Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB63713E422111F1A4980000CF1D38B0.roa
File: EB63713E422111F1A4980000CF1D38B0.roa (raw, json)
Hash identifier: QpUO3vjv5YhPuzg4Jw2CszX+4trUPP7rzvk4RsriGFw=
Subject key identifier: 0E:C5:F9:6B:2C:51:3A:9B:BC:FD:AA:70:A5:6D:8D:7D:56:90:54:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C79E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB63713E422111F1A4980000CF1D38B0.roa
Signing time: Mon 27 Apr 2026 10:14:48 +0000
ROA not before: Mon 27 Apr 2026 10:14:43 +0000
ROA not after: Tue 19 May 2026 10:14:43 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116638 (0x1c79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 10:14:43 2026 GMT
Not After : May 19 10:14:43 2026 GMT
Subject: CN=69ef3718-fddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:2e:c9:9f:aa:61:8e:16:4b:d5:f6:9e:9f:
72:b2:4e:1f:71:c4:10:d0:76:8e:95:39:5e:4c:e3:
c2:b5:06:fa:80:06:05:64:9e:39:90:86:45:b1:4b:
de:17:38:86:1a:0e:dd:0d:55:40:f2:29:d9:1e:06:
57:cb:fc:93:03:fa:13:2d:f5:b8:97:92:3c:8b:9f:
e4:fa:e4:a3:7f:65:d6:f1:76:fa:84:bf:42:2f:61:
ec:d2:5c:9e:43:40:e1:6b:6c:df:3e:ca:fd:72:88:
0f:37:c0:3d:fb:73:aa:de:0b:62:6b:2d:ef:31:fa:
b8:d9:d9:43:ed:ef:a5:73:cc:cd:60:17:3b:56:f0:
50:92:70:16:da:2a:cc:0b:dc:ad:20:63:62:dd:cd:
d9:56:2c:b1:10:c9:42:f4:bd:15:65:b4:90:cd:56:
e3:2a:05:35:25:f5:f0:55:f7:35:eb:95:ea:78:76:
2f:0b:0a:31:56:12:33:41:83:fc:ef:35:23:4d:dd:
87:de:7a:bf:db:fd:72:5a:01:6e:70:1a:b2:1b:f4:
45:5f:41:92:7e:68:f9:55:05:b5:77:a1:0c:50:75:
f5:88:60:d0:be:b5:e0:ae:14:a1:60:ab:be:7c:42:
bd:ec:1f:57:a9:f3:33:b4:f4:45:e3:8f:6b:16:5a:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:F9:6B:2C:51:3A:9B:BC:FD:AA:70:A5:6D:8D:7D:56:90:54:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB63713E422111F1A4980000CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
02:7c:e3:2b:b2:db:83:e2:4e:cc:57:ce:12:24:ae:ed:4f:d1:
e1:55:a2:75:ca:41:32:7f:0b:bc:33:1e:33:1f:53:a6:98:a5:
30:7e:7f:0c:b2:a4:46:0e:29:ae:21:16:b3:1d:4f:48:26:9e:
fb:db:bf:b4:e7:ce:21:63:b3:80:f7:71:96:29:a1:ad:0c:86:
cb:ca:32:2a:14:1a:aa:2e:5b:eb:ee:5b:76:fd:bf:be:77:26:
83:40:77:b4:7a:fd:8c:98:92:23:cd:ae:81:2b:ab:7e:af:d4:
70:48:3d:f4:84:82:17:20:89:ee:b4:b0:f4:ca:6d:03:6f:30:
01:1f:22:1b:e9:63:c6:be:6a:d9:1d:b8:28:ff:1a:17:82:f3:
ca:8f:7a:0f:b4:1e:b1:a7:54:12:82:e3:a7:08:3a:e0:02:ad:
21:54:68:58:c7:e3:f5:c6:a3:15:3f:bf:90:80:42:b0:1e:e5:
fd:3f:1e:cd:7b:dd:71:0a:a0:9c:f3:4b:fa:af:74:be:bd:50:
cc:05:38:0d:b1:0c:79:4c:ac:f9:09:d9:7c:1f:c0:0b:5b:c4:
35:db:8f:03:3e:14:33:3f:f6:3d:92:64:72:3d:11:6a:60:85:
03:44:e6:d5:49:57:60:fe:0e:1e:fe:b3:d4:5f:e8:df:04:de:
8c:c6:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client