Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDECDAB6550A11F1B5A57F05CF1D38B0.roa
File: EDECDAB6550A11F1B5A57F05CF1D38B0.roa (raw, json)
Hash identifier: e3tFKsY6cJ9FF28KFd2xreSMqmFObwTDd60aGo+dgNw=
Subject key identifier: E9:E2:7E:AA:C7:B9:52:E3:E0:A1:35:34:52:1A:DD:F9:F6:BF:B6:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDECDAB6550A11F1B5A57F05CF1D38B0.roa
Signing time: Thu 21 May 2026 11:48:06 +0000
ROA not before: Thu 21 May 2026 11:48:01 +0000
ROA not after: Wed 19 Aug 2026 11:48:01 +0000
asID: 204721
IP address blocks: 154.215.2.0/23 maxlen: 24
154.215.2.0/24 maxlen: 24
154.215.3.0/24 maxlen: 24
154.221.2.0/23 maxlen: 24
154.221.2.0/24 maxlen: 24
154.221.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 13:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118091 (0x1cd4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 11:48:01 2026 GMT
Not After : Aug 19 11:48:01 2026 GMT
Subject: CN=6a0ef0f6-1d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:2d:94:f0:bc:be:85:e3:e2:06:cb:10:cf:
c9:bb:e4:5e:ac:3d:b4:82:5b:5f:81:dd:45:93:67:
17:96:85:61:84:d1:ad:0c:36:ba:2e:37:1f:bd:f8:
7b:24:4d:4d:f7:e7:22:e7:f8:e9:4a:af:41:b7:2a:
c4:be:ca:58:4e:97:16:30:7d:51:63:d8:32:39:79:
9a:a3:6d:3d:d0:4d:10:74:85:0a:10:c5:35:44:d9:
46:5b:a4:ae:7f:b3:22:09:f8:26:32:bf:9b:5e:33:
b2:f9:3b:4b:73:46:0f:48:ce:0a:d7:21:be:36:cd:
df:5a:e2:5f:b7:4d:02:c3:90:a7:dd:c7:ca:31:80:
59:3d:32:35:63:87:cf:1d:8c:13:80:8f:0c:15:95:
5a:40:8f:f9:c4:b9:c7:c5:25:f5:4e:f3:c6:d7:8e:
99:15:c1:34:40:b8:7f:25:2d:fd:04:25:8d:ae:09:
dd:8a:33:f5:03:41:eb:36:61:09:aa:62:6b:10:13:
ae:9c:28:99:2d:3e:87:d1:21:83:7f:7d:11:ed:f8:
91:3a:68:29:f0:1a:5a:d9:03:94:71:b8:36:b6:23:
1f:17:6a:a6:88:32:5f:20:b7:a9:21:a6:46:e4:d7:
84:76:16:20:f7:2a:72:52:ec:f4:e0:20:0d:c1:f7:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E2:7E:AA:C7:B9:52:E3:E0:A1:35:34:52:1A:DD:F9:F6:BF:B6:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDECDAB6550A11F1B5A57F05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.2.0/23
154.221.2.0/23
Signature Algorithm: sha256WithRSAEncryption
07:1f:42:0b:60:60:cb:ed:b9:91:8a:f3:fa:f6:2b:08:a1:0d:
37:5b:c0:12:25:ed:89:8e:cf:46:00:3f:6c:b0:0b:d8:2b:8b:
b3:c6:b3:4a:43:96:86:ab:08:b6:f8:e6:4f:1d:32:ea:0c:80:
d5:6c:ec:0c:4c:c5:e7:22:32:7f:b2:ac:7e:47:53:04:9e:fe:
3c:42:67:3e:00:77:40:c0:66:c6:1c:c8:fe:9a:84:35:43:a4:
83:1d:4c:0f:c2:25:3f:2e:7e:17:70:43:0e:75:38:5d:15:16:
8c:77:23:af:67:1a:c0:45:3b:55:64:33:59:c7:14:63:18:86:
14:eb:64:22:c7:ba:f1:47:43:cb:c4:4f:5b:36:e7:58:90:e2:
43:96:7d:15:bb:67:a3:e8:e2:24:7e:fb:e9:9d:f9:c2:72:8a:
90:50:c5:dd:82:d5:1b:eb:33:47:a9:7b:4e:f5:b3:db:29:fd:
a4:ff:9d:3e:16:45:b4:d5:da:0b:8e:88:0e:cd:b3:a2:02:ca:
9f:91:2d:65:7d:c7:42:4a:8b:06:2c:4a:9d:39:04:79:14:cc:
9d:17:57:c7:30:64:26:9b:6c:b9:63:63:d2:f3:d5:71:8c:38:
6b:ae:d6:a9:47:5d:9f:ea:22:81:32:b1:18:5f:16:ed:ec:e2:
9a:88:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 20:26:40 2026 by rpki-client