Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFE1F3F8019D11F1BABBAE87DAE4EC9C.roa
File: EFE1F3F8019D11F1BABBAE87DAE4EC9C.roa (raw, json)
Hash identifier: i0pBwFfATk9SgreiNQe5cSqBrLXKnPMEig2RfWzB9d8=
Subject key identifier: B2:C0:B6:8E:09:6A:AF:17:71:76:27:95:47:28:A3:21:8F:BB:A6:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B879
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFE1F3F8019D11F1BABBAE87DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 07:48:47 +0000
ROA not before: Wed 04 Feb 2026 07:48:43 +0000
ROA not after: Thu 12 Mar 2026 07:48:43 +0000
asID: 138915
IP address blocks: 154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112761 (0x1b879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 07:48:43 2026 GMT
Not After : Mar 12 07:48:43 2026 GMT
Subject: CN=6982f9df-65a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:4b:af:e6:b9:6a:ac:c4:76:bc:ce:42:28:
4d:a3:8f:03:d8:bc:47:3c:6e:17:d5:b5:dd:7a:cc:
76:c6:d7:e2:cd:35:15:cc:c7:5a:3a:66:3f:7c:61:
51:b4:f1:63:d5:ba:c9:d0:fc:95:7a:f7:12:f5:fd:
68:5c:57:11:92:9e:1d:87:a1:fc:cb:84:87:2f:fc:
2a:b1:b3:85:2b:53:e0:52:83:da:9a:e1:74:50:3d:
8b:c3:1e:93:dd:90:59:77:18:fc:f4:c8:7a:7d:22:
d8:23:36:fc:f8:0f:e8:29:4e:2d:1b:7e:43:21:fa:
93:ec:08:78:3b:bc:38:ad:4a:6f:c6:34:9d:49:83:
da:76:0b:5d:1f:52:24:b5:8a:bb:57:e9:92:fa:b7:
6c:de:c7:4b:14:2e:9d:c5:04:0d:3a:86:9d:e9:a0:
67:cc:8e:6c:f4:2a:0e:b9:7d:62:8a:c7:77:78:2d:
b8:a2:1a:49:70:22:b9:91:62:37:30:8e:8d:c9:48:
84:31:37:df:9f:b7:67:db:8e:1f:16:66:a4:3c:d2:
b2:98:6d:0c:a3:39:a3:48:a4:53:9c:cf:9b:19:66:
0e:32:73:04:97:17:25:25:2a:1c:fc:fd:22:28:d4:
a4:09:13:6b:4c:b0:46:43:60:1f:cb:a3:ae:55:17:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:B6:8E:09:6A:AF:17:71:76:27:95:47:28:A3:21:8F:BB:A6:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFE1F3F8019D11F1BABBAE87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.89.0-154.95.94.255
154.95.96.0/22
154.95.108.0/22
154.95.116.0/22
154.95.122.0/23
Signature Algorithm: sha256WithRSAEncryption
60:d8:a3:3c:3f:91:74:98:4f:3f:47:82:81:be:f2:d3:89:59:
01:3d:2f:7e:9b:0f:b5:38:d7:42:9f:66:76:df:b8:64:ff:13:
5a:0c:27:ca:44:8f:d9:de:97:dd:3f:af:a4:71:05:1d:91:9c:
18:05:7e:f3:bb:d7:c4:e3:22:60:2a:2b:5b:95:f1:92:ef:1c:
60:8d:c0:1b:47:ee:64:68:69:f7:cc:a2:6f:5a:da:75:b0:e9:
c3:e7:49:7e:ed:26:53:5f:23:36:48:fa:a9:e7:37:07:8e:bc:
4d:86:7b:83:37:9c:9b:7f:e3:9b:99:44:46:f3:e6:0d:8b:55:
f9:47:53:97:e1:3d:77:0f:e0:1a:68:8e:b4:54:09:db:9e:24:
5b:15:49:f3:07:29:f4:ef:0a:a5:52:e3:50:13:2b:53:ac:4e:
c0:bb:f3:00:0a:50:e2:9c:5a:a0:11:63:15:36:ea:5d:21:74:
b4:89:a6:62:66:46:a3:1b:23:3e:02:6a:8d:55:1c:80:0b:2c:
da:9c:e2:b1:ae:7a:8c:df:1c:87:d3:56:5c:48:76:4d:f3:b8:
a8:4d:f8:c1:a9:b8:52:33:27:a8:9e:31:47:6e:dc:c0:db:e5:
32:a2:96:a1:41:14:88:76:77:d5:bb:8e:ae:30:f0:54:d6:ea:
4c:a5:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:07 2026 by rpki-client