Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDF2296236A11F1B6598FD3DAE4EC9C.roa
File: EBDF2296236A11F1B6598FD3DAE4EC9C.roa (raw, json)
Hash identifier: FN7T3VSxg09EGSI9ly0LdfT51N4yyEsK2JUeEIrsCVs=
Subject key identifier: 7C:DF:71:9C:DD:B8:9A:51:53:B8:CE:81:65:33:AB:0E:EB:F1:44:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDF2296236A11F1B6598FD3DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 08:09:16 +0000
ROA not before: Thu 19 Mar 2026 08:09:11 +0000
ROA not after: Sat 28 Mar 2026 08:09:11 +0000
asID: 153671
IP address blocks: 154.81.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114621 (0x1bfbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 08:09:11 2026 GMT
Not After : Mar 28 08:09:11 2026 GMT
Subject: CN=69bbaf2c-c12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:e8:3b:5e:4e:c4:6e:78:06:5b:ae:1d:e4:
fe:d2:17:91:ed:c5:65:00:a5:a9:31:b5:ea:3a:02:
36:53:68:2b:b0:50:08:c4:db:f1:4e:2e:08:99:e3:
86:e1:75:ab:38:d2:a0:7b:bb:ab:b6:61:cb:a1:24:
cd:d7:2f:79:8b:a2:d3:69:91:a1:7c:89:ad:42:01:
7a:1e:a5:39:b7:8e:c0:98:25:a2:ce:96:54:fd:ac:
51:b0:21:0c:f1:ae:a1:6d:18:3f:f5:d9:27:18:eb:
5e:45:81:fa:8f:84:7f:69:2a:e5:51:98:e4:cb:6c:
e1:42:92:b6:52:fa:c6:cb:c2:a2:2d:83:72:77:35:
f6:84:01:24:78:8e:23:32:14:96:c3:e2:3f:5f:ae:
13:b5:48:0d:59:17:54:91:17:8d:75:c6:61:1f:42:
47:cd:1a:80:c9:15:e4:50:62:63:b5:70:3e:83:1b:
08:ec:e6:22:93:0b:01:8f:17:f9:94:4d:56:78:14:
b9:3c:4d:79:0a:22:45:bf:1d:ab:65:a4:96:fc:e3:
06:0c:fb:d1:dd:8f:05:26:b4:74:bf:d8:df:ef:93:
3f:fa:6e:92:8b:73:cf:e5:5b:22:a8:2b:5f:fd:41:
fb:21:5f:66:3c:c4:b6:4b:1e:08:7e:2e:2c:0e:28:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:71:9C:DD:B8:9A:51:53:B8:CE:81:65:33:AB:0E:EB:F1:44:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDF2296236A11F1B6598FD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.152.0/22
Signature Algorithm: sha256WithRSAEncryption
56:b2:a1:a9:07:4e:d7:c9:b1:36:b9:6d:bc:e9:6e:c8:ea:6f:
11:48:0b:c3:a8:b5:20:7f:f9:3b:2f:2d:74:d9:7c:79:92:e5:
a2:90:22:1b:76:74:4e:9c:24:80:13:cd:72:23:9e:96:b7:af:
e1:29:90:52:b3:3f:c7:e2:e8:0f:3f:c4:2a:23:3f:35:e9:32:
79:b2:16:59:57:f4:ac:94:5a:e2:dd:9d:2a:db:41:d9:2d:b7:
fd:e1:83:d7:6e:d9:2a:6a:7e:21:78:46:8d:6d:41:4f:7e:d5:
1a:eb:76:fe:68:c5:34:d2:20:4d:78:b6:6a:28:5b:cd:64:62:
f7:74:e2:60:67:7c:3d:c9:09:39:d1:15:af:53:93:fd:25:e3:
7f:53:26:33:06:44:c3:d1:a8:3c:00:56:cd:09:b9:73:2c:81:
43:83:c9:84:ad:a1:0b:cf:08:4d:24:56:88:07:89:fc:ce:39:
43:54:71:c2:a2:97:f7:fa:5b:0c:da:bf:c5:28:93:ee:92:55:
59:4c:d0:b9:7b:01:6d:f3:c2:68:73:4b:30:73:8b:9b:0d:22:
96:ab:ea:0c:2f:73:90:1d:8e:e6:3d:ea:c0:47:e1:cf:7d:30:
41:0c:79:e0:da:a9:a5:a0:48:74:a0:da:37:5d:97:bf:6e:c3:
1f:16:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:54 2026 by rpki-client