Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22651B6364811F1B91EA6FBCE1D38B0.roa
File: E22651B6364811F1B91EA6FBCE1D38B0.roa (raw, json)
Hash identifier: T0Fklm0nzEm3N4r0HTSGmnlk00y8YNE/aHWjUYooyT8=
Subject key identifier: 54:9F:7A:29:B5:01:DF:24:E3:51:E1:6E:73:A2:CE:9A:FE:92:1A:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22651B6364811F1B91EA6FBCE1D38B0.roa
Signing time: Sun 12 Apr 2026 08:23:29 +0000
ROA not before: Sun 12 Apr 2026 08:23:23 +0000
ROA not after: Thu 12 Apr 2029 08:23:23 +0000
asID: 17561
IP address blocks: 154.214.153.0/24 maxlen: 24
154.214.154.0/24 maxlen: 24
154.214.155.0/24 maxlen: 24
154.214.156.0/24 maxlen: 24
154.214.157.0/24 maxlen: 24
154.214.158.0/24 maxlen: 24
154.214.159.0/24 maxlen: 24
154.214.160.0/24 maxlen: 24
154.214.161.0/24 maxlen: 24
154.214.162.0/24 maxlen: 24
154.214.163.0/24 maxlen: 24
154.214.164.0/24 maxlen: 24
154.214.165.0/24 maxlen: 24
154.214.166.0/24 maxlen: 24
154.214.167.0/24 maxlen: 24
154.214.168.0/24 maxlen: 24
154.214.169.0/24 maxlen: 24
154.214.170.0/24 maxlen: 24
154.214.171.0/24 maxlen: 24
154.214.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115884 (0x1c4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 08:23:23 2026 GMT
Not After : Apr 12 08:23:23 2029 GMT
Subject: CN=69db5681-3b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:cb:d6:a1:d6:dc:59:47:89:24:9d:68:e7:
d4:73:cb:a1:85:98:d2:c1:3f:d9:ed:8f:df:a1:1c:
f5:5a:ce:21:5d:9c:3a:85:45:5e:4b:1f:5f:79:7c:
85:88:7f:b6:1b:36:46:98:25:8a:dd:06:15:da:66:
9f:82:0d:11:f1:d7:70:1d:2f:b4:ec:0d:50:c4:5d:
08:12:a3:7b:51:5a:87:71:69:43:00:fd:95:3b:c9:
60:f9:db:c3:1f:19:9b:c5:31:e8:dc:f1:1c:02:25:
17:4d:21:ad:39:ca:3d:ca:f4:f0:49:9c:98:9b:75:
c3:8a:c3:85:3d:b8:e5:10:7f:d0:9d:af:de:64:78:
28:65:85:b4:2d:6b:49:a7:2f:68:66:c4:03:89:77:
6e:50:78:88:81:88:56:41:e0:ca:01:ff:3a:43:0b:
e5:8d:35:7e:ec:34:19:ce:43:5d:31:62:2f:6f:23:
ea:f2:03:5e:22:bc:e0:41:1c:d2:7b:5e:8c:26:e4:
27:88:55:af:fa:80:76:49:41:d1:c6:25:e5:18:d9:
37:7d:13:7f:e4:32:4f:62:40:a9:20:72:c2:03:6d:
23:5a:aa:f5:ff:f2:59:bd:42:21:2d:e1:68:64:b6:
78:0e:16:cb:56:80:23:0e:a2:3f:36:b6:b3:3e:a9:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9F:7A:29:B5:01:DF:24:E3:51:E1:6E:73:A2:CE:9A:FE:92:1A:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22651B6364811F1B91EA6FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.153.0-154.214.172.255
Signature Algorithm: sha256WithRSAEncryption
5a:a6:9d:64:8d:e9:b0:f2:85:85:e6:73:55:ad:94:b8:81:5c:
05:e7:a3:1a:af:eb:96:56:8b:6c:34:3b:8a:01:73:9d:92:e2:
9d:22:18:a0:3a:7d:bb:bf:da:7e:13:83:80:49:91:2d:07:82:
f0:bb:ff:c1:ce:4a:ec:98:b9:f1:08:4f:4c:fe:b3:3c:7e:5e:
f4:62:46:1c:ce:8f:da:17:0b:c4:88:2b:74:d4:a3:06:92:93:
4b:5c:22:19:f2:a9:e1:84:84:a5:0f:74:5a:db:f5:60:0c:22:
47:a4:cb:6f:92:32:6a:6f:1e:37:66:ca:32:52:cf:58:5e:8e:
98:3f:f3:2d:da:70:fe:c1:2f:2b:f3:e3:d5:8c:24:23:21:c0:
6c:ad:7b:f6:51:47:a3:ae:ec:bc:6e:aa:f2:94:ef:1b:da:11:
ce:58:3f:c0:c9:cd:47:59:2b:fe:57:98:36:3a:e7:2b:c8:02:
d0:6d:07:af:68:4a:0b:ae:d6:44:e1:8d:82:d7:22:87:00:41:
27:f7:85:03:3a:80:df:5a:4c:83:ed:ba:b2:6a:72:4f:f3:8f:
83:12:a6:41:3b:65:50:ed:40:f7:ab:6e:bc:de:65:18:0c:b9:
9a:a4:af:af:b8:15:49:21:cc:91:60:b6:3e:c9:e4:ae:06:89:
9d:58:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:57 2026 by rpki-client