Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22AF5C0352311F1A29EF6EACE1D38B0.roa
File: E22AF5C0352311F1A29EF6EACE1D38B0.roa (raw, json)
Hash identifier: +Qt6WyxrHfq0rzDd6twev5qm6BNMJ2cODcAwso2p6Ak=
Subject key identifier: 7C:F0:AA:16:4F:DB:6C:DC:87:8D:F0:9B:7F:91:E2:EA:6C:CE:D3:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C479
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22AF5C0352311F1A29EF6EACE1D38B0.roa
Signing time: Fri 10 Apr 2026 21:26:06 +0000
ROA not before: Fri 10 Apr 2026 21:26:02 +0000
ROA not after: Sat 10 Jul 2027 21:26:02 +0000
asID: 328608
IP address blocks: 154.201.52.0/24 maxlen: 24
154.214.192.0/24 maxlen: 24
154.214.193.0/24 maxlen: 24
154.214.194.0/24 maxlen: 24
154.214.248.0/24 maxlen: 24
154.214.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115833 (0x1c479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 21:26:02 2026 GMT
Not After : Jul 10 21:26:02 2027 GMT
Subject: CN=69d96aee-1842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:26:54:e2:5c:03:6e:f3:ee:f1:70:dc:86:
fc:fa:ac:0c:92:05:ab:c1:69:dd:7e:2b:48:e4:56:
00:30:9f:27:9d:93:40:e3:2f:e0:86:e4:8a:28:e5:
37:c4:c9:92:e1:91:20:2d:91:d2:bd:1a:d4:95:55:
68:35:24:3e:73:57:75:10:0c:af:80:32:66:f6:6a:
b3:a7:85:59:88:aa:81:0d:c7:31:a2:92:bd:01:b4:
94:25:d0:50:66:87:de:8c:5c:eb:72:9a:64:44:64:
97:18:0f:da:2b:68:ca:1d:80:75:17:25:d5:63:ab:
69:e6:7c:ed:b5:e0:45:69:01:dc:6a:80:48:41:4e:
72:83:80:84:8e:33:2a:62:36:16:70:b0:7e:17:36:
a0:34:58:58:9f:e6:11:14:d3:c2:84:63:24:6d:4b:
e6:37:4b:2c:a1:2f:8d:4f:27:ef:ba:c0:75:db:fb:
5d:53:b1:26:e7:f3:92:3b:a4:4d:04:42:00:36:e2:
36:5a:2b:68:bf:31:d0:65:d8:df:81:fb:f2:2f:59:
e0:8d:43:c6:07:87:93:83:9b:f3:85:27:7b:18:4a:
ca:22:56:3b:50:40:ad:fe:6d:1b:de:c9:11:1c:93:
1f:a4:cf:fb:7d:0f:e0:f9:cb:db:f4:19:23:84:bb:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:AA:16:4F:DB:6C:DC:87:8D:F0:9B:7F:91:E2:EA:6C:CE:D3:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22AF5C0352311F1A29EF6EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.52.0/24
154.214.192.0-154.214.194.255
154.214.248.0/24
154.214.251.0/24
Signature Algorithm: sha256WithRSAEncryption
03:aa:dd:93:3a:94:36:a1:45:06:e6:d3:0d:8b:cb:3a:1f:d9:
91:17:a2:c8:83:d8:48:2f:83:be:9a:87:3f:f6:3a:64:b6:4e:
ca:8b:17:26:77:5b:53:8e:aa:28:ec:ce:f1:c1:54:81:97:1e:
29:c1:12:ec:83:8a:cf:c0:89:a2:1b:5d:3a:43:4a:b5:a6:83:
46:e9:48:4c:76:06:4b:b4:8a:1d:b3:db:73:3a:ed:18:90:fb:
81:78:48:da:07:50:e6:b5:de:06:2b:53:2c:22:7d:92:2a:58:
e9:8b:83:11:c3:bf:c6:3b:7a:2c:5e:a5:99:2e:5b:f6:97:b6:
d9:32:18:f3:d0:a7:df:f4:81:c3:5a:d3:d2:ad:2a:04:f3:2a:
43:96:27:de:cb:9e:6f:da:22:23:ea:45:5c:d9:7a:a6:ea:c6:
b4:7c:1c:8f:47:7b:97:6d:9c:ad:ea:d5:00:f3:c8:da:ea:bc:
d6:95:54:6d:fa:dc:53:9c:c5:ac:c9:20:5b:97:a6:d8:4a:b9:
89:f9:24:66:fe:19:e3:6f:a2:78:f6:98:6d:83:b4:01:6b:95:
7b:86:c4:6a:34:74:bc:81:70:ff:93:80:39:a3:00:68:ec:05:
65:24:41:40:f0:cb:f9:da:d5:f8:98:00:9d:ab:5f:56:3f:0f:
f2:7d:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:20 2026 by rpki-client