Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549537AC0CAB11F1BDBB06F0DAE4EC9C.roa
File: 549537AC0CAB11F1BDBB06F0DAE4EC9C.roa (raw, json)
Hash identifier: CkiCp0+TTH0MwvGV32rd/c59ecCSKJgslMIsFIRezO8=
Subject key identifier: 4E:F8:DE:98:35:CA:F5:47:2A:28:60:5E:37:4D:38:46:EA:18:7C:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549537AC0CAB11F1BDBB06F0DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 09:22:23 +0000
ROA not before: Wed 18 Feb 2026 09:22:16 +0000
ROA not after: Tue 05 May 2026 09:22:16 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
154.208.32.0/24 maxlen: 24
154.208.33.0/24 maxlen: 24
154.208.34.0/24 maxlen: 24
154.208.35.0/24 maxlen: 24
154.208.36.0/24 maxlen: 24
154.208.37.0/24 maxlen: 24
154.208.38.0/24 maxlen: 24
154.208.39.0/24 maxlen: 24
154.208.40.0/24 maxlen: 24
154.208.41.0/24 maxlen: 24
154.208.44.0/24 maxlen: 24
154.208.45.0/24 maxlen: 24
154.208.46.0/24 maxlen: 24
154.208.47.0/24 maxlen: 24
154.208.48.0/24 maxlen: 24
154.208.49.0/24 maxlen: 24
154.208.52.0/24 maxlen: 24
154.208.53.0/24 maxlen: 24
154.208.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113186 (0x1ba22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 09:22:16 2026 GMT
Not After : May 5 09:22:16 2026 GMT
Subject: CN=699584ce-5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:83:97:e2:b7:21:51:83:88:74:44:3c:3a:
02:a0:3c:e6:66:0f:45:98:17:3e:d1:11:66:26:71:
9d:5f:ae:2f:29:92:35:b6:ce:28:54:76:09:48:02:
e6:c5:bc:87:fb:35:1b:6b:ea:49:01:38:2d:ef:78:
19:74:50:f1:c7:11:1d:9f:ea:71:0d:8c:79:4d:f9:
f6:54:5c:fb:0e:bf:b5:d1:e2:83:35:dd:c6:2f:8a:
7e:01:1f:97:e7:1f:c8:da:b0:dc:38:02:dc:b8:85:
22:0e:25:08:f0:6e:8d:9e:b7:d4:ee:39:1a:9d:46:
9a:97:c1:b3:55:7e:7d:d0:cc:84:e4:57:55:cd:ce:
70:9a:d7:c5:2a:17:59:f4:da:dc:c0:69:6a:b4:47:
35:68:55:d0:d4:0b:4c:68:7e:40:31:e0:d0:de:7b:
f6:97:46:3b:6e:7d:f1:dc:3b:31:d3:7f:5b:95:d0:
1a:a2:aa:44:6a:d8:a5:fc:3d:9f:81:e7:ae:4f:5b:
ff:10:18:4c:1a:1c:8c:21:09:40:b3:97:14:dd:69:
25:27:9c:97:33:d2:47:bd:5e:ab:d7:f8:3f:ab:e5:
dc:41:f9:d4:5e:52:f8:11:1b:fb:3d:35:ac:41:cf:
e1:fb:0b:71:96:69:dc:b0:03:bb:6b:d6:fb:ad:34:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F8:DE:98:35:CA:F5:47:2A:28:60:5E:37:4D:38:46:EA:18:7C:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549537AC0CAB11F1BDBB06F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:85:be:0a:a0:d1:77:68:76:db:41:d3:66:29:15:9a:6a:84:
0a:04:e1:f3:c0:d0:c2:e1:1b:e2:96:50:d2:e2:b6:91:af:38:
5b:6d:5e:32:d1:a1:3c:2a:bd:d6:34:31:73:aa:60:02:4a:cd:
af:fd:83:46:c2:dc:19:c8:da:8b:88:2e:9e:e8:24:bb:6d:64:
4e:40:7b:cf:13:be:05:d0:8a:cc:aa:4d:90:1e:df:6f:b5:dc:
cd:98:bc:03:e4:ad:3d:0d:e1:f1:6f:ea:de:b5:27:58:50:26:
bf:a1:37:79:5d:97:71:17:ae:4e:67:0b:90:a0:8c:f7:66:8b:
d7:34:88:9e:a7:94:63:fb:41:2c:5a:f6:38:a7:55:1e:38:e1:
64:7a:0c:58:19:cd:f6:67:f9:32:fa:57:36:ee:cf:2d:6c:cd:
ce:26:fe:4d:5e:89:47:63:af:9c:c6:c1:d1:a0:dc:ec:e8:58:
75:c8:5a:26:89:dd:9f:2e:0f:8e:9e:09:c1:bd:a6:9f:e7:0c:
b2:e3:2f:25:cd:71:92:df:92:65:1c:ed:9a:58:db:7f:e9:cd:
5f:4e:56:4f:50:e8:19:40:3e:ff:1d:73:23:03:08:34:20:db:
e2:c6:46:d4:11:3b:80:33:4b:de:71:bc:cb:c1:5f:49:51:06:
57:83:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:32 2026 by rpki-client