Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A23D312E2E8111F18A34F5B3DAE4EC9C.roa
File: A23D312E2E8111F18A34F5B3DAE4EC9C.roa (raw, json)
Hash identifier: IWqmPjX8BvIvzF8h4ThQRZbcB7GHHNTljVKqFZZkLtg=
Subject key identifier: D4:60:5B:2A:22:0B:50:B7:53:AD:F9:BE:E9:E0:A6:10:31:E5:3E:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C237
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A23D312E2E8111F18A34F5B3DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 10:49:34 +0000
ROA not before: Thu 02 Apr 2026 10:49:29 +0000
ROA not after: Wed 06 May 2026 10:49:29 +0000
asID: 202656
IP address blocks: 154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115255 (0x1c237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 10:49:29 2026 GMT
Not After : May 6 10:49:29 2026 GMT
Subject: CN=69ce49bd-4453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:51:09:e3:39:42:05:65:6b:af:91:77:38:
11:8f:b1:9e:55:57:09:47:7a:cb:7b:90:32:c6:02:
1a:fb:81:ff:5e:36:76:44:ac:84:5a:e4:6d:79:81:
e5:a6:c6:af:eb:66:95:5a:ac:e2:58:06:f5:c4:7b:
1b:c4:15:07:65:d4:f9:fd:4d:53:d1:e3:c1:34:4f:
b5:3b:a8:87:df:f2:71:fb:d3:8b:f8:3f:02:32:3f:
1a:cf:a0:13:35:36:da:2a:43:96:c7:5e:17:c4:fa:
1f:1f:b3:a4:02:17:5f:11:46:47:e8:27:9b:32:52:
39:58:79:e1:51:d3:46:2a:c5:91:82:85:7f:46:24:
11:79:06:4e:22:bb:7b:74:55:16:81:24:f1:0a:82:
bb:d7:79:51:ff:46:fe:12:1e:48:4c:57:74:99:86:
e0:fc:d4:b1:dd:8c:25:06:63:39:3d:98:2e:c5:4b:
b1:4c:7d:6b:01:91:cd:6d:3b:aa:84:b2:26:34:39:
aa:74:aa:fa:c6:50:46:c8:c8:52:f4:c3:68:c6:3a:
dd:a3:2b:21:e4:7b:67:03:2d:06:dc:3f:a5:bd:3c:
97:86:da:fe:e9:d3:e6:ca:29:88:81:0c:9f:5e:e7:
1f:e3:be:e3:79:40:a1:b7:2e:29:f9:25:a1:48:2c:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:5B:2A:22:0B:50:B7:53:AD:F9:BE:E9:E0:A6:10:31:E5:3E:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A23D312E2E8111F18A34F5B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.244.0/24
154.219.248.0/24
154.221.50.0/23
154.222.200.0-154.222.205.255
Signature Algorithm: sha256WithRSAEncryption
7d:b3:48:06:8f:42:73:17:9f:2b:0a:e6:37:47:bd:74:07:19:
03:0b:56:31:21:e2:04:95:9c:22:b6:75:04:88:6b:c4:60:bd:
0a:cb:50:e7:02:db:71:76:1d:78:14:27:d0:59:4a:22:f5:42:
4a:f4:8b:ce:cb:a9:10:ea:f0:dd:ad:f2:9c:33:ce:2a:4a:e3:
19:11:85:0d:dc:0e:03:e1:4d:d3:10:63:54:8d:92:36:12:d2:
fd:9a:cd:cd:9d:f4:49:ce:58:d4:da:8a:a0:4d:fb:ac:1e:73:
ea:c4:eb:6a:06:5c:58:0f:2a:c3:5e:09:6f:c2:36:59:c2:f2:
44:41:25:63:b2:77:e2:49:80:64:f5:e2:62:c8:c6:79:ca:93:
26:2c:bf:26:58:88:56:be:2d:32:43:61:4f:82:0f:03:03:90:
58:98:92:79:2e:01:63:c5:35:e3:5f:4b:e9:e4:7b:ae:60:8e:
12:98:46:44:49:8b:85:7c:5d:b2:2f:48:e0:b6:21:03:8b:a0:
90:66:92:66:b0:b6:f6:82:b8:85:27:db:49:31:10:7c:c2:6d:
3b:c7:67:f0:01:fb:49:2b:8d:b8:18:89:8c:ff:d7:fd:8e:30:
93:ef:0f:52:ac:b1:3d:e3:fd:e8:ca:78:6b:e5:2e:78:9a:ff:
75:89:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:33 2026 by rpki-client