Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB3539CC408C11F1A663DBD8CE1D38B0.roa
File: EB3539CC408C11F1A663DBD8CE1D38B0.roa (raw, json)
Hash identifier: zfDEowLIvtetKQTsVhUanTuyk68KErSZiUdiEw+algA=
Subject key identifier: CD:0E:E6:63:AD:6B:47:EA:3B:A2:F8:2E:13:1A:55:F3:60:EF:65:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C767
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB3539CC408C11F1A663DBD8CE1D38B0.roa
Signing time: Sat 25 Apr 2026 09:55:41 +0000
ROA not before: Sat 25 Apr 2026 09:55:37 +0000
ROA not after: Mon 01 Jun 2026 09:55:37 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.38.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116583 (0x1c767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 09:55:37 2026 GMT
Not After : Jun 1 09:55:37 2026 GMT
Subject: CN=69ec8f9d-b737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:0d:f2:60:c6:77:6f:c9:97:3c:27:85:b9:
52:74:8f:ee:dd:f4:c4:14:40:5c:c0:68:db:c2:68:
a7:c6:11:f8:2c:6a:8c:13:ee:da:c1:e5:b2:25:ee:
51:e1:c1:9a:6f:fe:99:17:31:0c:57:21:b7:cc:c5:
05:ec:c8:78:1c:5a:c9:5b:a5:b9:c0:0e:9c:d8:36:
96:70:9e:9d:63:6e:66:f7:6b:43:a3:db:ad:30:00:
82:56:a2:78:5b:4e:d1:c3:d1:fd:e4:5d:a0:18:b9:
e1:9e:b1:cc:09:fc:fc:52:64:1d:d9:e2:53:dc:4f:
7c:31:9a:1c:a9:be:05:e8:eb:ed:41:02:e4:73:fe:
e8:eb:42:cd:45:91:08:bb:7f:49:88:09:81:1b:b1:
f7:c4:83:3d:89:65:5e:3e:26:07:0c:b4:cc:f9:f3:
a0:75:ac:22:33:8e:fc:4f:fb:99:57:ec:33:30:e8:
3d:ae:5c:56:77:28:3b:64:49:3d:06:f1:c7:45:ca:
6d:30:54:6e:07:aa:98:73:80:f7:77:82:ee:10:f8:
5b:e8:45:c1:e6:9b:03:c2:44:99:88:a3:60:b7:b2:
25:17:94:d1:5b:28:ec:d9:10:32:83:e0:ab:11:e8:
ea:be:7a:38:d2:9e:0e:ca:49:0f:87:b3:7f:78:ef:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:E6:63:AD:6B:47:EA:3B:A2:F8:2E:13:1A:55:F3:60:EF:65:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB3539CC408C11F1A663DBD8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0-154.198.39.255
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:47:ff:cb:88:78:80:18:9e:ff:cd:8a:86:db:15:c3:06:27:
fc:e1:72:07:20:4e:77:c0:72:d0:92:0f:1b:03:9c:e1:21:1d:
6a:67:51:f3:d2:1d:53:3f:29:af:2a:5d:d5:bb:cf:56:e5:4b:
ec:50:53:15:49:c5:97:07:0c:4e:a6:65:3e:2b:a9:86:50:80:
ac:5c:d7:7f:44:83:2a:21:4f:04:2f:d5:ed:63:ee:39:27:4d:
bf:74:1d:27:81:43:42:9c:1c:0b:e8:5b:80:2c:bd:7a:cd:8c:
88:07:97:b7:0d:9b:dd:0f:5e:d0:81:4e:0b:35:a7:e0:c6:85:
40:cf:2b:a8:1d:c5:92:18:09:b2:30:27:33:34:e0:63:11:ba:
fd:a4:f1:33:5a:e9:12:c5:d0:79:72:44:97:dd:b2:d9:66:1e:
28:13:16:e9:cf:13:dc:f3:b7:2e:66:27:1b:69:4a:21:a4:1e:
5d:5c:e5:ff:20:03:d4:d5:d4:23:b4:af:f4:6b:a6:26:2e:d8:
74:06:4f:8b:4b:38:bb:cc:ad:c5:fe:07:9a:3e:79:ad:0e:69:
98:4a:25:b5:77:4d:3c:c1:21:61:a4:94:53:74:bb:14:c1:c7:
2d:0e:09:9c:e8:a6:d1:b7:b2:dd:72:20:cb:d5:8a:19:84:8d:
98:1d:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:13 2026 by rpki-client