Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF53178C618811F1BC280F07CF1D38B0.roa
File: EF53178C618811F1BC280F07CF1D38B0.roa (raw, json)
Hash identifier: E/p4KdBkktltZcswzYrFVKKm4AQd1BetiDApxpgC/Bo=
Subject key identifier: 98:5A:A4:6E:BA:88:55:A5:D6:CC:77:86:A6:E9:4F:60:3A:0D:B3:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D201
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF53178C618811F1BC280F07CF1D38B0.roa
Signing time: Sat 06 Jun 2026 09:20:19 +0000
ROA not before: Sat 06 Jun 2026 09:20:14 +0000
ROA not after: Sat 13 Jun 2026 09:20:14 +0000
asID: 138152
IP address blocks: 154.92.22.0/23 maxlen: 24
154.94.4.0/24 maxlen: 24
154.94.6.0/24 maxlen: 24
154.94.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 09:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119297 (0x1d201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 09:20:14 2026 GMT
Not After : Jun 13 09:20:14 2026 GMT
Subject: CN=6a23e653-05b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:7e:b3:4d:0d:47:53:10:8d:8c:96:dd:4e:
81:f2:eb:72:da:2c:0b:8b:e2:0e:e0:df:c7:cb:67:
6d:9a:d9:ad:a0:d1:c2:94:14:d3:aa:74:65:79:9b:
5f:69:ea:68:2a:4a:0e:64:0d:f8:28:3c:21:96:d4:
ff:50:e6:c2:0b:64:92:66:71:4f:ba:c7:c3:c0:1a:
8c:8f:f1:39:bd:9f:dc:47:22:50:72:ea:39:11:fb:
07:44:a9:85:1f:cb:b5:9a:cf:8c:b9:84:8e:80:17:
9c:6f:22:86:80:71:5f:bb:b9:d6:8b:3d:ad:ca:3f:
ae:62:0a:1d:03:f0:cf:6b:ab:4d:36:ef:f4:53:e1:
fb:c3:56:29:5f:ad:98:db:15:7b:4d:f3:1b:84:18:
88:b9:65:f5:b8:a4:de:05:7c:73:03:f1:1f:d6:59:
8e:db:eb:a8:33:ca:17:e0:a5:8b:91:cb:a1:2d:cc:
5a:fa:8f:0b:f1:35:4c:e3:f5:5e:bb:18:2e:0a:00:
40:c9:ef:61:1c:47:ee:10:53:99:79:ae:47:62:73:
39:10:4e:c6:2a:90:78:3e:ea:bb:87:e3:d0:68:b5:
78:5f:12:7b:33:bc:2b:ea:29:16:e1:d6:26:07:9e:
5c:b2:be:48:ed:83:21:76:06:ad:37:c1:4e:89:b9:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:A4:6E:BA:88:55:A5:D6:CC:77:86:A6:E9:4F:60:3A:0D:B3:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF53178C618811F1BC280F07CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
154.94.4.0/24
154.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
57:e7:59:ef:97:12:1c:90:f4:a5:6b:81:6a:b4:28:2b:20:29:
c7:29:30:2b:f4:87:2a:56:46:08:5e:51:e2:56:c8:5b:1b:0f:
5d:5e:92:ff:35:48:2f:9e:be:e5:08:49:0e:2c:4a:de:12:2d:
d9:a4:4d:90:b9:4a:a1:37:c5:c9:e2:50:a7:e8:7f:9b:47:8c:
5e:93:c2:44:43:1f:1d:ba:70:fa:fd:6e:70:40:8b:d0:8f:f8:
87:1f:58:af:7f:dc:6e:66:f9:1c:3a:67:38:1f:c7:df:b4:7f:
13:30:0b:42:c6:44:db:51:af:50:fd:d3:d1:4a:cf:e4:c3:1a:
45:8c:8e:bd:62:d4:fb:94:6b:ae:64:a7:f8:f7:ab:58:ce:cc:
fe:4e:e6:24:32:18:d9:a5:b5:08:18:94:77:2f:ff:86:82:ad:
41:07:cc:b0:4f:eb:28:80:d1:31:e4:6a:4e:18:b8:54:76:a0:
64:5c:db:31:a4:c7:32:5e:29:ca:e8:c8:76:2a:77:29:72:79:
04:d7:46:b1:c1:ed:3a:26:15:f9:a9:ca:b3:5b:6c:74:dc:eb:
98:01:dc:38:d8:94:23:af:75:93:94:df:d0:0a:c3:22:dd:05:
5b:1b:dc:84:7d:e8:70:7e:a5:be:d7:5b:bd:9b:01:db:d8:9c:
83:38:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:10 2026 by rpki-client