Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC50DA6FCE311F094A57D79DAE4EC9C.roa
File: EFC50DA6FCE311F094A57D79DAE4EC9C.roa (raw, json)
Hash identifier: TbS+Wt+6wTK1nNV7Y5jBxeSsMiCjChT3JCVcjW6sVKE=
Subject key identifier: 2C:8C:C7:85:3C:E8:C5:A3:A0:30:88:D2:62:53:86:1F:35:D4:47:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B73C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC50DA6FCE311F094A57D79DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 07:27:16 +0000
ROA not before: Thu 29 Jan 2026 07:27:11 +0000
ROA not after: Mon 02 Mar 2026 07:27:11 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 07:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112444 (0x1b73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 07:27:11 2026 GMT
Not After : Mar 2 07:27:11 2026 GMT
Subject: CN=697b0bd4-c0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:63:67:65:07:d6:5a:c5:56:f8:74:ac:83:
f1:31:04:c8:eb:f8:8d:33:1b:58:e9:44:4f:25:9a:
09:6a:91:78:f7:61:4f:a2:b8:90:69:9e:3a:63:c4:
92:7a:8b:aa:4a:6e:51:0f:d6:f3:de:f1:1f:fd:85:
a6:4c:55:1e:9b:56:5a:69:4b:26:bd:43:11:2e:6d:
e6:80:c6:1d:f1:8a:9c:dc:f9:43:29:04:4a:0d:10:
c1:f4:4b:56:e7:58:78:5f:4a:92:39:4d:a1:5a:60:
45:19:c5:32:2c:33:f6:4e:89:61:ec:14:b7:c7:b4:
65:80:a5:bf:0a:3d:55:7d:b8:c8:df:40:8b:ba:6c:
60:1c:bb:46:e0:fd:48:59:d4:60:1b:49:99:6f:19:
e2:6b:07:62:c6:33:04:b2:78:b3:f0:c2:21:bb:79:
6c:a4:36:11:10:c4:3c:fb:ef:eb:54:ac:bc:fc:90:
3f:46:c8:d6:a0:6b:ba:f9:5c:b6:95:f6:9c:6e:e0:
24:26:bf:27:0e:24:c9:f8:b2:28:f5:aa:3d:88:dc:
23:b4:80:c8:25:d5:4a:44:37:b2:ee:42:98:02:64:
a9:39:5f:e9:4a:2e:51:10:b2:45:2b:30:d1:cf:64:
42:35:be:b5:f5:2e:3a:3c:1d:c5:a4:40:65:b4:d0:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:C7:85:3C:E8:C5:A3:A0:30:88:D2:62:53:86:1F:35:D4:47:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC50DA6FCE311F094A57D79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
cc:23:55:15:6f:87:d1:c2:68:0a:58:44:21:a8:8d:9c:c5:36:
32:2e:48:59:78:6d:8a:15:0a:b4:46:de:f1:bf:87:5a:88:43:
11:81:0e:d0:7e:49:d5:12:74:80:3e:c4:29:61:87:90:2f:8a:
45:99:32:8e:d1:c6:9b:ab:35:3e:cb:99:d5:7d:fe:61:74:8c:
47:47:03:9c:2f:e9:73:dc:ea:bc:44:7c:ca:a9:d2:c2:dc:e9:
2c:1d:e7:ab:c2:84:b3:c9:0c:67:c4:2c:03:bc:bd:8e:45:6c:
a2:ff:1c:84:d0:5b:15:92:4b:86:72:cc:85:d6:e8:d2:d6:f5:
9d:69:7c:0f:9f:72:83:85:47:db:9a:1c:33:6b:e9:95:db:fd:
dd:f4:29:f4:78:24:be:53:8e:04:26:a6:cb:5d:b2:1a:9d:07:
93:87:e4:39:72:12:e4:bb:e9:c9:37:79:7b:e0:17:86:49:75:
38:dd:ce:ce:82:e2:b4:d5:2d:d4:95:e7:d0:35:92:86:75:f2:
25:32:76:d7:67:fc:38:3c:37:53:6e:a3:17:89:67:b3:2b:2f:
1c:20:96:a0:c0:fe:8c:c8:5f:a8:36:51:78:da:c1:e9:a0:91:
81:dd:93:6e:fd:c3:73:61:84:63:95:f5:e2:5d:91:d8:16:0e:
32:9c:81:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbc8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTI5MDcyNzExWhcNMjYwMzAyMDcyNzExWjAYMRYw
FAYDVQQDEw02OTdiMGJkNC1jMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuyFjZ2UH1lrFVvh0rIPxMQTI6/iNMxtY6URPJZoJapF492FPoriQaZ46
Y8SSeouqSm5RD9bz3vEf/YWmTFUem1ZaaUsmvUMRLm3mgMYd8Yqc3PlDKQRKDRDB
9EtW51h4X0qSOU2hWmBFGcUyLDP2Tolh7BS3x7RlgKW/Cj1VfbjI30CLumxgHLtG
4P1IWdRgG0mZbxniawdixjMEsniz8MIhu3lspDYREMQ8++/rVKy8/JA/RsjWoGu6
+Vy2lfacbuAkJr8nDiTJ+LIo9ao9iNwjtIDIJdVKRDey7kKYAmSpOV/pSi5RELJF
KzDRz2RCNb619S46PB3FpEBltNDC0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCyM
x4U86MWjoDCI0mJThh811EdNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRkM1MERBNkZDRTMxMUYwOTRBNTdENzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMI1UVb4fRwmgKWEQhqI2cxTYyLkhZeG2KFQq0Rt7xv4daiEMRgQ7Q
fknVEnSAPsQpYYeQL4pFmTKO0cabqzU+y5nVff5hdIxHRwOcL+lz3Oq8RHzKqdLC
3OksHeerwoSzyQxnxCwDvL2ORWyi/xyE0FsVkkuGcsyF1ujS1vWdaXwPn3KDhUfb
mhwza+mV2/3d9Cn0eCS+U44EJqbLXbIanQeTh+Q5chLku+nJN3l74BeGSXU43c7O
guK01S3UlefQNZKGdfIlMnbXZ/w4PDdTbqMXiWezKy8cIJagwP6MyF+oNlF42sHp
oJGB3ZNu/cNzYYRjlfXiXZHYFg4ynIGA
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:30 2026 by rpki-client