Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDEBEF6A457511F19798D0B7CE1D38B0.roa
File: EDEBEF6A457511F19798D0B7CE1D38B0.roa (raw, json)
Hash identifier: G08PBLDGMPE57GJpWxtNMxVhx4x80L+MjZskQrEKwm0=
Subject key identifier: 2E:10:6A:6E:D7:4A:41:AC:D1:5F:4B:8F:AA:EE:85:32:2D:1C:91:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDEBEF6A457511F19798D0B7CE1D38B0.roa
Signing time: Fri 01 May 2026 15:53:43 +0000
ROA not before: Fri 01 May 2026 15:53:38 +0000
ROA not after: Fri 05 Jun 2026 15:53:38 +0000
asID: 44559
IP address blocks: 154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116911 (0x1c8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 15:53:38 2026 GMT
Not After : Jun 5 15:53:38 2026 GMT
Subject: CN=69f4cc87-688f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:77:a9:c3:96:c8:85:9d:76:9a:9a:c8:1f:
c7:a4:23:d1:12:b3:ad:41:e3:38:30:04:af:98:4c:
b9:5f:85:06:fc:65:ee:1d:01:17:6c:a2:2b:5c:69:
1a:28:6c:de:e5:be:e0:cf:14:0c:e9:00:d3:54:8d:
51:24:e1:d9:dd:40:b5:e0:eb:d7:e4:87:4d:e5:30:
d7:b8:c7:3b:36:cb:5e:4b:0d:14:18:fc:a2:41:bc:
bb:50:e3:7a:15:7e:33:38:3e:66:3e:8a:39:a3:5e:
2d:2d:e4:dc:93:5b:f0:a5:4d:35:7c:14:a1:6e:8c:
7c:e7:f0:2b:7a:60:1c:9f:ba:f2:a7:b4:16:16:cd:
d9:b5:27:ea:bc:e2:47:b9:5f:18:bd:92:01:26:cb:
79:41:1e:71:d1:c3:bb:65:3a:ba:7d:9b:ba:42:dd:
66:93:ec:18:ff:17:17:26:52:a3:93:42:68:b6:35:
44:df:81:0f:f7:05:ff:ec:09:f2:b8:54:95:17:cd:
30:9d:97:6a:3a:38:40:53:87:4c:ae:04:51:b7:bd:
94:31:33:9e:59:53:c3:ae:c6:de:39:33:97:77:d6:
ff:82:f5:8a:20:a1:65:03:8b:22:99:25:a8:6d:a4:
c8:a7:36:0f:9e:76:11:6b:1e:7c:57:4f:df:20:ee:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:6A:6E:D7:4A:41:AC:D1:5F:4B:8F:AA:EE:85:32:2D:1C:91:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDEBEF6A457511F19798D0B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.141.0-154.209.143.255
154.209.147.0/24
154.209.149.0-154.209.151.255
154.209.156.0/24
154.209.159.0/24
154.209.192.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9a:3d:67:fb:65:7c:ce:54:6c:21:0e:a1:d3:d5:d7:bf:ab:
45:58:88:1d:a7:10:13:29:6e:09:74:da:f8:23:40:62:67:53:
e1:65:59:2a:16:7b:7e:e3:10:6e:b7:00:71:f1:55:19:c2:4d:
09:af:b4:de:d9:45:20:02:c8:cd:4f:2c:84:76:a3:92:c8:8b:
eb:4f:40:04:69:5a:34:54:e1:7b:e7:01:1d:bd:82:cc:a2:26:
cf:e6:01:1d:78:32:c7:59:60:e4:27:f4:cb:d3:36:8b:ec:ec:
bb:25:ac:fa:c2:79:53:51:db:3d:f3:78:98:cb:fa:39:6b:61:
38:1f:93:44:34:f5:de:bf:c3:8f:37:57:40:18:7a:51:92:2d:
23:71:ea:35:78:a8:42:0a:e4:6e:16:07:ab:a6:f8:4d:5f:ec:
7f:e9:f6:4d:f2:1a:d7:7f:d5:64:0b:1e:40:66:ca:60:3b:d3:
9b:80:39:f8:34:48:4b:ed:45:dc:47:a9:6d:7a:46:47:bc:8d:
ea:1b:a2:3c:7c:db:bd:73:c9:85:07:34:0c:26:00:da:8a:93:
54:dc:81:7b:73:06:b7:5b:86:67:b5:39:5e:fb:89:d2:a5:8d:
18:67:9a:2a:03:6b:9d:22:9b:bd:87:73:84:84:b1:2c:80:de:
af:8a:ac:63
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAcivMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAxMTU1MzM4WhcNMjYwNjA1MTU1MzM4WjAYMRYw
FAYDVQQDEw02OWY0Y2M4Ny02ODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3m13qcOWyIWddpqayB/HpCPRErOtQeM4MASvmEy5X4UG/GXuHQEXbKIr
XGkaKGze5b7gzxQM6QDTVI1RJOHZ3UC14OvX5IdN5TDXuMc7NsteSw0UGPyiQby7
UON6FX4zOD5mPoo5o14tLeTck1vwpU01fBShbox85/AremAcn7ryp7QWFs3ZtSfq
vOJHuV8YvZIBJst5QR5x0cO7ZTq6fZu6Qt1mk+wY/xcXJlKjk0JotjVE34EP9wX/
7AnyuFSVF80wnZdqOjhAU4dMrgRRt72UMTOeWVPDrsbeOTOXd9b/gvWKIKFlA4si
mSWobaTIpzYPnnYRax58V0/fIO6iswIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFC4Q
am7XSkGs0V9Lj6ruhTItHJEUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FREVCRUY2QTQ1NzUxMUYxOTc5OEQwQjdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBACa0Y0DBASa0YADBACa
0ZMwDAMEAJrRlQMEA5rRkAMEAJrRnAMEAJrRnwMEAJrRwDANBgkqhkiG9w0BAQsF
AAOCAQEAcZo9Z/tlfM5UbCEOodPV17+rRViIHacQEyluCXTa+CNAYmdT4WVZKhZ7
fuMQbrcAcfFVGcJNCa+03tlFIALIzU8shHajksiL609ABGlaNFThe+cBHb2CzKIm
z+YBHXgyx1lg5Cf0y9M2i+zsuyWs+sJ5U1HbPfN4mMv6OWthOB+TRDT13r/DjzdX
QBh6UZItI3HqNXioQgrkbhYHq6b4TV/sf+n2TfIa13/VZAseQGbKYDvTm4A5+DRI
S+1F3EepbXpGR7yN6huiPHzbvXPJhQc0DCYA2oqTVNyBe3MGt1uGZ7U5XvuJ0qWN
GGeaKgNrnSKbvYdzhISxLIDer4qsYw==
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:57 2026 by rpki-client