Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF0CC02122411F19F881797DAE4EC9C.roa
File: ADF0CC02122411F19F881797DAE4EC9C.roa (raw, json)
Hash identifier: wnXwQdb0Y9BhNuIbtuGVG6OfpNAWbX6xRWtD5ykjBkM=
Subject key identifier: 43:43:D8:1A:2D:3C:CE:35:58:7D:01:4C:32:99:A6:46:AB:7E:EC:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF0CC02122411F19F881797DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 08:33:37 +0000
ROA not before: Wed 25 Feb 2026 08:33:32 +0000
ROA not after: Wed 01 Apr 2026 08:33:32 +0000
asID: 62240
IP address blocks: 154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113553 (0x1bb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 08:33:32 2026 GMT
Not After : Apr 1 08:33:32 2026 GMT
Subject: CN=699eb3e1-6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:57:36:3e:ad:5e:8a:11:c3:cb:77:86:17:
c8:f1:ba:bd:7e:26:a2:1d:35:48:08:51:f0:0f:d7:
00:45:54:23:c1:44:a8:0f:70:76:41:27:19:64:2a:
3a:91:2c:9d:ac:a1:bd:fe:ac:02:6b:39:48:ba:b6:
d7:e4:38:cb:cb:74:57:a1:4c:06:88:bd:d5:cf:63:
f4:49:32:47:b5:e4:c4:13:10:67:db:d9:ad:f6:50:
38:e7:e7:ae:a3:86:a2:90:bf:c4:5b:ba:c3:e9:58:
12:12:07:69:79:92:7c:bd:df:a4:40:81:41:dd:8d:
bc:26:23:a3:bc:00:62:bd:b0:6f:ec:7d:2f:75:ad:
14:fd:67:d3:f7:97:93:37:20:34:10:44:83:2c:40:
43:7d:25:94:e2:68:e1:38:72:33:bb:0b:8e:96:ef:
11:a9:df:ae:26:0e:d1:8b:41:ca:45:23:7c:af:8f:
e3:46:a4:9d:dd:30:c9:49:70:bc:ff:77:24:4e:f5:
c4:9f:05:02:d2:33:53:c0:f2:47:0b:51:49:dc:be:
ce:d0:f5:8b:43:04:5b:1a:76:82:57:43:13:17:1e:
ed:8e:de:4f:24:98:a1:ef:cc:48:7e:0a:5a:02:5e:
88:5f:c1:44:ec:d3:b2:18:42:66:bc:0c:59:18:ae:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:D8:1A:2D:3C:CE:35:58:7D:01:4C:32:99:A6:46:AB:7E:EC:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF0CC02122411F19F881797DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.208.0-154.223.217.255
Signature Algorithm: sha256WithRSAEncryption
a4:da:02:41:bb:f7:3d:23:97:7a:76:de:6a:f9:33:82:93:ce:
be:b7:e8:ca:9b:51:ce:93:38:aa:14:44:29:ea:94:c0:56:5e:
1b:98:7a:6f:c4:5c:e6:d9:30:6a:e5:de:63:0e:97:07:37:7c:
5e:c0:c3:75:42:18:3b:9e:ea:a6:b6:83:28:60:dc:5d:a9:1c:
76:fd:1c:d6:fa:7a:1e:4a:30:b2:7c:0e:c8:95:37:34:9e:ef:
1b:91:b9:f8:ce:f8:87:b8:13:f1:a0:85:04:e7:28:93:5f:0b:
ed:9a:c1:a6:47:2e:01:b0:57:22:eb:e5:22:a4:fb:7a:50:84:
e9:9d:a7:7f:2e:68:2b:86:b9:33:b7:bd:8d:d7:b4:f1:d1:70:
0a:47:98:ff:48:54:81:29:ad:58:86:9f:2e:82:fc:80:dc:14:
45:96:d6:fc:1a:80:af:9b:96:7c:3f:b2:0d:3f:52:2c:18:a6:
12:da:24:84:c4:16:f3:03:59:ef:53:8e:a8:77:e5:f1:d5:36:
20:3b:e1:e3:07:cd:29:ee:d5:89:f2:3b:da:30:21:0b:45:4c:
87:9e:dd:1d:9c:6d:59:45:31:08:33:5a:f5:21:d2:e6:b0:1f:
12:c3:96:20:74:6e:de:9d:a3:57:bd:53:e7:34:44:fb:a3:ed:
62:8b:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:37 2026 by rpki-client