Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBA48E68924311F18C8F5EC4CE1D38B0.roa
File: EBA48E68924311F18C8F5EC4CE1D38B0.roa (raw, json)
Hash identifier: j7ZdAZvTz71Y2IdoGGlA7fcYxPt7jB3JAuhoSWpa0eY=
Subject key identifier: 74:E7:47:00:01:09:7E:B3:54:22:F5:F2:9F:88:13:B7:43:EF:C3:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBA48E68924311F18C8F5EC4CE1D38B0.roa
Signing time: Fri 07 Aug 2026 09:39:44 +0000
ROA not before: Fri 07 Aug 2026 09:39:40 +0000
ROA not after: Thu 22 Apr 2027 09:39:40 +0000
asID: 149014
IP address blocks: 154.91.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122227 (0x1dd73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:39:40 2026 GMT
Not After : Apr 22 09:39:40 2027 GMT
Subject: CN=6a75a7e0-e428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:36:68:a1:7d:a8:d4:af:b8:d1:6e:cd:f8:
94:7a:af:96:72:e0:b0:b9:1e:41:fe:ff:3d:b2:a4:
b6:c7:cc:40:2e:e6:e9:30:97:d4:90:4e:e1:67:40:
54:24:eb:63:f0:cd:7b:68:01:c1:e7:cd:d1:3d:34:
8b:b7:1a:72:3a:e8:e4:63:14:7f:9b:de:dd:2e:8b:
86:24:b3:8c:32:a5:b8:2c:f1:43:98:fb:26:5a:16:
f0:62:ed:99:0a:6c:01:bb:18:4b:71:8d:3d:f2:52:
3a:84:22:05:df:73:15:9d:db:2b:55:25:78:bc:54:
4a:1a:c8:98:82:da:be:39:10:64:d4:4f:68:9e:32:
4e:5f:9c:cb:11:db:c6:36:e0:7b:13:14:40:9c:42:
38:82:2f:e7:eb:4a:87:3a:54:b0:99:21:1b:5b:17:
10:7b:ed:d7:e3:95:c1:c6:99:6f:8c:99:79:90:f0:
21:65:56:69:c0:10:d7:e1:56:5e:36:81:1a:d6:94:
bd:78:b1:14:2a:68:dc:3a:9c:f7:f4:22:a4:e6:7d:
bf:0c:72:9a:71:a5:66:71:ae:b2:f5:bf:fc:3f:30:
e7:59:38:52:a4:93:67:a1:73:69:f7:a2:09:75:bf:
14:95:c2:c5:7b:84:68:32:7f:6c:32:5a:76:7f:db:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:47:00:01:09:7E:B3:54:22:F5:F2:9F:88:13:B7:43:EF:C3:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBA48E68924311F18C8F5EC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
41:ac:74:0d:09:ce:20:c3:29:91:b8:90:89:18:5b:b7:be:72:
7f:c3:12:e6:7b:06:d8:cb:7d:85:a3:c1:85:38:0c:bf:68:5d:
e1:ce:b4:81:e0:51:aa:d2:02:03:54:a5:a2:2e:e1:79:86:e3:
7b:58:d5:08:7d:a9:72:00:b2:38:62:94:ab:6e:3a:67:bd:9a:
79:27:5b:40:7b:13:f4:58:09:71:8a:55:b4:0b:a1:a3:d9:2f:
21:b8:f8:fe:a9:75:05:24:09:33:a8:c7:59:13:60:57:80:80:
18:22:9f:61:2f:2c:19:66:5c:2c:2e:6d:38:76:8f:64:3e:2d:
d9:3f:aa:f1:4a:0b:5e:43:ea:82:9a:fa:64:1b:c3:e8:54:ac:
79:d8:c4:9e:b4:39:b4:98:94:84:22:aa:19:c7:37:04:d8:04:
40:bc:0d:b3:3b:f4:5b:45:26:be:2d:59:d7:b2:a9:c2:71:93:
c4:c4:d0:28:95:4a:52:ef:34:26:b3:07:a7:3c:63:07:c0:fa:
6d:19:33:ce:c2:ce:ea:ef:df:4d:77:34:15:09:f1:dd:94:0b:
e1:18:bd:ab:e3:44:7d:fb:ea:3b:9b:5d:0c:8d:d0:71:cf:17:
46:9c:bc:f4:dd:2d:df:be:20:e6:04:97:53:f9:25:51:34:dd:
f2:cd:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:25 2026 by rpki-client