Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF80ED2A2E8511F19C0551CBDAE4EC9C.roa
File: CF80ED2A2E8511F19C0551CBDAE4EC9C.roa (raw, json)
Hash identifier: DtzNe9MX3XTGenu/Pv57L2ff4OaHckXmXGNSZku8rww=
Subject key identifier: AA:99:9C:B4:D0:E1:04:1B:BF:26:7D:04:47:9B:D1:1E:23:3F:0D:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C241
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF80ED2A2E8511F19C0551CBDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 11:19:27 +0000
ROA not before: Thu 02 Apr 2026 11:19:22 +0000
ROA not after: Wed 06 May 2026 11:19:22 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115265 (0x1c241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 11:19:22 2026 GMT
Not After : May 6 11:19:22 2026 GMT
Subject: CN=69ce50bf-e23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:5b:04:68:68:a7:77:ac:0b:d5:98:93:39:
4d:17:ac:b0:54:24:9c:83:0f:47:88:38:51:76:06:
ab:8c:76:5e:18:b3:24:d4:68:99:c2:1a:6a:88:29:
0f:85:14:c7:29:25:08:50:d7:bf:92:14:4f:42:b1:
ae:dd:49:1a:b1:33:48:16:2f:b1:3e:e0:27:2b:77:
23:0c:8f:be:e8:85:81:a9:9c:fe:0f:71:cb:93:aa:
de:2a:29:9c:41:a0:cd:c7:79:70:1c:5b:3d:a0:20:
a9:58:41:b1:61:e6:a3:fd:b0:7e:18:d5:7a:61:7c:
ed:1d:d3:ed:0a:8c:9b:63:14:d8:bb:a2:1d:d2:20:
57:00:71:bc:9d:dd:f8:12:db:2e:b0:de:de:06:6e:
66:0a:32:c8:e5:7e:3c:c6:c1:7b:75:30:85:9f:9c:
24:35:5f:ab:d2:6b:e0:4a:11:f8:4b:00:c0:49:a7:
cd:c7:11:7e:58:b5:d3:5e:ad:ac:88:f2:a3:29:0f:
23:8b:b7:ef:6a:e8:78:e0:4e:9d:a9:36:eb:2a:b9:
96:3e:c0:dc:dc:c1:bb:78:ee:34:b5:89:2e:d2:18:
3c:b7:cb:0c:42:1d:5e:72:3e:1f:e2:1d:f8:cf:06:
40:d4:57:ad:bf:6a:91:f2:44:0b:1e:14:5f:dd:c8:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:99:9C:B4:D0:E1:04:1B:BF:26:7D:04:47:9B:D1:1E:23:3F:0D:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF80ED2A2E8511F19C0551CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0/22
154.218.22.0/24
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a7:a7:bf:f0:a4:59:32:92:50:8f:8e:c5:a7:6d:85:37:b0:
af:0f:e8:9e:6e:0e:2b:62:fd:f6:7e:b9:9b:cc:b2:d5:b3:9a:
27:0e:fb:4a:28:73:f4:d4:d6:78:1f:e6:f2:96:a8:89:95:52:
f1:3e:bf:70:28:30:13:36:8f:5f:e7:0c:24:aa:0e:f3:45:d9:
49:23:2b:34:35:11:38:07:49:cd:e2:c9:63:04:9f:c4:7f:7a:
05:32:36:2b:b1:24:2b:50:ba:0d:dd:56:5a:ab:01:42:e1:fd:
49:9a:ba:97:74:ee:3f:28:39:b6:ad:8f:46:bb:d7:27:fd:f2:
e1:73:23:9d:1b:a0:b9:62:5d:b2:25:80:02:26:2c:c5:8a:78:
d2:b4:48:19:1e:ad:45:fa:ef:05:86:7f:b8:fa:ce:e5:de:e0:
19:1d:13:24:a1:c4:d5:6f:4e:25:6a:ab:4e:92:d1:5d:10:84:
80:90:96:fc:58:e1:28:cd:1f:cf:5e:63:12:54:dc:b4:89:b1:
fd:15:14:c1:30:26:70:de:67:b0:f9:b5:66:ad:95:97:4c:6e:
51:de:3b:8f:99:ee:06:24:92:1e:c8:9e:a4:63:45:5e:e6:b6:
9b:83:3c:71:2e:96:86:23:41:81:33:98:45:b1:28:a6:70:9f:
c2:b5:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:07 2026 by rpki-client