Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23B09204156011F1AB4EBDE7DAE4EC9C.roa
File: 23B09204156011F1AB4EBDE7DAE4EC9C.roa (raw, json)
Hash identifier: RpRqvjSSBnm+iyPquDIrHKgugGwOBrN6rrMy77CkuQs=
Subject key identifier: 44:A3:92:A9:EE:7E:61:84:EF:BE:10:79:BB:91:16:05:DF:D9:E4:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23B09204156011F1AB4EBDE7DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 11:16:49 +0000
ROA not before: Sun 01 Mar 2026 11:16:44 +0000
ROA not after: Sun 05 Apr 2026 11:16:44 +0000
asID: 202656
IP address blocks: 154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113802 (0x1bc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 11:16:44 2026 GMT
Not After : Apr 5 11:16:44 2026 GMT
Subject: CN=69a42020-e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:96:25:21:1d:21:08:a2:d3:43:1b:e2:2e:
a4:b4:21:34:2d:e5:c9:4a:99:70:2a:7a:41:00:9d:
2b:f5:17:70:4b:de:26:c0:95:a8:fe:cb:5b:35:25:
d4:1e:3b:aa:36:1f:2f:a2:44:5d:2c:78:c3:0e:e9:
03:d4:cd:b0:bf:81:89:54:5b:2d:29:71:c8:f8:44:
77:7b:27:db:7a:8b:be:e8:59:14:c2:f4:86:08:31:
ae:81:8c:ba:b3:97:e1:6a:64:6a:2a:0e:5c:65:e9:
c9:95:3a:ec:bf:00:57:ff:94:d7:19:8e:cc:14:a9:
46:76:a7:77:69:5d:dd:8d:04:1e:39:94:b9:df:89:
d6:58:94:4c:cc:20:05:9c:65:b8:41:1c:0e:ad:61:
76:fe:be:3a:63:c7:3c:53:f4:8f:95:81:11:60:ee:
16:12:8c:04:76:e0:f5:99:01:70:d3:59:75:77:39:
e8:54:9c:0d:87:5b:a1:a4:41:39:88:6c:a7:a5:45:
b8:d9:6a:65:62:5a:fe:49:6b:53:d5:60:6b:51:f4:
62:41:11:cd:89:f0:37:1e:0c:04:39:02:1c:fb:24:
20:b9:97:96:8e:62:df:45:48:c9:24:e4:82:7a:b9:
fe:52:f1:17:bd:e6:f2:17:1c:52:ae:73:6c:a4:91:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:92:A9:EE:7E:61:84:EF:BE:10:79:BB:91:16:05:DF:D9:E4:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23B09204156011F1AB4EBDE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.217.0-154.219.221.255
154.219.223.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:6b:93:af:ee:2a:0e:5a:64:82:00:a8:0b:2b:5b:af:bb:21:
7c:66:b7:11:2c:04:1b:79:a4:d4:ab:22:c7:fc:3a:1f:b9:4e:
66:65:f6:fc:61:31:e6:2e:df:09:89:5c:69:74:4b:da:b5:30:
06:9a:b0:d0:5f:c7:73:f7:a9:42:79:ae:c3:99:eb:31:f5:66:
26:5a:52:38:d8:ef:b1:5a:78:a0:8f:ed:70:32:ea:e4:e3:ee:
22:6f:83:f8:89:97:6c:55:02:ae:c1:0d:b7:e6:c6:30:cd:4c:
d2:49:da:81:21:f0:37:00:05:f4:cc:01:98:5c:e8:cd:90:d3:
ee:31:73:59:5b:47:c3:4e:b8:85:ba:27:f9:41:28:eb:1c:52:
98:cc:f4:7d:af:6b:68:00:03:43:c6:59:1e:79:d2:89:ce:a3:
14:84:d7:3e:68:b9:0e:94:d7:84:a7:7e:3b:f0:46:d6:f5:f9:
e0:5d:df:57:c7:fa:ed:24:72:85:86:ba:a0:84:b1:43:04:07:
d7:ba:ee:28:97:e0:a2:24:c4:c9:08:a8:19:14:2b:57:27:15:
d9:32:13:6d:8f:75:d5:b4:d1:ac:c6:2e:58:3d:ca:48:ef:08:
62:1a:45:ca:e0:0a:5b:6b:2e:11:7f:c1:5e:e6:11:2d:e1:33:
95:92:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:48 2026 by rpki-client