Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC4E525DDF11F1869218B6CE1D38B0.roa
File: 0EBC4E525DDF11F1869218B6CE1D38B0.roa (raw, json)
Hash identifier: IZuTd4hq8ddYh5vWl5GKwA+iSN3yPGPWuAqgXCM+xbk=
Subject key identifier: 07:DE:92:98:C6:E7:5F:C9:68:58:FC:C7:E7:42:90:BB:4A:9B:7C:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D132
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC4E525DDF11F1869218B6CE1D38B0.roa
Signing time: Mon 01 Jun 2026 17:26:43 +0000
ROA not before: Mon 01 Jun 2026 17:26:39 +0000
ROA not after: Mon 06 Jul 2026 17:26:39 +0000
asID: 273937
IP address blocks: 154.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119090 (0x1d132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 17:26:39 2026 GMT
Not After : Jul 6 17:26:39 2026 GMT
Subject: CN=6a1dc0d3-095e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:68:62:d4:46:90:08:64:af:e8:3e:fd:9f:
c4:cc:aa:32:86:2d:84:51:b9:70:5d:d1:c2:45:89:
e0:03:74:e2:86:03:08:43:50:89:19:47:c9:be:34:
1b:f6:b8:5d:09:4f:9d:56:83:67:20:a4:d3:79:c2:
c0:4b:cf:b7:c2:6a:89:6d:3c:65:64:70:0a:42:97:
1f:db:ee:8c:8e:2f:e9:5a:15:b4:e6:d9:ff:19:3b:
3e:ff:f5:1b:df:48:1b:ec:df:2b:69:e9:ab:f2:28:
55:61:26:5b:a8:59:b6:50:e3:cd:54:77:54:6f:f4:
39:e7:4e:4d:e5:0c:c8:ff:c9:cf:86:c0:f3:8b:c4:
16:61:10:5e:51:dc:16:f9:28:a9:97:c1:9d:99:1d:
36:2a:fa:fe:19:58:85:e0:fe:6e:75:9e:aa:8d:0e:
e5:a4:53:b9:76:d3:8e:f5:0c:03:e7:c8:30:01:12:
43:fd:60:a4:9b:68:0e:4c:87:4b:54:50:39:a3:9e:
86:11:db:cf:01:6c:6f:28:c2:e3:f1:b4:a7:53:92:
06:39:cf:a6:b3:cf:12:2b:af:8d:62:d9:ce:47:ae:
9c:47:fa:72:87:6e:02:3e:17:b3:97:b9:68:81:51:
43:5e:fe:ae:e8:c2:d0:3b:f6:34:36:a0:a1:46:dc:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DE:92:98:C6:E7:5F:C9:68:58:FC:C7:E7:42:90:BB:4A:9B:7C:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC4E525DDF11F1869218B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a3:7d:5d:a1:f2:67:1c:69:0e:a6:91:08:39:aa:19:33:04:
01:11:e6:a6:87:79:b7:64:03:4d:99:b5:27:d5:2d:3d:6d:cf:
68:67:b1:84:c9:29:97:60:93:3a:68:43:ae:b1:67:ce:92:e8:
8c:0d:c8:56:17:85:59:70:45:54:4f:4d:2c:cc:7b:f5:58:9f:
74:ea:2f:5a:eb:5f:46:1b:18:5a:83:87:32:67:1e:8d:63:fd:
1a:e4:80:3e:f3:6a:85:c1:80:de:af:1f:89:66:ca:9d:04:d8:
11:f5:3c:48:ee:86:92:de:4e:25:5c:f7:b7:08:a4:6e:ef:1f:
6f:09:95:c0:33:b6:ec:1b:f7:10:5e:d8:3b:35:f9:61:27:fb:
06:34:87:a2:41:4f:90:27:33:aa:f6:01:cb:1c:1b:a8:47:46:
15:0a:ff:ec:84:96:64:d8:73:7a:78:d7:19:78:8a:e6:6b:cc:
60:a7:ea:7c:af:66:34:a6:4b:f4:2e:a9:3b:d2:6d:ac:db:e0:
39:6d:49:c0:b4:3c:d2:a2:6b:44:1a:bd:1f:9e:2e:e5:46:c3:
14:4b:2e:90:92:58:15:7a:88:26:c1:22:0f:f2:02:a2:e5:54:
5d:fa:f3:a5:bd:f8:05:40:fe:d3:a6:6e:d2:d3:a4:a2:97:dc:
fe:c4:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:17:28 2026 by rpki-client