Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AEA7E2364411F1A12B23E2CE1D38B0.roa
File: C2AEA7E2364411F1A12B23E2CE1D38B0.roa (raw, json)
Hash identifier: Ar+xRm9EgiCCj1cZ4vI3hUtSOfNBl+ULTi/qZvdyhUY=
Subject key identifier: D6:71:28:A2:72:67:C6:BF:C6:3B:18:D1:24:9B:D8:19:17:B4:EE:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AEA7E2364411F1A12B23E2CE1D38B0.roa
Signing time: Sun 12 Apr 2026 07:53:58 +0000
ROA not before: Sun 12 Apr 2026 07:53:52 +0000
ROA not after: Thu 12 Apr 2029 07:53:52 +0000
asID: 17561
IP address blocks: 154.221.80.0/24 maxlen: 24
154.221.81.0/24 maxlen: 24
154.221.82.0/24 maxlen: 24
154.221.83.0/24 maxlen: 24
154.221.84.0/24 maxlen: 24
154.221.85.0/24 maxlen: 24
154.221.86.0/24 maxlen: 24
154.221.87.0/24 maxlen: 24
154.221.88.0/24 maxlen: 24
154.221.89.0/24 maxlen: 24
154.221.90.0/24 maxlen: 24
154.221.91.0/24 maxlen: 24
154.221.92.0/24 maxlen: 24
154.221.93.0/24 maxlen: 24
154.221.94.0/24 maxlen: 24
154.221.95.0/24 maxlen: 24
154.221.96.0/24 maxlen: 24
154.221.97.0/24 maxlen: 24
154.221.98.0/24 maxlen: 24
154.221.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115876 (0x1c4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 07:53:52 2026 GMT
Not After : Apr 12 07:53:52 2029 GMT
Subject: CN=69db4f96-a970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:33:58:36:6f:6e:1d:bb:e5:a1:9f:a8:1f:
26:11:7a:10:9f:1b:57:e7:13:3d:03:d9:c2:1d:52:
d1:e4:e1:81:62:4e:f7:a1:17:a8:bf:ff:66:e1:77:
8c:f9:36:55:69:e8:07:f7:f6:9b:d6:f3:60:f8:62:
ed:2f:6f:7f:6b:8d:3b:48:c2:0d:d2:10:3a:24:bc:
ea:f9:3a:8b:89:c9:82:c2:12:6e:ce:a5:64:e7:da:
38:9f:76:ca:f5:a5:14:48:8b:b1:b6:28:68:23:7f:
ce:da:68:38:2e:28:f3:97:bc:68:3a:79:3f:75:71:
f7:88:8a:8a:cc:02:59:0d:4b:b7:3a:d8:de:5e:18:
1d:f9:ab:ca:3a:23:c5:aa:70:95:5b:c7:20:9a:c3:
19:5b:43:0c:44:09:86:17:48:8d:f3:59:6c:a6:ee:
27:3e:e6:8f:a0:48:39:9a:dc:67:45:f0:8b:94:c2:
73:f0:2b:25:55:55:b9:35:78:98:43:ae:a1:9a:f2:
56:4e:1e:97:d3:70:f5:81:09:e9:b1:37:32:3b:15:
ae:26:65:6a:3a:ea:e3:ce:4a:ec:36:ad:9f:b7:01:
25:d4:09:fe:3e:33:f7:e2:ea:8a:2e:16:0a:32:51:
bd:d1:89:b2:8e:6d:10:94:17:fe:ec:4a:df:74:d2:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:71:28:A2:72:67:C6:BF:C6:3B:18:D1:24:9B:D8:19:17:B4:EE:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AEA7E2364411F1A12B23E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.80.0-154.221.99.255
Signature Algorithm: sha256WithRSAEncryption
ad:82:8a:24:b5:3c:08:1c:ce:44:1f:79:7c:3e:81:f2:b2:21:
16:6e:8b:c9:ec:40:f4:fb:d4:59:f9:61:ef:f0:db:81:03:be:
6e:9a:42:82:73:ea:6b:22:d3:6e:8c:96:06:a2:b9:78:5e:14:
46:0a:9c:b8:c6:80:fe:91:be:0a:a5:14:b7:8c:1a:e4:f6:90:
ce:c7:f6:ac:53:11:dd:88:0c:31:5c:c2:5d:ac:3a:57:4c:99:
d6:e5:0d:de:ce:1f:f4:76:0e:0a:66:6a:61:61:22:c4:df:ec:
8d:8a:25:19:55:36:93:8c:1f:52:d5:07:ef:37:32:bd:b9:6d:
3d:f8:1e:13:cb:f2:85:04:5c:72:ef:1d:74:cb:0f:cd:e7:5f:
74:9b:8a:23:42:cc:66:5c:6d:05:91:ca:a4:18:8e:21:ef:08:
b3:42:22:29:a2:4c:12:9b:40:85:f6:7b:8a:a7:98:e2:2e:09:
a4:91:a3:db:1f:b8:56:f1:0a:6f:e5:a9:8b:59:df:45:7f:e8:
ea:81:5e:b2:0b:59:4a:0a:67:1a:33:8a:b0:3f:d0:21:c1:aa:
42:a2:04:c6:a5:4e:b6:84:20:66:cb:1c:87:0c:e9:5e:a4:d1:
c0:1d:e1:ac:00:a1:2e:de:fc:c8:d6:1e:0f:b8:ec:b7:49:de:
da:9e:df:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:54:33 2026 by rpki-client