Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDC3D482E9F11F1B98F55DEDAE4EC9C.roa
File: EBDC3D482E9F11F1B98F55DEDAE4EC9C.roa (raw, json)
Hash identifier: XITt4yMT35HEoDxQBHjlIAmr8ypy1FiuN5dOYEx/1+A=
Subject key identifier: 74:13:62:8F:07:A7:47:25:C3:13:C4:ED:52:3B:EA:9E:81:3D:51:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C25B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDC3D482E9F11F1B98F55DEDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 14:26:22 +0000
ROA not before: Thu 02 Apr 2026 14:26:16 +0000
ROA not after: Sun 10 May 2026 14:26:16 +0000
asID: 138915
IP address blocks: 154.93.50.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.93.63.0/24 maxlen: 24
154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.66.0/24 maxlen: 24
154.95.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115291 (0x1c25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 14:26:16 2026 GMT
Not After : May 10 14:26:16 2026 GMT
Subject: CN=69ce7c8e-72ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:75:13:37:f5:d5:32:94:03:63:85:06:ad:
5a:cf:4a:10:28:da:aa:2e:c7:cf:27:6a:49:cd:88:
0b:7e:b7:27:14:dd:79:9b:80:6e:81:e3:99:c2:52:
50:70:13:0e:32:bc:d4:07:eb:eb:a0:2f:8d:b3:f3:
2e:1f:c1:9d:8e:7c:a8:7d:ca:b4:a3:76:a5:0a:91:
c9:b5:d4:c1:99:21:a8:29:7e:31:c7:84:ab:c4:60:
76:28:ab:f7:52:b9:f2:64:7a:12:0a:a8:ec:69:e7:
55:8d:2f:d4:0c:63:db:8c:4d:25:17:93:c6:eb:35:
2c:15:45:c2:c6:39:57:b5:53:50:c7:22:e1:5b:63:
47:f9:d6:1f:30:88:b1:e7:f9:c8:5c:4d:c3:92:11:
cd:33:50:fa:ad:bc:ae:d3:83:7a:67:4b:cf:85:5b:
05:02:93:f9:66:ed:72:ac:fb:e2:7c:b0:8c:bc:ff:
cc:e9:e2:c9:43:3f:08:3d:f3:92:32:9a:ea:66:aa:
79:ab:ea:1e:21:68:bf:68:d8:27:a7:bb:e2:c8:c2:
13:74:fd:e2:39:98:4c:32:97:f2:c7:2f:40:3b:b5:
dd:28:50:ef:d8:d9:f4:86:ce:f0:d2:bf:75:4c:02:
88:2f:aa:cb:c4:60:d0:01:88:05:01:b5:5f:93:85:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:62:8F:07:A7:47:25:C3:13:C4:ED:52:3B:EA:9E:81:3D:51:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDC3D482E9F11F1B98F55DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.50.0/23
154.93.60.0/23
154.93.63.0/24
154.95.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:e2:53:06:4e:50:b2:0a:5e:b0:32:95:30:03:82:38:de:1e:
12:f0:e1:41:fa:0a:12:45:84:47:13:4f:96:8a:7f:82:50:75:
41:0e:bc:af:b7:9e:77:6b:ed:e5:cc:bf:8f:02:67:f2:fe:5d:
3e:4e:02:d8:11:2e:8c:9c:21:32:3d:96:b1:99:c1:5d:22:78:
50:9b:d9:95:f7:04:e9:00:17:cd:7a:fe:12:47:fb:4a:47:49:
98:31:2a:b6:ac:a9:1e:38:40:2d:3d:8b:a3:c1:a7:56:3b:29:
e4:21:d6:74:ce:ee:16:49:42:a8:02:0c:2a:8f:52:d4:1f:c4:
49:b5:96:90:1a:17:cd:ab:3f:73:8b:17:bf:28:36:0e:5c:f7:
26:b7:c0:c7:f8:c3:a5:af:53:c3:e7:33:77:49:ec:70:2b:55:
86:29:49:f6:20:71:88:7c:80:6d:3c:34:50:0e:38:ad:24:16:
3f:4e:cf:f9:e6:31:eb:4c:f6:be:c0:1b:20:f3:b7:01:4e:cf:
77:9c:29:fa:fa:90:eb:9f:aa:34:ea:80:95:9b:ff:d7:8b:fd:
b5:03:fc:e5:33:2a:2b:dc:b3:27:47:5d:1d:fb:5c:ec:04:49:
c3:44:d9:ef:25:0f:fa:85:8d:e6:24:56:70:5a:2a:23:ad:e7:
c5:81:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:26 2026 by rpki-client