Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB497312FE8311F0BBB153F3DAE4EC9C.roa
File: CB497312FE8311F0BBB153F3DAE4EC9C.roa (raw, json)
Hash identifier: 6/nMFT5OO/W+kAMdpW7sx1dS51fmYj3/XoMCCakMSUM=
Subject key identifier: F9:90:30:E5:98:3A:1F:DF:E6:D8:49:C3:EC:6F:FA:0D:DB:4F:1A:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB497312FE8311F0BBB153F3DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 09:04:06 +0000
ROA not before: Sat 31 Jan 2026 09:04:01 +0000
ROA not after: Sun 08 Mar 2026 09:04:01 +0000
asID: 202656
IP address blocks: 154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112592 (0x1b7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 09:04:01 2026 GMT
Not After : Mar 8 09:04:01 2026 GMT
Subject: CN=697dc586-da60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:1e:e7:d5:36:31:17:bb:71:21:21:39:ca:
d0:3e:04:1c:20:ed:ef:db:87:83:d4:b9:56:1d:72:
10:f4:5c:93:30:17:0f:a4:90:bf:21:d5:52:9d:32:
43:46:77:12:0f:6d:54:a9:5f:af:fd:f2:9f:d0:0d:
15:9a:70:72:f1:c3:61:73:af:e6:cf:5a:51:ad:4a:
1d:26:2c:78:47:a0:e9:8d:32:61:06:e0:69:ad:3b:
5d:f9:a9:22:ec:1e:ae:0d:37:da:80:8a:1d:fa:28:
39:39:09:51:15:9f:02:9f:28:46:6f:06:21:fd:b8:
e7:f6:5e:6b:d6:6d:54:ee:32:d9:3e:0b:1b:bf:ef:
2d:9d:84:ed:80:c1:db:c6:0c:00:e0:e3:9e:09:39:
67:8a:14:cb:aa:c4:c3:7e:50:f4:2b:16:83:17:7b:
29:03:96:a6:da:f5:ba:44:e2:d0:fe:e5:64:07:69:
d8:97:be:18:8e:34:4c:0f:89:33:03:24:4b:c7:a9:
18:ae:79:9f:7a:aa:d9:44:2d:78:dc:05:40:43:62:
66:3a:5b:9a:3a:4d:c3:ba:48:90:92:f3:f0:d6:a1:
f7:5e:c6:8c:ab:8a:77:00:46:3e:a4:e3:27:93:02:
f1:30:b5:b5:f4:29:e3:16:54:53:85:e6:d8:7b:c9:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:30:E5:98:3A:1F:DF:E6:D8:49:C3:EC:6F:FA:0D:DB:4F:1A:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB497312FE8311F0BBB153F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.244.0/24
154.219.248.0/24
154.221.50.0/23
154.222.200.0-154.222.205.255
Signature Algorithm: sha256WithRSAEncryption
13:e0:d0:fc:0f:8a:c1:97:f6:b6:5a:85:f1:de:42:82:69:9b:
c7:d0:b9:80:83:1e:3e:7e:f6:fd:b4:1f:9b:c5:d8:fc:7b:72:
f8:c3:3d:3e:d1:d6:46:e5:7b:c4:a6:b5:3f:37:95:f4:cc:28:
4c:78:45:ee:53:a5:68:b2:82:81:89:f6:60:44:58:fd:5b:48:
3b:2f:57:34:f4:cb:93:a3:d3:2e:06:70:12:f1:00:2a:27:9d:
7c:50:2e:a6:e9:8f:f6:d8:87:8a:8b:dd:d7:52:8e:82:aa:64:
2b:0b:96:7f:0b:59:b0:f6:fd:f2:5f:36:ee:82:f9:ab:54:19:
9f:6c:a2:f7:80:cd:43:19:84:77:12:fb:72:99:c4:e4:1b:cd:
3c:59:b1:34:55:0d:90:7d:f6:83:c3:1d:02:63:ab:91:97:b6:
ce:25:fe:ed:c4:ca:a5:8c:c9:f6:4e:77:37:e8:7e:9e:6a:4d:
6d:2d:2f:8a:ec:fe:88:6e:ec:89:15:2f:08:30:85:31:ec:c8:
f2:2c:b0:6a:30:c4:7b:c2:1e:00:66:f8:34:63:9d:3a:32:a1:
84:c4:25:e0:ec:79:db:8d:ff:56:89:84:7d:8c:00:b4:92:1d:
99:f4:09:8a:0c:76:df:b6:53:17:fc:6c:94:33:27:7e:18:14:
b4:6d:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:22 2026 by rpki-client