Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA84DD675CC11F1B36F61F7CE1D38B0.roa
File: EEA84DD675CC11F1B36F61F7CE1D38B0.roa (raw, json)
Hash identifier: Uxbt5z6lAIelPuV5T1+wAdr/v85mZWUGN9PRwkd7Ofk=
Subject key identifier: 48:A5:4B:52:3B:68:EC:01:27:95:4E:5C:D5:1A:31:91:FF:DD:5A:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D664
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA84DD675CC11F1B36F61F7CE1D38B0.roa
Signing time: Thu 02 Jul 2026 04:17:27 +0000
ROA not before: Thu 02 Jul 2026 04:17:21 +0000
ROA not after: Sat 25 Jul 2026 04:17:21 +0000
asID: 401783
IP address blocks: 154.223.240.0/24 maxlen: 24
154.223.241.0/24 maxlen: 24
154.223.242.0/24 maxlen: 24
154.223.243.0/24 maxlen: 24
154.223.244.0/24 maxlen: 24
154.223.245.0/24 maxlen: 24
154.223.246.0/24 maxlen: 24
154.223.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120420 (0x1d664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 04:17:21 2026 GMT
Not After : Jul 25 04:17:21 2026 GMT
Subject: CN=6a45e656-b73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:10:fa:e0:5e:4d:a2:c1:ca:fa:43:a7:58:
11:8a:e5:e8:d5:21:62:ba:28:a4:7c:82:f4:85:19:
92:85:2f:9a:e3:d1:00:b7:ef:47:35:66:f4:fc:44:
cb:c6:21:e7:97:fa:1e:48:9d:de:ef:b0:40:49:d3:
93:c9:22:05:99:30:38:23:10:b2:18:2d:33:26:79:
a1:20:01:17:5f:f1:1d:b0:c1:08:7f:f7:99:4d:23:
7e:57:f2:8c:c0:cc:c9:49:29:56:bc:21:25:84:57:
8a:a9:43:ee:2b:c8:f4:02:62:df:88:f8:36:80:25:
83:cb:ba:6e:8c:27:b6:d5:b7:f9:02:05:2b:1b:f1:
c9:40:89:12:7b:4d:b7:79:27:7f:dd:d5:80:c3:bd:
65:d9:7c:f3:fd:6c:17:3f:37:4e:e3:26:9b:5a:01:
cc:ee:03:f1:37:cc:0c:a5:52:be:65:66:5d:4b:52:
27:17:fb:66:17:6f:79:dd:30:53:ce:a0:84:87:1b:
47:7b:b4:5f:45:3a:a0:8f:da:03:07:e5:fb:65:fa:
85:3f:06:80:dd:9a:53:5c:c1:93:e3:22:c8:44:e4:
56:ab:8f:6b:19:19:fd:5a:f8:55:8d:12:e6:af:97:
0d:c5:12:e6:15:84:2e:0b:0c:10:67:ec:4c:d8:9f:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A5:4B:52:3B:68:EC:01:27:95:4E:5C:D5:1A:31:91:FF:DD:5A:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA84DD675CC11F1B36F61F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.240.0/21
Signature Algorithm: sha256WithRSAEncryption
33:c6:d3:20:a8:5c:ce:e2:92:95:78:f8:d5:59:fe:15:0c:f0:
82:15:46:46:5d:fd:1b:44:7b:21:40:d1:07:21:ae:2f:3e:eb:
61:1f:f1:c3:43:ec:22:43:02:fd:fc:e1:ca:94:1e:17:b1:8d:
67:e4:2f:ea:a9:08:b0:99:e3:c5:ef:7d:12:0a:db:51:e0:47:
75:d4:08:6c:b5:3c:e5:a2:22:c3:88:f4:4e:dc:db:08:0f:b0:
bb:51:5d:f9:42:d9:98:16:62:3f:37:79:86:2f:bb:31:bd:26:
b6:7e:fc:e8:8a:3f:75:fe:58:21:2c:be:09:b1:c9:23:49:e2:
e6:dd:83:c2:9a:39:b3:fe:ff:62:81:36:c1:7e:b2:e3:16:ad:
77:0b:88:5f:e2:89:da:26:0d:20:22:74:2e:e1:be:d2:8a:6f:
a1:b4:44:5a:1b:a8:6e:f3:c3:d7:9b:3f:88:ae:72:bf:aa:94:
74:77:51:fd:24:1e:3e:19:42:bf:e2:3c:fc:95:96:b7:b3:42:
6d:ac:d8:b6:52:45:07:9c:3a:ab:67:b9:ef:d1:77:4e:15:5c:
c8:e4:68:ea:d6:b8:1b:71:ad:57:ed:7b:71:94:d5:75:ca:99:
a6:88:d6:37:f2:9f:94:67:34:d8:80:6d:08:11:1b:83:03:9a:
82:61:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:12 2026 by rpki-client