Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7372333A122511F19F8AF29CDAE4EC9C.roa
File: 7372333A122511F19F8AF29CDAE4EC9C.roa (raw, json)
Hash identifier: X8/OcwySad3/vLJzwNAE/mvDAVrpyiHc2idMQXdpo38=
Subject key identifier: 37:D3:A3:76:24:F4:03:79:BA:C1:E0:BF:23:39:F2:10:C6:C4:02:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7372333A122511F19F8AF29CDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 08:39:08 +0000
ROA not before: Wed 25 Feb 2026 08:39:04 +0000
ROA not after: Wed 01 Apr 2026 08:39:04 +0000
asID: 62240
IP address blocks: 154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113555 (0x1bb93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 08:39:04 2026 GMT
Not After : Apr 1 08:39:04 2026 GMT
Subject: CN=699eb52c-6eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:de:ff:49:45:9d:8a:cc:db:e0:1f:30:93:
90:6a:38:36:cd:47:2c:10:13:3e:63:6f:86:ea:50:
c9:c3:0e:95:5f:21:0f:f3:59:68:a0:fe:f3:26:eb:
22:4a:e7:30:e8:34:ce:f6:0a:fc:d2:63:61:d7:a7:
85:4f:d4:19:9f:1b:13:e0:f0:52:e5:a2:8d:0a:5c:
3b:e4:26:0f:a4:d8:58:87:e9:33:71:ae:a5:dd:08:
ff:8f:25:bb:74:a0:df:77:9e:b3:a0:76:c5:a1:52:
b6:76:07:53:10:9b:97:4f:bd:57:74:37:d3:c0:02:
9b:72:20:40:3f:cf:b4:06:9b:f4:70:00:14:4f:87:
4c:58:a5:49:71:3d:ba:bc:7c:d6:aa:7b:fd:4d:6c:
9b:03:5c:ac:03:98:51:65:a8:d3:d6:54:3b:01:7b:
b3:5f:55:7d:f6:55:d7:54:bb:56:0f:61:0b:bb:5e:
ae:8e:12:93:b5:b1:6e:d4:75:f8:85:90:77:1f:d0:
be:ad:7b:d9:7d:3c:68:32:99:09:c4:b6:8f:47:d4:
d1:d3:77:39:20:42:3a:58:c9:45:0f:88:5e:56:2c:
92:69:3d:27:d1:4c:ad:c1:ed:4c:b7:41:df:52:28:
1d:3d:37:04:71:b1:78:a2:84:4b:57:29:48:94:16:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:A3:76:24:F4:03:79:BA:C1:E0:BF:23:39:F2:10:C6:C4:02:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7372333A122511F19F8AF29CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.218.0-154.223.223.255
Signature Algorithm: sha256WithRSAEncryption
41:a4:9b:8f:6a:b6:3f:eb:74:28:19:f1:c5:5d:fb:49:37:f0:
b2:8d:dc:0c:d9:d2:24:fa:1a:fc:d6:d7:f6:c9:21:05:29:ec:
dc:fb:05:dc:e9:70:0f:81:4f:52:a9:e6:36:32:af:8c:9c:02:
26:e8:fa:3d:20:86:d3:f1:9c:49:39:3e:73:4c:34:40:7b:ad:
3d:5c:12:f3:78:1e:db:12:17:82:3b:72:31:59:cb:04:bc:e9:
83:33:3d:40:3b:53:ce:be:5c:a9:1c:71:70:24:e4:c2:76:2c:
8b:94:94:4e:3f:9e:54:2e:a9:5c:c4:ec:ab:a5:2d:a0:6d:76:
88:3a:52:50:25:e1:3a:1d:81:cf:6b:20:47:26:0c:6d:a8:7f:
1e:99:82:e2:a1:5b:98:49:92:6d:87:68:55:c6:c1:09:59:75:
6a:dc:cd:9d:41:cf:c6:e3:23:85:12:b1:93:98:ea:bd:13:80:
5e:72:53:09:ab:4e:29:51:ea:04:90:67:8a:22:93:09:a5:ad:
6c:9d:62:a0:28:ae:4a:c0:6a:e2:1d:ec:ba:be:1c:8f:5d:e9:
ce:90:84:6b:e5:3a:1d:75:ff:45:37:4c:c9:3f:3c:2e:b1:04:
52:98:6e:20:9c:88:15:8f:44:1b:02:a8:4e:26:bc:02:41:d7:
d1:68:70:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:11 2026 by rpki-client