Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22EE7386122711F1908C4CA7DAE4EC9C.roa
File: 22EE7386122711F1908C4CA7DAE4EC9C.roa (raw, json)
Hash identifier: zZmXn2M9f3/PbLnkOdYy4WsZ5SLX6+v6GMO5rYHZqCY=
Subject key identifier: D0:55:C5:3C:F1:81:E4:8C:2B:81:B4:58:3C:03:18:97:83:29:C1:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22EE7386122711F1908C4CA7DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 08:51:12 +0000
ROA not before: Wed 25 Feb 2026 08:51:08 +0000
ROA not after: Wed 01 Apr 2026 08:51:08 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113559 (0x1bb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 08:51:08 2026 GMT
Not After : Apr 1 08:51:08 2026 GMT
Subject: CN=699eb800-68b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:e1:64:2e:0c:5a:9a:a9:99:7f:f0:1e:08:
12:a6:67:84:79:81:d0:48:a1:96:3b:a1:33:3b:36:
37:2a:a6:8e:63:43:e9:1a:a9:aa:d8:37:ea:f2:f3:
5a:d0:b7:a0:24:5d:40:dc:fd:a3:21:7f:f4:3e:8b:
25:e1:c2:81:79:06:a3:00:f2:5f:b7:24:15:41:5b:
f6:20:e1:ab:e9:3d:80:37:99:29:fa:26:e5:ce:57:
07:9a:73:43:d3:fa:6f:a1:e5:4b:14:e1:b8:10:c3:
06:c7:97:62:ae:95:9e:c4:ff:d9:99:fd:ef:61:ad:
ef:2d:43:3a:39:46:90:cb:e7:52:1f:d4:5e:ed:42:
60:6d:c6:71:44:b7:00:2e:b9:c4:fa:cc:2e:49:63:
5a:07:16:7f:c1:8d:91:e3:f4:b3:54:c7:45:24:5c:
e0:26:87:8e:f4:e5:9a:2d:e3:9f:fc:92:f3:45:6d:
05:54:6d:93:2f:6e:25:19:62:b5:76:b5:6b:0d:26:
52:86:f6:81:5e:dc:99:81:6e:35:16:3a:17:c9:ce:
e4:ee:15:2e:76:5e:c5:14:8e:02:36:f8:48:75:0b:
7a:ca:32:32:4a:6b:57:0f:6a:e3:cf:e4:cb:4a:60:
d8:4f:21:a7:dc:d7:18:29:c7:e4:97:f2:4c:aa:ed:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:55:C5:3C:F1:81:E4:8C:2B:81:B4:58:3C:03:18:97:83:29:C1:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22EE7386122711F1908C4CA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.223.255
154.203.226.0-154.203.228.255
Signature Algorithm: sha256WithRSAEncryption
b4:a9:ed:c3:d4:38:d5:a3:c2:30:0c:61:a6:ac:18:f8:8c:b4:
b6:c0:37:32:de:6b:99:1a:d8:78:97:78:78:ad:2a:f6:7d:cd:
1d:03:6e:3e:63:ce:e8:cf:76:96:67:2c:cb:78:f0:28:86:2a:
7d:33:a5:ee:53:58:6d:f9:01:02:03:c6:c8:07:1f:bb:61:68:
c2:de:22:da:79:53:df:51:49:8a:4b:6a:11:dc:51:60:05:11:
bd:9a:9c:a4:95:2c:e7:95:6b:fb:a8:4e:35:c7:4e:f0:d5:2f:
1a:c8:ed:d3:c9:73:93:4b:fa:eb:5d:91:c3:b7:f3:05:c7:7a:
7a:05:16:a4:87:11:9a:8a:f3:69:4e:6d:99:f9:c6:45:2e:0a:
23:79:f7:b9:92:ae:58:1d:bf:31:b4:da:2e:0e:c5:59:e4:1c:
8c:2b:b2:51:09:71:f8:f6:af:2c:13:86:a3:a5:ff:e8:83:24:
d4:86:f8:00:7c:46:d3:e8:02:78:8f:94:1d:86:a8:30:17:9c:
5f:97:28:0f:b8:e9:fa:00:9b:21:f5:9c:1a:a5:a1:28:4b:f3:
f4:62:45:8d:0c:a7:c0:f3:e2:9d:fc:31:10:e2:1c:77:d8:8f:
6c:5b:ed:13:ef:f3:4e:0f:48:7d:00:18:ac:14:45:3d:c9:2f:
72:59:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:33 2026 by rpki-client