Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E8E7642ADB11F19FFCE9A8DAE4EC9C.roa
File: A4E8E7642ADB11F19FFCE9A8DAE4EC9C.roa (raw, json)
Hash identifier: 8XnMLEGmvoOwCfei0PWeHv/VlAItoZuolQ+jPgqLLqQ=
Subject key identifier: 19:CA:8F:4D:B9:46:74:F2:AF:66:CE:86:BA:F0:A7:AB:31:0A:CB:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C17D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E8E7642ADB11F19FFCE9A8DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:23:48 +0000
ROA not before: Sat 28 Mar 2026 19:23:43 +0000
ROA not after: Sat 16 May 2026 19:23:43 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115069 (0x1c17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 19:23:43 2026 GMT
Not After : May 16 19:23:43 2026 GMT
Subject: CN=69c82ac4-2c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:64:67:d3:ad:72:6d:41:95:73:7f:a8:e8:
be:68:ee:e8:f9:81:bb:2f:62:bc:28:42:4f:c5:c3:
44:41:b3:fc:b8:ec:9c:96:0b:cf:7d:4a:44:0a:af:
0a:54:a5:f4:fe:06:2e:77:c1:8d:23:7f:df:55:c5:
07:a0:6d:77:96:e9:04:03:1d:d5:27:38:94:07:4f:
18:e5:3b:73:2b:91:af:d8:5c:62:be:43:55:e8:ae:
d6:28:8e:e4:65:82:66:74:ed:f4:41:2a:fc:c1:09:
9e:0c:1d:68:ae:21:62:ac:86:8a:be:3c:a8:3f:b5:
de:04:31:51:1b:48:1e:cc:eb:c5:64:4c:57:1b:21:
f2:13:9a:33:e6:af:85:71:cf:74:db:fb:ee:3a:e5:
76:6c:6c:c3:d0:e7:8a:cc:1f:05:dc:c9:9c:50:f5:
ba:26:6c:89:52:3e:57:22:b2:19:d2:e1:2e:f8:e3:
4f:eb:29:a8:63:f4:c3:d9:a3:fc:1c:4c:68:cd:1e:
d5:8f:c7:dd:15:59:65:5d:8a:e0:3c:1b:7f:92:ab:
22:a9:a8:26:8e:82:9c:35:f8:0b:59:a0:87:0e:da:
0a:08:a1:05:8b:f5:4c:25:10:fa:b2:9b:ad:d5:01:
b4:3e:6f:51:28:e7:ae:24:ff:c5:20:cb:5c:3f:00:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CA:8F:4D:B9:46:74:F2:AF:66:CE:86:BA:F0:A7:AB:31:0A:CB:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E8E7642ADB11F19FFCE9A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:c6:0c:56:b0:dd:02:52:ee:b4:ef:b4:c8:58:a6:3a:d0:04:
47:e1:3c:d4:9b:7e:ba:6d:1d:84:ae:cc:bf:bf:fc:18:41:02:
52:80:5b:ca:87:9a:38:ac:06:12:3f:8c:63:ea:d0:e5:91:83:
81:51:6e:db:8d:79:83:9f:6f:d7:7c:8a:78:c7:d3:40:ea:38:
7d:4d:83:e3:ed:cc:ce:33:27:b7:7f:3e:27:9d:24:48:0c:f8:
ce:12:aa:18:3b:8c:55:7a:c8:4b:96:eb:e0:1b:83:81:8a:4a:
73:0c:69:c6:6c:da:a4:50:72:d9:f1:8c:cd:30:79:a3:d3:b6:
7d:7a:19:86:35:50:64:c5:95:9a:ea:16:5e:15:78:e9:ed:4a:
c2:88:ab:2c:a3:38:bd:c4:31:55:d1:ff:76:29:a1:60:3f:a4:
3c:9e:46:11:0e:c0:c6:b4:1d:4b:2e:4c:f8:21:b9:90:a2:d8:
36:27:5d:ab:c1:5f:04:41:9c:33:4d:78:64:ad:c4:01:fa:97:
fe:7b:bd:0d:16:ba:8e:3e:a9:a6:c2:3e:1f:56:74:8c:2b:5b:
1d:63:af:24:7c:fa:40:60:71:0e:7c:71:3b:79:a7:34:5e:b8:
6e:01:f0:c2:18:06:0e:28:af:55:71:7c:35:d5:82:e4:d8:f2:
96:7a:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:30 2026 by rpki-client