Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB4F192948F11F1BA1915ACCE1D38B0.roa
File: EBB4F192948F11F1BA1915ACCE1D38B0.roa (raw, json)
Hash identifier: bwSvOSopu/S5JwOikLpCDCjPZlNHp4/38aAi3lYreQI=
Subject key identifier: 4B:93:72:2C:F1:8A:F5:1E:9D:67:CF:71:B1:DC:F2:08:80:43:BC:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB4F192948F11F1BA1915ACCE1D38B0.roa
Signing time: Mon 10 Aug 2026 07:48:48 +0000
ROA not before: Mon 10 Aug 2026 07:48:44 +0000
ROA not after: Thu 17 Sep 2026 07:48:44 +0000
asID: 22773
IP address blocks: 154.198.20.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
154.202.69.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.73.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122314 (0x1ddca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 07:48:44 2026 GMT
Not After : Sep 17 07:48:44 2026 GMT
Subject: CN=6a798260-2249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:f6:e1:0d:db:4c:aa:b5:2c:4f:e7:66:25:
5f:c5:0c:59:0a:23:c9:a9:21:9c:65:ce:42:8b:6d:
6c:dd:58:0d:e6:cd:4e:3e:9a:e8:d9:d9:f8:65:c4:
9b:4f:5e:21:ee:b3:6f:d8:fd:32:84:de:2c:60:2d:
b6:1a:7a:be:eb:e4:e2:68:c0:13:0c:0c:fa:ff:0d:
e2:45:bb:4e:ef:b6:26:33:ac:f9:eb:57:1a:27:1f:
81:03:7e:8b:41:6e:5b:fc:5f:5c:02:b4:29:a1:f0:
70:58:49:60:01:38:f6:85:fe:e5:42:1f:01:01:22:
fc:c3:9f:ea:c3:66:af:ba:d4:ca:c9:4b:71:09:61:
47:a8:1d:ff:6e:c9:fd:a3:a9:72:9e:ff:a3:22:d4:
70:71:4e:83:84:82:72:4f:04:fe:b4:f4:14:a1:31:
5a:4a:17:49:44:c2:b1:16:b3:32:3d:b8:e7:92:68:
65:ac:58:5b:fb:62:ef:e1:8f:80:bf:14:4b:17:6b:
44:28:f2:7f:4e:a2:3d:4f:44:d5:d0:93:2e:c8:0d:
42:aa:cd:d1:0a:73:75:5c:75:08:06:78:e7:d9:51:
da:45:d6:51:da:c6:a3:76:43:65:5a:f8:fa:96:42:
c3:ab:22:b2:12:89:d5:19:50:a0:d0:5c:4c:23:6f:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:72:2C:F1:8A:F5:1E:9D:67:CF:71:B1:DC:F2:08:80:43:BC:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB4F192948F11F1BA1915ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0/24
154.202.29.0-154.202.31.255
154.202.69.0/24
154.202.72.0/23
154.202.76.0/23
154.202.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2a:e2:f5:e3:00:c4:2a:b9:ae:cb:a7:3a:ec:a5:04:7c:b9:
e9:ec:f9:0e:df:e1:42:74:f5:20:f6:83:67:fe:a8:65:fa:52:
dd:74:43:d7:bc:c5:eb:de:e3:e9:33:dc:f8:3a:83:b0:53:06:
c1:93:56:35:ae:2e:e5:14:36:b4:e7:d8:4b:49:2f:fa:12:05:
78:42:70:16:a2:c8:62:f5:40:31:d3:db:d6:f3:a8:47:d3:42:
fb:3f:2f:19:68:63:83:34:19:d1:49:bc:c0:8f:72:7c:96:be:
6c:93:f9:49:02:69:87:8a:a4:ef:76:eb:ad:6f:95:4a:44:7d:
79:25:e1:6f:63:f7:39:1b:4b:93:61:d2:0b:da:a6:fe:05:c1:
a0:2a:8a:5d:3d:aa:dc:e1:be:b3:e0:2d:53:ac:e0:6e:f7:6b:
f4:e0:40:50:ec:73:0c:07:66:5c:35:30:b5:57:53:7b:ae:8b:
5b:01:b7:91:04:89:73:e2:61:3c:75:2a:cc:f7:6c:6e:59:92:
03:ae:68:ca:de:ae:ba:63:c1:94:29:80:90:e8:09:c1:07:b0:
19:4d:8c:39:10:55:1e:91:e6:07:63:06:f3:2a:aa:2e:71:06:
9d:83:f8:1b:91:d4:d8:53:39:2f:5b:55:16:ed:9c:51:ff:e0:
bf:8b:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:30 2026 by rpki-client