Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EAFC36040611F182FFE6D2DAE4EC9C.roa
File: 80EAFC36040611F182FFE6D2DAE4EC9C.roa (raw, json)
Hash identifier: 98Lkxq3Yu4d3NyfRUHdGogNNnA/XPERIf6AGEKddDwM=
Subject key identifier: 1E:69:D0:84:6F:0A:CA:7A:0E:DE:8F:B4:36:77:71:DA:1E:AD:2F:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EAFC36040611F182FFE6D2DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 09:22:21 +0000
ROA not before: Sat 07 Feb 2026 09:22:16 +0000
ROA not after: Mon 16 Mar 2026 09:22:16 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112850 (0x1b8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 09:22:16 2026 GMT
Not After : Mar 16 09:22:16 2026 GMT
Subject: CN=6987044d-e6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:11:ca:48:41:7d:58:8d:34:b1:69:37:6f:
e3:d6:22:41:e6:d0:94:08:32:9f:af:06:9c:db:a9:
07:9a:9f:c3:f8:a2:2c:e9:f2:dd:67:26:47:c0:98:
90:4c:66:49:93:e0:39:cf:34:81:ce:c5:02:0e:ca:
2a:68:6a:5c:b5:ff:2a:bb:7f:1d:e9:3c:71:2c:d9:
e1:dd:fc:6a:29:47:6a:ec:8e:54:ac:22:4f:f2:63:
33:ed:da:41:30:97:d7:f1:c7:b5:70:ab:67:ac:66:
7b:86:a4:fe:56:b7:f5:39:34:1e:29:f7:ee:c2:e2:
18:55:8a:29:62:93:00:4d:94:57:54:0f:1a:87:b0:
dc:57:b6:fd:90:01:46:fa:77:2f:80:d5:f3:65:60:
78:c6:3a:50:18:e2:44:4c:60:0b:e7:43:8b:a5:ad:
74:85:4c:85:7d:c6:55:ba:32:b9:c3:5a:6f:f7:c4:
3e:38:fe:da:1b:c9:f7:73:38:1e:7b:57:ca:6e:b0:
0d:e5:a2:7f:e0:34:3f:c5:56:f4:61:0e:60:5d:ed:
7a:2e:da:1e:9c:6f:1b:92:00:dd:02:81:3b:ec:77:
7b:e3:1a:0d:18:5b:ee:42:db:54:b7:7f:13:94:f9:
ee:76:38:03:92:86:4e:17:35:82:b9:f5:c4:31:d6:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:69:D0:84:6F:0A:CA:7A:0E:DE:8F:B4:36:77:71:DA:1E:AD:2F:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EAFC36040611F182FFE6D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:91:6d:b2:9a:0f:8a:36:40:91:41:ea:e8:75:c6:cf:88:a6:
fb:69:fc:bb:4e:17:8a:b0:f9:dc:b8:c2:1c:ea:97:76:49:36:
41:f5:0d:8d:ac:92:04:be:5e:a6:dc:c7:7c:f6:1c:95:fc:5b:
10:1f:bf:3a:ed:42:af:04:f8:74:5f:db:57:7f:3a:16:e0:4c:
17:ad:e0:7d:af:27:5e:ad:ac:f3:42:6f:34:a3:b9:3e:c7:c7:
3e:66:5a:26:bf:bd:98:44:3a:74:b4:bf:38:7c:85:ee:6b:bf:
2b:2d:30:dc:ff:5b:b4:c8:b8:78:97:7d:8a:0b:c2:c8:34:32:
32:e5:22:79:14:d8:d6:54:c5:8f:02:1a:2a:49:7b:34:07:da:
f9:2a:8e:59:4a:87:4b:f7:c0:b1:e6:43:34:53:ac:30:c2:57:
9f:ba:bb:db:6a:50:e2:ac:64:66:4c:89:85:26:3c:19:9c:8d:
11:0a:91:75:3b:8d:dc:eb:12:0b:8a:03:93:2a:3b:8f:69:61:
19:36:e3:5a:f3:65:b5:2c:03:4d:7a:bb:d1:ac:5a:13:a3:87:
79:d0:92:f4:d2:be:9f:bc:1f:9f:f2:cf:1f:3b:a6:0c:fe:17:
b3:54:39:64:37:4c:72:05:a8:8e:25:7d:91:17:ae:28:c2:44:
1c:e9:98:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:03 2026 by rpki-client