Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF8C58201A611F1BD0903BEDAE4EC9C.roa
File: CEF8C58201A611F1BD0903BEDAE4EC9C.roa (raw, json)
Hash identifier: LzhA6/q1ldtLUZmkFb8hmt8omPOnFJQTYIUZ/bNijt4=
Subject key identifier: A5:BA:D9:54:69:F2:25:47:39:74:B6:9B:0F:71:65:81:CA:8A:59:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B87D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF8C58201A611F1BD0903BEDAE4EC9C.roa
Signing time: Wed 04 Feb 2026 08:52:18 +0000
ROA not before: Wed 04 Feb 2026 08:52:12 +0000
ROA not after: Thu 12 Mar 2026 08:52:12 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112765 (0x1b87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 08:52:12 2026 GMT
Not After : Mar 12 08:52:12 2026 GMT
Subject: CN=698308c2-1c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:98:a5:08:b0:7b:a1:e7:c0:e8:2c:bb:1b:
cb:a8:41:20:13:62:8a:45:71:1c:9c:27:cd:da:65:
76:fa:3a:fa:84:a4:d1:39:9a:f9:f1:e2:13:fa:3f:
e5:5b:72:92:cf:7d:89:99:8e:03:b8:47:5e:ee:b9:
af:77:15:a8:d6:a4:b7:51:cf:0b:47:5f:05:7e:7e:
2e:c1:02:25:28:8e:07:95:58:f9:7a:f7:03:54:8f:
6b:ec:c5:70:a1:6b:ae:c8:01:dc:ed:d8:df:3a:6a:
89:90:9a:12:c9:7e:9c:e3:8f:ee:6e:57:ae:87:80:
88:d0:08:51:f9:1f:f6:1e:ec:11:6a:3a:0c:89:5d:
44:9e:1a:11:6f:8b:c2:46:8d:74:96:f4:b2:40:65:
7d:d8:e3:68:b1:2b:4e:29:b8:96:86:f8:66:8c:1b:
a1:61:e2:bd:05:9e:64:ae:ab:56:47:2b:ab:20:3a:
dd:9a:9b:e4:69:54:bd:6f:8b:08:a1:9d:4a:13:b3:
07:62:0e:0a:9d:ed:d3:83:23:df:35:3d:89:44:f3:
20:4b:30:43:67:bd:a1:93:69:78:c5:c2:a3:35:c8:
42:d8:31:d4:1f:5d:52:a6:ea:ed:bd:e9:e7:19:f9:
51:6d:50:70:32:b1:b0:c1:d1:a3:b8:8a:81:89:df:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:D9:54:69:F2:25:47:39:74:B6:9B:0F:71:65:81:CA:8A:59:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF8C58201A611F1BD0903BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.24.255
154.223.26.0/24
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:ca:c8:49:ab:eb:d6:69:f8:84:b0:11:13:5b:f3:99:40:0b:
ea:e2:da:76:35:6e:63:60:a8:59:dc:32:26:9b:b9:20:df:11:
ea:77:85:cc:bf:e6:61:39:ae:14:54:f3:1c:2b:99:e5:ef:e5:
1d:00:07:6e:99:4e:91:e1:2f:4e:93:55:51:07:cc:38:28:b0:
28:4c:3d:bd:6a:a1:96:39:6b:23:a7:0a:e0:fa:59:99:e0:96:
e3:62:dc:73:ed:a4:eb:2a:b3:97:fc:02:e3:54:a8:46:1c:da:
04:c4:8f:c6:93:8e:55:57:58:8d:00:21:33:be:a5:4f:9c:bc:
c0:22:40:c8:f6:fe:4f:18:a4:13:bb:49:1e:46:e6:cd:13:71:
a9:4b:18:43:fc:d0:4a:30:5f:67:b4:8b:5c:ee:9a:12:c0:78:
79:f8:c3:ba:b3:68:e7:2b:4a:25:8f:2c:26:07:f0:d4:67:9b:
f5:e5:cf:4e:71:8a:35:f7:c6:af:9c:56:ec:a7:db:d2:2b:42:
f3:b3:3c:c7:2f:03:22:9b:65:3a:1e:64:9e:e9:a5:26:2c:cb:
d8:54:d6:15:85:4e:1f:b4:31:16:f2:db:91:4e:be:25:53:56:
25:4b:75:4e:8c:4f:b5:23:ac:7b:c8:39:5b:11:d8:0c:14:cb:
a5:68:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:28 2026 by rpki-client