Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9106100D7B11F180479BF1DAE4EC9C.roa
File: EB9106100D7B11F180479BF1DAE4EC9C.roa (raw, json)
Hash identifier: dfKvoxj4rXi59VZQkg1ypS8E1/D9GH3LLQt4yNWiGPY=
Subject key identifier: A3:7E:17:67:3D:65:E8:CA:6E:F9:A2:DE:0E:BF:F7:A4:B2:9D:F6:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9106100D7B11F180479BF1DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 10:15:31 +0000
ROA not before: Thu 19 Feb 2026 10:15:26 +0000
ROA not after: Tue 31 Mar 2026 10:15:26 +0000
asID: 20326
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113199 (0x1ba2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 19 10:15:26 2026 GMT
Not After : Mar 31 10:15:26 2026 GMT
Subject: CN=6996e2c3-d42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:93:4f:db:e6:14:6f:57:ee:6a:b5:1b:32:
6c:7f:e8:af:3f:03:71:b5:0a:9b:b7:fb:51:c7:3b:
78:5e:c4:e5:ce:e2:4a:b9:46:5b:ca:b6:e2:3c:8a:
f7:a1:74:dc:92:a3:69:36:21:d0:c4:91:93:49:60:
41:ed:2d:e9:d1:2e:23:3e:3f:2a:23:b7:b2:eb:6d:
51:4a:52:7b:a0:ae:fd:22:fe:39:1c:df:dd:6f:8f:
f5:07:f2:55:44:4b:d6:34:41:0d:d7:a6:2f:ff:d9:
71:2a:1a:d0:32:82:a4:6a:d2:1d:e9:82:6f:1c:91:
a7:a7:f0:84:08:d1:94:9f:7c:c1:e4:62:46:1d:a0:
8e:ee:45:68:42:e4:39:c8:25:15:31:36:f1:38:49:
c3:d6:c6:94:a3:c0:e6:ad:56:2d:66:04:90:0d:b8:
1a:09:98:08:e4:00:fb:f4:81:2a:46:d4:c3:df:37:
cc:9f:1b:3f:3d:65:ca:69:73:11:58:9b:c0:98:9a:
b1:b1:4f:0f:a8:d0:42:36:fc:ec:54:4a:91:28:03:
e6:a5:77:34:d7:4f:12:3c:14:a6:42:37:6e:8a:d9:
a1:f8:59:9b:32:26:c8:8f:3e:45:c4:b5:ad:6f:74:
4f:47:ee:6e:00:f4:f2:45:80:36:2c:3b:d8:9d:45:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:17:67:3D:65:E8:CA:6E:F9:A2:DE:0E:BF:F7:A4:B2:9D:F6:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9106100D7B11F180479BF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1d:20:82:e3:be:4a:55:c7:91:2a:80:33:85:45:00:61:6d:
86:7a:4d:57:ca:89:09:59:98:fc:18:a1:60:5a:80:40:45:e0:
79:b5:ea:5d:0b:04:f1:5a:cc:f3:2f:68:1d:e5:26:f4:a0:9a:
1f:91:93:cc:0c:61:09:c9:6b:d6:d2:9c:e4:99:47:03:bc:1d:
1a:07:81:e9:0b:ec:62:b1:1d:a4:cf:02:93:d4:78:ae:52:bf:
48:f4:a5:a7:ec:19:1a:55:44:30:3f:26:ad:17:a0:e3:9b:60:
a7:f4:14:b3:21:d6:15:19:19:65:a4:6b:9d:a5:c0:59:6e:0e:
b4:63:30:47:46:87:d9:96:a4:28:63:cc:e5:51:a6:78:c8:89:
f4:bc:d5:b2:91:21:87:54:66:25:5d:9d:2f:84:d7:ab:2b:4d:
82:ef:ac:87:cc:84:3e:b1:28:ea:48:24:5d:a8:1a:18:1a:78:
93:7f:04:97:de:76:d3:af:d9:03:09:29:df:d5:28:f3:94:57:
47:8a:96:2c:7e:c2:e4:71:27:d7:fa:71:4d:62:79:ae:e1:63:
e6:42:41:32:2e:1d:3d:96:32:11:40:17:ed:83:1d:9a:f5:ad:
2b:ac:15:bc:b3:fa:6b:77:40:0b:5b:26:67:c5:db:f4:fb:43:
0f:0b:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:09 2026 by rpki-client