Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9F3A322A8311F1B830D4B2DAE4EC9C.roa
File: 8F9F3A322A8311F1B830D4B2DAE4EC9C.roa (raw, json)
Hash identifier: 5RgxhaYn+VY/La2XRe6q96aYCHBfg9uQyHFRfJ0G/N4=
Subject key identifier: 51:06:78:BD:D3:67:53:C2:54:91:6D:30:BA:A9:4C:E7:AA:EF:40:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C13F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9F3A322A8311F1B830D4B2DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 08:53:17 +0000
ROA not before: Sat 28 Mar 2026 08:53:12 +0000
ROA not after: Sat 02 May 2026 08:53:12 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115007 (0x1c13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 08:53:12 2026 GMT
Not After : May 2 08:53:12 2026 GMT
Subject: CN=69c796fd-35e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:af:ec:24:2f:b5:4b:67:3e:d5:b8:2d:7a:
cd:38:8e:78:13:fe:a8:21:d4:9c:7a:98:fa:0b:41:
1a:6e:ac:ea:af:03:f9:81:9f:cd:36:aa:49:6c:21:
af:ff:c9:df:e8:06:44:df:62:0d:bb:3b:ff:ca:59:
3f:55:ce:46:78:46:87:77:e0:fc:d4:b8:cc:eb:0d:
ae:4e:b3:88:8f:37:1b:a5:c2:13:5e:de:67:fe:ba:
36:e6:2d:86:ee:dd:33:56:5c:aa:4c:bf:b6:7a:58:
c9:04:f9:af:0b:bc:87:9b:9f:f6:44:fb:bc:56:f2:
df:3c:e9:9f:79:5b:1f:23:23:a2:c4:f4:33:b7:9b:
2b:8f:7d:7f:7a:4b:1d:96:b4:98:da:96:fa:9a:a6:
37:95:22:e2:21:9f:0f:25:9c:86:7e:60:42:0c:4e:
f7:06:e2:d5:57:4e:00:68:96:d8:79:f2:53:1f:66:
f0:13:23:ff:e7:f2:97:c8:be:a2:3e:ca:e6:69:57:
9f:db:ff:84:17:3d:4d:3a:6d:76:4b:e8:14:2e:01:
ed:f3:97:27:37:17:ab:8a:9f:8b:38:c2:ea:46:9b:
ba:83:04:0b:22:70:f8:42:7c:7b:ba:51:17:5b:ce:
9a:64:cd:ce:77:ec:8a:e8:3d:d7:11:48:06:43:c4:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:78:BD:D3:67:53:C2:54:91:6D:30:BA:A9:4C:E7:AA:EF:40:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9F3A322A8311F1B830D4B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.223.255
154.203.226.0-154.203.228.255
Signature Algorithm: sha256WithRSAEncryption
33:0f:24:af:9d:95:c3:06:d1:f1:5d:1e:a8:0f:64:4a:10:a8:
51:0f:fb:e7:c9:ca:d2:f2:46:a5:a0:35:bf:5b:e4:dc:7e:48:
15:7f:30:b1:e5:ac:05:52:db:25:67:39:68:6a:15:dd:e6:1e:
f5:01:67:9e:55:69:7b:7d:24:3b:ed:99:23:36:83:58:c6:2a:
1a:b7:97:91:47:3f:e7:70:56:68:b8:c7:fe:11:2a:94:6f:d3:
8d:14:3b:49:05:ee:a1:d5:36:11:aa:90:cb:da:97:4a:eb:4e:
5e:53:a1:da:19:89:cd:54:54:1c:c3:82:fd:22:c2:58:89:92:
8c:51:b6:01:16:25:5f:d5:ff:ce:96:f6:dc:c6:76:e6:85:4b:
a3:e2:12:13:ed:4a:65:d8:08:39:27:2b:1b:02:85:51:98:81:
1e:55:38:df:05:68:25:e4:2f:90:8a:84:86:f3:2a:12:b3:bc:
05:69:37:dc:f6:96:a5:2a:22:3d:c1:a3:ee:2b:28:90:9d:9a:
29:43:3c:85:64:ac:c3:40:9b:84:90:18:39:d1:61:94:e8:95:
f7:d3:61:dc:a5:8c:fa:ac:90:41:c9:da:7f:ad:6d:cb:e1:95:
25:15:62:d5:6d:25:53:d4:a6:0c:f2:77:5e:e5:3e:a5:32:c6:
e5:82:d3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:22 2026 by rpki-client