Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB237932568311F1860E0F09CF1D38B0.roa
File: EB237932568311F1860E0F09CF1D38B0.roa (raw, json)
Hash identifier: DJySx3qm5pvzElukYFAzRIeuEcVyePTDAPCO5yK4IME=
Subject key identifier: 0C:42:40:CC:FB:80:4D:4F:40:20:CB:41:16:B5:C3:CE:40:4B:FA:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB237932568311F1860E0F09CF1D38B0.roa
Signing time: Sat 23 May 2026 08:46:41 +0000
ROA not before: Sat 23 May 2026 08:46:36 +0000
ROA not after: Fri 10 Jul 2026 08:46:36 +0000
asID: 32043
IP address blocks: 154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Jun 2026 00:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118389 (0x1ce75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 08:46:36 2026 GMT
Not After : Jul 10 08:46:36 2026 GMT
Subject: CN=6a116971-1607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:97:0a:f0:de:32:84:8a:5b:9d:c2:e7:d2:
d3:b1:e4:c4:f1:d9:2a:4f:a0:52:d7:81:57:a6:be:
b7:60:94:03:38:09:83:cf:00:89:bf:78:d4:c2:41:
4b:13:b0:6d:b1:85:83:96:73:ac:9d:d3:1f:da:ba:
88:39:32:f9:90:10:a0:2a:c0:9e:03:eb:b8:dd:86:
e0:7c:70:d4:45:74:a4:14:cb:ed:88:71:d9:bb:77:
50:08:57:6d:9c:33:89:03:e7:06:26:62:5b:4b:e9:
36:15:77:17:6d:74:16:18:d7:f3:ca:a1:a4:ce:e6:
27:bc:73:d5:b3:aa:2f:67:f9:74:2f:62:d3:7e:16:
4a:64:2e:64:74:31:bd:27:e9:c6:57:3d:49:3b:72:
cf:d1:cf:46:4a:ea:58:a9:bb:28:0c:f2:9c:e0:f0:
e6:01:79:24:89:e7:bc:c6:0c:3a:ac:d6:90:71:5a:
2a:5d:44:fd:77:8b:88:ad:62:43:0d:03:2a:c7:c1:
fe:09:b6:f4:41:1b:de:eb:22:2c:16:84:bb:33:8c:
82:d7:db:3e:f1:c2:aa:5d:52:2f:bc:e0:d2:14:84:
40:bc:7e:7b:0e:9e:97:e4:08:65:fc:70:82:3e:4f:
cc:bd:0a:cf:d8:28:c2:a6:fb:32:23:35:fb:d4:74:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:40:CC:FB:80:4D:4F:40:20:CB:41:16:B5:C3:CE:40:4B:FA:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB237932568311F1860E0F09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0-154.82.167.255
Signature Algorithm: sha256WithRSAEncryption
34:55:1a:26:00:2d:bf:fa:e5:c0:74:96:2a:e4:25:45:9b:5f:
03:c1:c1:bf:73:b1:0c:6a:e8:b1:f6:f7:22:b4:c2:41:51:7a:
af:b1:6b:9a:d5:1f:52:bc:26:c1:79:92:a8:bf:08:e8:31:db:
5a:00:fe:49:4f:d0:4e:c8:ac:38:fe:15:e1:7a:82:81:76:6c:
2a:0e:fb:f2:6e:c9:95:5b:29:0c:91:f4:6a:df:51:07:b4:be:
cc:af:e2:a3:de:18:85:4c:ca:13:7a:ad:57:a2:e7:cf:cf:5a:
fc:6f:56:c3:74:4f:45:db:59:e7:dd:4d:89:13:e1:e1:63:3f:
a9:b4:00:7a:8f:f6:d1:cf:69:37:74:6b:02:0f:cc:84:bb:39:
12:27:90:a5:66:30:51:e3:49:1e:0d:db:55:86:e7:3d:38:c2:
0f:73:c0:34:b2:5a:96:c7:f5:95:c5:5f:04:2a:13:2d:a4:91:
ab:5c:cc:96:17:f3:63:af:35:3a:1c:c0:d5:3c:d4:e5:23:71:
cf:f4:08:83:92:1b:33:d4:6a:26:29:0e:39:17:ae:71:a1:4c:
08:f7:a3:58:22:bb:92:90:0c:5c:06:0d:21:1b:f1:b0:f9:f4:
6d:53:28:60:42:04:2b:34:a2:0b:32:d9:63:7e:56:fe:be:02:
74:11:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 08:08:07 2026 by rpki-client