Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D219B0FE000311F1B0B138B0DAE4EC9C.roa
File: D219B0FE000311F1B0B138B0DAE4EC9C.roa (raw, json)
Hash identifier: IzKuYdhRDYzsVqe4I6J6ObmqtP4JG7y8E4rtjdUHxUw=
Subject key identifier: D2:C7:2C:1D:D5:0A:01:6C:50:BC:1B:FE:50:BF:D3:BA:3A:4E:F7:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B833
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D219B0FE000311F1B0B138B0DAE4EC9C.roa
Signing time: Mon 02 Feb 2026 06:53:04 +0000
ROA not before: Mon 02 Feb 2026 06:52:59 +0000
ROA not after: Mon 09 Mar 2026 06:52:59 +0000
asID: 135377
IP address blocks: 154.82.22.0/24 maxlen: 24
154.82.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112691 (0x1b833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 2 06:52:59 2026 GMT
Not After : Mar 9 06:52:59 2026 GMT
Subject: CN=698049d0-031f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:67:44:11:19:8c:40:12:da:67:c2:f0:e3:
5a:32:4f:7a:9b:74:06:ab:3a:59:38:fc:ec:7a:87:
44:b6:4d:31:e2:ff:d7:3a:ab:38:2c:51:d2:ad:ca:
af:7d:38:7c:86:3d:21:8b:15:87:4b:58:d9:d3:b4:
22:2b:ba:0d:f5:21:df:e6:4a:3a:c6:ea:f0:75:53:
11:27:e2:a5:f8:66:c4:ac:2f:5a:7b:be:d4:95:0c:
25:4b:59:91:f4:a9:c6:70:5e:e6:83:94:fd:f4:1e:
3a:76:f3:19:b7:d1:fd:3d:29:fe:e5:4b:05:8a:d3:
54:89:50:3b:c2:c3:5c:31:10:30:7c:fa:f4:da:ce:
4f:8d:8c:e5:74:b7:bb:c1:df:7b:7a:98:61:31:6f:
f1:bc:6b:dd:9c:9c:99:17:f8:10:c8:00:05:45:01:
0d:fa:d1:80:e4:9b:65:5c:52:9d:51:f1:4c:04:62:
80:d6:23:30:69:12:75:de:a5:60:9e:fd:db:9b:c6:
76:cf:6b:51:1d:41:66:98:3b:4a:c4:76:22:1f:5c:
3b:62:0b:a6:1f:5f:50:81:dd:9b:c9:6b:4e:3d:b3:
e1:a1:69:22:3c:53:a9:fa:6a:24:dd:e3:2a:c2:b5:
70:fa:d4:0c:2b:bd:5d:74:33:c4:95:22:f7:39:81:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:2C:1D:D5:0A:01:6C:50:BC:1B:FE:50:BF:D3:BA:3A:4E:F7:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D219B0FE000311F1B0B138B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/23
Signature Algorithm: sha256WithRSAEncryption
97:62:6d:84:27:e7:8a:1c:da:5c:bc:1c:d0:d2:f9:f0:4e:64:
fa:fa:55:97:12:c0:fe:04:54:53:bc:31:ff:e4:26:ed:e0:9a:
ac:4b:ed:00:39:8a:e4:9b:31:9d:85:35:dd:52:b8:e3:a2:78:
d5:63:4a:7a:51:cc:0a:23:67:54:1d:86:62:84:57:22:95:9f:
69:ef:15:24:be:4f:88:0f:5e:41:57:d5:dc:97:5a:a1:1c:9e:
37:9f:ec:97:10:07:3a:80:85:8e:00:e5:73:76:6a:c4:1f:cc:
ac:1c:82:a6:25:fa:55:e5:a8:7d:3f:5c:a1:f0:89:1e:72:c2:
20:c8:e0:df:30:ee:e1:1e:c9:e6:eb:99:d6:9c:c9:d8:97:00:
60:bf:45:1e:a5:8f:b4:28:a1:79:48:86:f6:a7:32:50:bc:a0:
9a:90:4c:4b:58:97:52:69:da:04:81:1b:d2:48:cc:5b:dd:44:
c4:16:7c:d9:09:0d:05:da:3c:a5:e2:0e:7e:38:b2:2d:60:96:
23:d7:9e:38:a4:ed:6f:2b:04:dd:e5:3a:01:03:87:88:c1:f6:
d1:d6:15:40:8a:77:d1:3d:04:37:b1:5e:c8:74:66:cf:8b:fb:
d0:74:9d:74:80:57:71:01:f4:15:59:2d:ff:fb:4a:db:b7:05:
71:7c:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:20:22 2026 by rpki-client