Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22AC44003A5B11F182892FDBCE1D38B0.roa
File: 22AC44003A5B11F182892FDBCE1D38B0.roa (raw, json)
Hash identifier: fihI5DAuwK/o0pewdKCn2jT1FH+aKkOhszouv2oXx+c=
Subject key identifier: 29:13:55:B2:4F:9F:85:1A:91:B8:CE:E2:C7:71:B8:1F:B2:62:AD:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22AC44003A5B11F182892FDBCE1D38B0.roa
Signing time: Fri 17 Apr 2026 12:44:13 +0000
ROA not before: Fri 17 Apr 2026 12:44:07 +0000
ROA not after: Sun 24 May 2026 12:44:07 +0000
asID: 214432
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116185 (0x1c5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 12:44:07 2026 GMT
Not After : May 24 12:44:07 2026 GMT
Subject: CN=69e22b1c-7c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:40:e1:43:e8:e4:87:d8:86:b0:8a:e1:bd:
2e:bd:4f:7d:1e:8e:3b:5b:2b:7e:3e:d7:a3:29:17:
2f:33:44:21:e2:49:88:10:c7:6a:b2:41:10:0d:d2:
3e:24:bf:d8:24:f9:c4:6a:14:7a:96:51:34:94:01:
71:d0:f5:1d:79:80:7c:99:e4:34:3d:73:06:67:5b:
8e:a5:69:01:e5:fc:75:e9:9d:df:6d:cc:d3:de:40:
17:46:ae:22:35:eb:93:f2:4d:b9:50:58:7c:93:08:
e0:0c:aa:2e:fa:25:97:f6:7f:c6:ca:f4:5c:aa:22:
e3:37:40:c4:3f:0f:20:68:1a:d4:3c:28:a6:d0:68:
e1:51:20:7f:da:31:94:56:7f:17:4c:a0:d7:cb:60:
b5:27:68:de:c3:13:7a:7f:72:2e:0c:68:c6:bd:30:
54:fc:70:9f:18:21:ea:df:bc:9c:11:f4:ef:db:fe:
53:61:6d:13:8b:33:59:3c:05:f7:cf:0f:a3:47:cc:
2e:57:ed:04:81:c8:4f:3d:83:b6:2b:31:b3:ba:37:
f3:8e:1c:02:c0:14:94:bd:6b:1a:d9:41:0b:51:87:
85:1a:7c:ea:0c:4b:aa:4f:d5:09:13:9c:6e:5f:a7:
96:a5:1c:5d:54:79:f2:fb:de:63:23:27:0c:27:b4:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:13:55:B2:4F:9F:85:1A:91:B8:CE:E2:C7:71:B8:1F:B2:62:AD:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22AC44003A5B11F182892FDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9b:05:0e:58:b4:a8:93:48:e1:a4:a7:d0:bc:8b:6e:5f:12:
e2:92:0b:56:e2:b8:4b:f1:a1:7b:ff:2a:46:14:2b:fd:7d:79:
e3:d9:fa:65:f0:1d:b8:0b:b3:51:38:b7:3e:04:e2:5e:65:e4:
3d:72:30:52:e6:34:92:34:6e:22:8e:59:51:a3:3d:0b:69:bb:
d7:6e:4a:60:86:ce:cd:7d:ad:0e:c1:ef:96:31:ae:7c:bb:e4:
17:02:26:b6:27:ec:04:71:c6:ed:65:2c:95:1e:5c:b2:0d:e1:
7c:38:16:6f:f3:bf:fe:05:48:42:96:ee:11:d0:6f:cf:5c:6c:
7c:15:b4:96:f8:71:8a:60:1e:a4:be:07:e6:a0:cc:57:49:a7:
41:48:a4:c6:63:98:ed:6c:70:78:1d:4f:d6:60:8c:92:ad:19:
01:ec:77:bd:7f:a5:aa:a8:05:0f:eb:9b:f5:0e:52:12:a9:33:
fe:8f:af:86:5b:ab:15:1f:e3:d0:25:35:60:68:a5:96:9f:d0:
2a:1f:5e:cc:97:89:3c:a0:59:e6:c1:8f:1b:70:ce:65:00:1e:
c2:5f:fb:3c:35:22:32:38:e7:b4:43:00:e3:4f:4d:1b:9b:16:
03:aa:1d:c5:6f:54:84:4f:ff:54:6f:64:fd:d5:7a:e0:50:df:
1e:32:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:29 2026 by rpki-client