Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4421B83E0B0A11F1820D6DEDDAE4EC9C.roa
File: 4421B83E0B0A11F1820D6DEDDAE4EC9C.roa (raw, json)
Hash identifier: SyQI//QoykaZvYU8cX62aVwcc8YC4bsOoJeSY/6pmn8=
Subject key identifier: C4:16:33:99:F3:AB:25:49:93:0F:1A:C8:76:4C:66:92:22:F2:2F:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4421B83E0B0A11F1820D6DEDDAE4EC9C.roa
Signing time: Mon 16 Feb 2026 07:36:56 +0000
ROA not before: Mon 16 Feb 2026 07:36:50 +0000
ROA not after: Mon 09 Mar 2026 07:36:50 +0000
asID: 200373
IP address blocks: 154.193.152.0/22 maxlen: 24
154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
154.213.160.0/21 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113072 (0x1b9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 07:36:50 2026 GMT
Not After : Mar 9 07:36:50 2026 GMT
Subject: CN=6992c918-76ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:4f:92:fc:f9:b6:c3:b6:55:f4:47:18:ea:
ff:15:cb:81:be:b2:2d:9d:54:ff:59:67:5a:ec:12:
c7:83:e3:45:ae:0b:c9:6e:0b:55:11:cb:71:6f:51:
c8:f5:5c:7a:19:e9:24:3c:74:f8:f3:dc:cc:c9:7b:
cf:59:e4:de:9d:14:21:68:8f:65:2a:52:5d:c6:00:
89:9b:fa:3b:11:ea:78:58:82:5e:e6:81:6e:2d:c4:
b8:c9:bf:16:19:71:85:da:5c:12:d6:e9:2b:6d:23:
f6:e7:39:2e:ab:ee:89:92:40:b7:e5:e8:4a:26:b9:
73:6f:8c:78:28:95:57:4f:55:2a:04:5c:61:aa:e9:
22:08:f7:ad:18:9b:40:3f:78:dc:53:c2:08:b5:e8:
dd:c7:78:de:80:f9:32:ec:0c:59:a6:0f:75:3c:be:
e0:0b:d9:c5:c7:5b:f4:ab:37:35:e3:38:32:39:e9:
ad:fe:6b:e4:2e:c1:ae:b8:23:0c:be:97:09:e5:db:
a3:03:78:10:27:37:f2:0a:de:90:aa:0c:1b:d2:ad:
0c:09:85:d8:d4:97:9f:b4:01:4f:8c:f4:3f:1b:61:
d9:35:57:fa:ff:e5:a7:95:bd:82:94:cb:b0:56:24:
ff:22:c9:7d:6e:9f:aa:58:68:c0:e1:a1:1f:21:b9:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:33:99:F3:AB:25:49:93:0F:1A:C8:76:4C:66:92:22:F2:2F:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4421B83E0B0A11F1820D6DEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
154.213.160.0/21
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:27:56:61:8f:b7:e3:9f:92:13:40:d6:cd:64:60:b2:54:6c:
93:fc:92:ec:09:48:82:d0:15:7b:16:a1:33:c7:a2:14:fa:9f:
47:59:15:17:3a:a2:6f:2f:44:7a:e8:3d:d9:06:63:f0:73:80:
0c:8d:45:68:38:d6:72:f4:f9:b2:ee:e9:76:53:6c:8f:7c:eb:
07:d5:11:74:0c:6e:3a:21:89:14:93:d3:5e:aa:e0:d7:4d:72:
ad:dd:81:23:90:b3:61:a5:12:29:8c:74:30:08:9a:ee:ad:c6:
45:ca:5f:32:16:e1:fa:a8:6c:c7:04:b1:8b:5d:33:33:ee:20:
0e:7a:9e:f8:4a:1f:db:fb:f7:31:ce:71:b8:39:0c:a5:a3:a3:
0c:82:18:99:2e:8a:c2:01:94:b5:4d:c6:c9:67:c4:af:f9:c7:
be:98:fd:d4:92:63:a8:c8:3d:28:0e:75:54:17:01:1e:bc:9c:
33:bf:aa:21:43:6a:04:22:86:71:f8:b6:ce:4e:d2:30:38:0d:
e6:47:d6:3a:d7:ab:16:16:dc:55:14:0d:30:9b:5c:5e:73:11:
2e:f6:bf:d3:e6:ab:0a:e7:0f:e0:9a:7f:e8:d6:c3:80:f6:26:
a8:f3:a9:ce:35:d2:a2:8b:1e:76:79:3a:62:ee:e5:a7:bc:06:
4f:60:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:51:24 2026 by rpki-client