Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/922E2DAE2F3C11F1B56C9E7DDAE4EC9C.roa
File: 922E2DAE2F3C11F1B56C9E7DDAE4EC9C.roa (raw, json)
Hash identifier: wV+gvDhQJVUynEc2gXawr8U3m41QI3bS1yK1zhjgH7Q=
Subject key identifier: AD:26:EB:EF:45:73:24:D8:3E:22:6C:46:A2:CE:BF:8E:89:2D:32:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/922E2DAE2F3C11F1B56C9E7DDAE4EC9C.roa
Signing time: Fri 03 Apr 2026 09:07:43 +0000
ROA not before: Fri 03 Apr 2026 09:07:38 +0000
ROA not after: Tue 03 Apr 2029 09:07:38 +0000
asID: 17561
IP address blocks: 154.197.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115374 (0x1c2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 09:07:38 2026 GMT
Not After : Apr 3 09:07:38 2029 GMT
Subject: CN=69cf835e-fbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:be:53:71:ef:4c:31:bf:a7:21:c9:b0:3d:9f:
d1:ea:5c:e7:6f:33:10:55:5c:d5:d0:9b:1e:c6:6d:
93:b7:85:6b:88:24:1e:fd:87:d3:b3:c7:51:92:d8:
a0:6d:8e:b2:cc:6f:91:87:dd:07:5c:2a:59:71:11:
b2:e4:20:8a:b3:49:6d:a2:44:53:09:85:a4:ad:ff:
d4:a2:56:af:9f:0a:e8:84:81:44:00:5e:42:df:c7:
ac:ac:e1:73:33:87:ff:f3:58:a1:23:30:9e:6e:d6:
fd:b0:e8:61:12:89:04:d9:bc:05:84:15:2b:5b:7f:
99:ce:9b:28:3a:a9:f2:0a:6f:2b:49:5a:4d:cd:9b:
7d:8c:50:09:ed:db:2a:cd:e6:cd:4e:14:62:51:fc:
47:7e:8d:80:26:17:93:86:55:cc:51:e0:26:39:93:
43:a0:e6:43:b9:00:94:92:7e:da:3a:30:ff:cf:c0:
58:23:7e:b4:bd:ef:87:c4:21:17:60:a7:d6:fd:29:
d1:da:fe:97:f1:dc:b0:69:fd:e1:e7:82:f5:86:22:
f5:1a:71:99:e8:2d:37:4e:50:d2:08:72:d5:f7:71:
d0:53:20:fb:ce:76:9c:3a:64:12:ee:3e:20:68:f9:
8f:fa:c5:c5:21:bd:51:ce:19:be:cd:08:ba:5b:6d:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:EB:EF:45:73:24:D8:3E:22:6C:46:A2:CE:BF:8E:89:2D:32:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/922E2DAE2F3C11F1B56C9E7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:83:93:04:49:0d:bd:b4:ee:32:8e:a8:19:a2:50:38:ae:b4:
54:54:b0:de:a9:2b:d3:93:c9:43:9c:89:27:91:20:86:a5:7b:
6f:e2:57:cb:da:0a:78:6e:3d:a8:dd:27:2b:3a:65:9c:65:b9:
26:22:47:5e:ca:08:5a:82:f8:76:f0:62:ab:d4:b7:4a:8a:05:
f2:45:6d:bd:dd:72:64:c1:b3:19:e7:d9:59:f8:11:47:5d:78:
54:57:1f:d8:ca:c0:11:07:dd:ec:f1:be:d4:e8:c5:ac:71:02:
c4:73:47:53:79:b5:6d:58:c3:4a:d4:d2:2e:6a:8c:1e:3d:64:
5c:9e:f6:40:ee:75:32:c4:92:8c:73:9d:24:9b:0c:6f:e7:02:
2f:a7:c5:03:8a:5d:91:32:f4:c3:4a:39:c1:43:47:db:7d:1c:
f6:9a:9f:2b:f4:56:90:7c:a2:06:3c:24:d5:20:f7:00:67:d8:
93:2f:07:f6:fe:e6:f7:ba:c1:fd:5b:59:bf:24:e2:24:16:4a:
2d:01:32:0f:97:31:6c:fc:8b:4f:3d:0d:70:77:ec:d4:9b:92:
b6:05:7f:30:9f:8a:02:3e:a2:8c:de:68:82:70:68:3d:97:0a:
c7:ef:0b:8f:25:fb:fe:ac:79:48:23:b1:18:59:90:b0:66:d4:
00:bf:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:39 2026 by rpki-client