Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB5B79A6FF111F188C38FD4CE1D38B0.roa
File: EEB5B79A6FF111F188C38FD4CE1D38B0.roa (raw, json)
Hash identifier: L+ZPXOYmucoOm90Psy487KNV2QIA5j0duG4CCXov6yk=
Subject key identifier: B7:C2:CE:E0:AC:54:AB:F5:80:7A:F3:21:B5:55:03:2D:1F:A4:36:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB5B79A6FF111F188C38FD4CE1D38B0.roa
Signing time: Wed 24 Jun 2026 17:27:11 +0000
ROA not before: Wed 24 Jun 2026 17:27:06 +0000
ROA not after: Sat 01 Aug 2026 17:27:06 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120033 (0x1d4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 17:27:06 2026 GMT
Not After : Aug 1 17:27:06 2026 GMT
Subject: CN=6a3c136f-8562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:1b:1c:1b:ba:c9:42:bd:a3:97:1f:b1:23:
37:5c:c3:59:9c:7d:ea:83:a4:0c:07:80:a9:a7:df:
6d:11:1a:33:9e:0c:bf:b5:a7:1d:b8:59:ad:58:23:
40:49:fd:52:63:fc:1d:8b:c8:81:e1:b2:03:f0:75:
52:ad:8d:75:6a:28:00:98:10:bf:1f:d1:64:10:76:
bb:d6:ea:a4:36:64:61:74:79:07:90:2c:a6:0c:55:
aa:2c:b9:db:6e:fa:b8:a9:50:93:be:82:8e:58:6c:
cd:80:5d:9d:80:cf:5c:fc:28:92:39:e2:9d:2f:37:
4b:90:e9:3a:08:8f:2a:14:6e:f8:54:bf:ae:da:dc:
35:e5:1c:e6:3f:0e:82:68:26:4e:d0:99:4f:68:35:
98:df:78:62:f0:62:a0:cc:34:f0:48:75:a6:f2:fd:
7b:f6:6b:fb:a4:47:56:e5:c7:62:94:e5:1a:27:f1:
22:32:18:cd:bb:18:b7:73:6a:d3:44:86:57:93:27:
0a:64:6c:43:ef:98:aa:a9:59:17:96:d8:4a:ec:51:
f7:e8:6f:21:45:33:6c:f4:6d:7b:ea:ba:e2:04:97:
d5:1d:16:e6:41:78:6e:b6:da:eb:fd:8c:23:45:bf:
91:44:84:98:bf:2f:92:8a:b4:ff:60:9c:de:54:00:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:CE:E0:AC:54:AB:F5:80:7A:F3:21:B5:55:03:2D:1F:A4:36:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB5B79A6FF111F188C38FD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.59.0/24
154.194.67.0/24
154.194.207.0/24
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ef:20:b6:f3:6d:bd:e3:9e:f6:fb:b4:68:00:7c:c0:6f:6b:
99:32:1c:13:b7:3f:84:0d:b2:c3:19:09:a2:cd:75:ca:ae:2b:
6b:77:5d:c9:e4:6e:cd:1d:77:9d:42:6c:15:78:54:47:a5:ed:
53:d4:5e:e7:b7:aa:a5:83:64:c9:88:cf:ca:6b:ee:78:68:66:
1a:50:35:38:16:41:ba:bf:28:97:42:da:8d:72:19:96:70:e0:
78:1d:5c:81:f8:53:1d:12:01:3d:eb:fe:a7:19:9e:e3:8d:17:
31:96:5f:ee:1f:92:72:06:bd:33:d2:c6:a3:a4:42:9a:e8:64:
91:e3:7a:6a:d8:25:2e:c6:94:8b:e9:76:77:b8:4c:71:01:a8:
e6:b6:dc:79:09:ee:e5:48:cc:c6:8a:8e:30:82:98:fd:e9:6a:
8d:81:3b:62:67:ac:cf:0c:02:87:0d:20:82:f1:d1:3d:c7:12:
ae:80:38:a7:a2:cb:8f:c4:3c:bf:4f:b3:32:26:cd:2d:2d:d9:
33:5a:2c:f5:1d:cb:51:b8:3d:c1:08:c1:97:f9:7f:f4:37:3a:
f9:f2:0c:cf:5c:36:cb:d8:fd:90:1e:3d:ae:9b:e0:14:1f:0c:
b1:14:1f:48:a4:6b:24:95:b7:a5:72:ce:f0:4f:fb:82:a5:c8:
56:f1:9d:db
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAdThMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI0MTcyNzA2WhcNMjYwODAxMTcyNzA2WjAYMRYw
FAYDVQQDEw02YTNjMTM2Zi04NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzkkbHBu6yUK9o5cfsSM3XMNZnH3qg6QMB4Cpp99tERozngy/tacduFmt
WCNASf1SY/wdi8iB4bID8HVSrY11aigAmBC/H9FkEHa71uqkNmRhdHkHkCymDFWq
LLnbbvq4qVCTvoKOWGzNgF2dgM9c/CiSOeKdLzdLkOk6CI8qFG74VL+u2tw15Rzm
Pw6CaCZO0JlPaDWY33hi8GKgzDTwSHWm8v179mv7pEdW5cdilOUaJ/EiMhjNuxi3
c2rTRIZXkycKZGxD75iqqVkXlthK7FH36G8hRTNs9G176rriBJfVHRbmQXhuttrr
/YwjRb+RRISYvy+SirT/YJzeVABt8QIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFLfC
zuCsVKv1gHrzIbVVAy0fpDZIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRUI1Qjc5QTZGRjExMUYxODhDMzhGRDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAmsIkAwQAmsI7AwQAmsJD
AwQAmsLPAwQAmsY/AwQAmsa/MA0GCSqGSIb3DQEBCwUAA4IBAQCp7yC282294572
+7RoAHzAb2uZMhwTtz+EDbLDGQmizXXKritrd13J5G7NHXedQmwVeFRHpe1T1F7n
t6qlg2TJiM/Ka+54aGYaUDU4FkG6vyiXQtqNchmWcOB4HVyB+FMdEgE96/6nGZ7j
jRcxll/uH5JyBr0z0sajpEKa6GSR43pq2CUuxpSL6XZ3uExxAajmttx5Ce7lSMzG
io4wgpj96WqNgTtiZ6zPDAKHDSCC8dE9xxKugDinosuPxDy/T7MyJs0tLdkzWiz1
HctRuD3BCMGX+X/0Nzr58gzPXDbL2P2QHj2um+AUHwyxFB9IpGsklbelcs7wT/uC
pchW8Z3b
-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:22 2026 by rpki-client