Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BEEDAD233E811F1BE320315CF1D38B0.roa
File: 8BEEDAD233E811F1BE320315CF1D38B0.roa (raw, json)
Hash identifier: q+u5BOhJl59sTqLFlE0iX4C7pr0HVaqdL+jxorap8/c=
Subject key identifier: FA:32:44:E0:38:18:DD:75:86:AB:3D:12:AD:43:7D:E7:31:B0:10:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C395
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BEEDAD233E811F1BE320315CF1D38B0.roa
Signing time: Thu 09 Apr 2026 07:48:50 +0000
ROA not before: Thu 09 Apr 2026 07:48:45 +0000
ROA not after: Mon 09 Apr 2029 07:48:45 +0000
asID: 17561
IP address blocks: 154.215.222.0/24 maxlen: 24
154.215.223.0/24 maxlen: 24
154.215.224.0/24 maxlen: 24
154.215.225.0/24 maxlen: 24
154.215.226.0/24 maxlen: 24
154.215.227.0/24 maxlen: 24
154.215.228.0/24 maxlen: 24
154.215.229.0/24 maxlen: 24
154.215.230.0/24 maxlen: 24
154.215.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115605 (0x1c395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 07:48:45 2026 GMT
Not After : Apr 9 07:48:45 2029 GMT
Subject: CN=69d759e2-3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:e9:26:60:5f:d3:17:42:72:78:02:40:9d:
36:cd:05:1e:c9:54:c2:d2:0d:38:33:7d:ba:da:ca:
5b:2a:60:7c:e0:ac:fe:4f:d5:1c:8e:c7:51:ba:b2:
f7:24:e3:9b:65:c3:63:41:36:d2:7a:d9:a7:53:6d:
93:f9:de:d4:ef:a5:24:9a:65:eb:29:e8:29:8a:99:
19:33:80:8b:d7:9c:ba:2a:53:5f:e2:3f:f9:fa:8d:
1b:e2:07:09:2b:37:d8:53:45:45:90:75:ea:e5:52:
c6:f5:43:fc:b7:82:5f:8c:db:7a:4a:89:0f:e1:37:
0c:da:92:43:e9:ad:aa:08:2d:0a:40:1d:60:80:ce:
78:b2:70:1f:d3:bc:fb:ff:8d:b3:17:91:94:20:c6:
7e:5c:b8:42:96:1b:95:aa:15:46:34:66:7b:bc:86:
32:57:8f:33:bb:b4:de:bf:aa:f4:b8:d1:48:fc:5c:
de:e5:19:02:2d:7c:c1:c6:ce:6f:82:5e:87:fa:6b:
de:92:7a:29:15:15:17:b4:48:24:05:3a:68:05:e2:
1e:b7:ab:1f:23:13:cf:ed:53:6e:bb:fc:9a:d1:26:
06:6f:93:13:10:0f:db:66:34:fb:64:08:7d:4b:a4:
f4:79:7a:ce:26:33:ca:5e:fd:c9:de:c9:c7:a2:be:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:32:44:E0:38:18:DD:75:86:AB:3D:12:AD:43:7D:E7:31:B0:10:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BEEDAD233E811F1BE320315CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.222.0-154.215.231.255
Signature Algorithm: sha256WithRSAEncryption
ae:c9:d0:e1:fd:47:05:71:26:19:77:37:85:33:1a:bd:b8:d2:
30:6f:df:b5:3a:91:8b:2c:08:ad:e9:55:63:eb:0f:95:32:52:
e6:5c:ae:f1:a7:40:20:ca:80:d1:27:59:34:6a:06:a3:c6:72:
89:81:63:1f:dd:92:a6:77:b1:04:3e:ab:79:aa:94:79:b4:d9:
87:9d:46:1a:b1:63:6a:fe:16:bd:99:3d:40:ad:67:92:fc:07:
84:89:48:81:26:0c:b6:69:f9:37:df:72:0b:05:fe:44:eb:f8:
09:c0:4a:d5:7b:0e:5f:9c:80:98:52:64:8d:89:bc:e9:68:9d:
67:a4:1d:ad:d0:e3:37:cb:6c:3f:b5:09:ad:c8:ea:89:eb:85:
db:26:9d:e9:9e:c2:8c:dd:53:7a:67:e8:30:7d:1a:a6:94:2c:
fd:f1:7c:46:94:db:5d:fc:94:93:e1:5f:2e:3d:4d:95:e9:ad:
0d:39:61:69:10:53:4e:62:f5:69:a5:2d:2a:a2:0a:df:a1:54:
1d:85:07:c6:3b:b0:94:66:ea:d4:95:09:86:a7:c7:cd:26:b7:
97:ad:f8:2b:05:0f:46:87:60:fb:20:e7:95:51:ae:dc:b2:b0:
e4:94:71:4f:98:84:f8:d2:e2:f5:fe:fa:4c:0f:b3:2e:7d:8e:
54:65:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:49 2026 by rpki-client