Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280D016C2EAA11F18778779BDAE4EC9C.roa
File: 280D016C2EAA11F18778779BDAE4EC9C.roa (raw, json)
Hash identifier: qORVoRQMgvbU1pKwl/Vsx9UBboemH8/5qP/qDfSEM90=
Subject key identifier: 73:50:5C:1B:4D:34:A0:65:20:95:14:83:E9:56:FA:16:FB:1A:BD:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C261
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280D016C2EAA11F18778779BDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 15:39:38 +0000
ROA not before: Thu 02 Apr 2026 15:39:33 +0000
ROA not after: Sun 10 May 2026 15:39:33 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115297 (0x1c261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 15:39:33 2026 GMT
Not After : May 10 15:39:33 2026 GMT
Subject: CN=69ce8dba-4ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:71:de:e5:d8:f7:04:66:70:8d:3a:a4:d3:
e3:18:98:49:e9:9b:4a:d2:76:6d:a8:af:42:2d:b9:
89:b1:de:16:3b:9a:50:ad:fb:ac:b7:e8:7f:98:f0:
e8:a9:2f:9f:a4:5a:b5:1c:ef:1e:74:ae:f4:f4:ef:
d4:95:9c:a4:96:19:1c:b1:24:fd:c4:c2:3b:e1:f8:
71:b1:32:f7:29:3a:aa:71:b6:e3:b9:ce:9c:b5:42:
38:39:15:52:8a:60:89:26:f6:b2:4c:59:52:62:03:
24:ae:e2:c8:56:95:08:b9:3e:8e:63:47:cd:3c:80:
f8:c3:ba:f9:8a:ef:79:27:fb:8a:69:9b:4c:ca:51:
a8:8e:64:e4:6b:55:ae:2d:f1:7a:51:2a:fb:7a:5b:
93:fb:b8:43:05:c2:49:33:99:fa:97:fe:68:f1:d2:
a4:ab:d6:3f:8f:41:42:a3:fa:b2:07:da:9b:12:3a:
5b:2c:25:b2:5f:db:46:a8:81:dc:b3:3e:c0:ec:a2:
1a:49:84:c6:4c:86:bd:53:7c:73:48:f0:09:f3:90:
01:fc:61:31:62:a8:f7:0c:7a:62:bc:48:68:3d:29:
77:79:6c:a6:6b:29:74:a4:bf:1d:89:2a:cb:4c:7e:
0d:0b:79:cd:7e:18:bb:d1:e2:cd:a7:7a:07:53:72:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:50:5C:1B:4D:34:A0:65:20:95:14:83:E9:56:FA:16:FB:1A:BD:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280D016C2EAA11F18778779BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.24.255
154.223.26.0/24
154.223.28.0/23
Signature Algorithm: sha256WithRSAEncryption
30:dd:93:34:c7:0d:c6:0f:e6:39:01:52:a3:42:87:2d:a5:25:
e8:bb:74:91:5e:4c:71:c2:5d:bc:49:a5:f8:74:6e:af:0f:9a:
48:8b:7c:31:55:8e:80:ea:7a:18:a9:1c:99:2e:36:4b:2e:c5:
6e:19:9f:d1:ff:57:ae:65:18:93:99:d6:99:58:6b:e3:71:9f:
9c:a2:c5:34:55:73:6a:42:18:e4:0a:ab:2b:2d:bb:52:85:6a:
08:6d:81:5e:48:48:4d:bc:d4:bd:ea:60:1b:13:b9:71:ce:e9:
76:44:68:b8:e7:18:7b:53:82:f8:4e:37:f7:40:30:a5:d3:69:
cb:c4:8e:9b:b0:1d:0b:74:5a:40:52:2a:6c:69:d3:eb:b0:58:
98:8e:49:45:04:67:a2:2c:ed:f2:56:02:b3:c6:7f:44:f6:85:
cd:70:f6:79:ce:16:f5:3a:83:ac:9b:8c:29:4b:26:04:24:8d:
a2:17:dd:d9:de:6e:fe:39:94:47:b9:2b:e3:81:65:37:58:fa:
2d:b5:ae:a4:e5:f2:6f:97:12:23:8f:d7:b6:b3:36:46:c5:df:
af:9b:6d:67:b8:01:ae:fa:42:a0:19:ae:cd:f3:75:7d:e3:7c:
fd:82:f9:34:c2:d8:9f:f5:79:8e:f6:cf:cd:04:61:5c:01:44:
c7:04:78:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:36 2026 by rpki-client