE:DB:2C:0C:E9:A0:E7:C5:AE:73:0B:52:CB:83:25:C3:6A:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF693CD0116311F1933715F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.194.119.0-154.194.125.255
Signature Algorithm: sha256WithRSAEncryption
2d:f7:27:81:cc:32:19:07:8c:25:44:c7:64:5b:4b:9d:1f:45:
7d:73:25:0e:32:30:e4:aa:89:9d:41:4e:78:fd:c2:d9:d0:3f:
f2:f9:0d:9c:d7:c1:b4:b9:dd:76:91:91:44:33:6e:b9:8c:a1:
fb:87:47:14:37:b5:5d:56:fc:cd:c1:58:7a:40:c8:2d:c4:71:
51:07:a8:4e:71:cc:68:7b:b8:ca:bd:f9:41:9e:61:67:59:72:
b2:b4:70:8f:cd:48:c1:e3:48:1a:1f:ef:5a:b3:b1:53:41:2c:
65:39:95:52:c0:30:c9:79:a6:43:8d:d0:45:e3:7b:e2:3e:7e:
a7:a4:bb:f1:54:74:66:3f:23:11:26:91:2a:11:85:bb:6d:76:
2d:8f:ff:71:9d:36:f0:fc:d8:12:ed:4f:d0:60:54:5f:24:59:
e6:bd:00:5a:54:33:5f:9e:06:5d:5a:23:2d:aa:55:20:00:9a:
46:18:4e:87:73:e7:d0:38:f7:ea:87:3b:d7:74:00:b1:10:87:
1b:b9:c2:d8:56:e6:47:d7:79:5a:4d:b5:2b:35:8a:b7:a9:9b:
14:e1:65:77:74:a6:8d:f1:20:fa:d0:6c:3c:23:a5:27:63:27:
a8:2c:de:57:4d:2c:83:64:51:c5:bf:76:5f:92:fe:47:52:06:
eb:10:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:46 2026 by rpki-client