Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B0230CFE8711F0BED0DB8CDAE4EC9C.roa
File: E3B0230CFE8711F0BED0DB8CDAE4EC9C.roa (raw, json)
Hash identifier: K4UtOLjsbxZkqXQaX14kQrUJ+rirFJRxnTBo9ismYWY=
Subject key identifier: 41:25:05:8D:58:B2:A4:1A:4B:8B:B4:8B:08:5E:19:A9:C0:58:33:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B0230CFE8711F0BED0DB8CDAE4EC9C.roa
Signing time: Sat 31 Jan 2026 09:33:25 +0000
ROA not before: Sat 31 Jan 2026 09:33:20 +0000
ROA not after: Sun 08 Mar 2026 09:33:20 +0000
asID: 48031
IP address blocks: 154.222.213.0/24 maxlen: 24
154.222.214.0/24 maxlen: 24
154.222.223.0/24 maxlen: 24
154.222.240.0/24 maxlen: 24
154.222.241.0/24 maxlen: 24
154.222.243.0/24 maxlen: 24
154.222.244.0/24 maxlen: 24
154.222.245.0/24 maxlen: 24
154.222.246.0/24 maxlen: 24
154.222.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112602 (0x1b7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 09:33:20 2026 GMT
Not After : Mar 8 09:33:20 2026 GMT
Subject: CN=697dcc64-4e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:72:66:36:30:f6:99:bc:c7:56:da:14:8c:
93:ac:5a:e4:cc:d5:05:a8:3a:af:d8:be:6d:96:32:
45:b2:0d:27:dc:4b:7c:b2:de:d8:c7:c6:8f:90:d3:
04:5b:30:11:98:40:bb:e6:70:3b:9c:55:d1:0d:2a:
82:16:8a:38:e3:20:d9:b6:35:3f:75:e9:0d:e9:46:
c8:15:d1:b0:41:61:9f:5e:65:d8:c6:ff:f9:08:e9:
1c:bb:76:b4:2b:6d:d3:f4:45:35:ae:5f:aa:f0:1a:
65:41:a8:34:0e:23:cc:12:31:ab:e9:01:30:52:0c:
59:ab:d5:a2:76:70:40:b1:10:fb:31:21:bf:b1:1f:
93:d8:a3:a4:de:a1:4f:2d:36:32:0e:4d:e5:af:52:
48:3b:41:1c:f2:b9:05:8f:0b:38:4c:36:25:14:5b:
c4:f0:28:94:aa:0b:88:0d:0a:cb:0f:4c:d6:11:13:
62:fd:04:50:c7:29:57:7c:ea:9e:f9:28:c5:fd:16:
d0:0f:19:a5:fb:86:bb:2a:8d:23:68:92:46:5a:a4:
fa:79:ea:dd:be:d1:c2:88:2a:f9:ea:1c:52:c0:0a:
90:cf:53:a6:de:95:75:ba:3d:fe:50:fa:f0:28:f5:
88:1a:52:5d:24:6c:78:4a:42:80:b8:fd:d3:a0:df:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:05:8D:58:B2:A4:1A:4B:8B:B4:8B:08:5E:19:A9:C0:58:33:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B0230CFE8711F0BED0DB8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.213.0-154.222.214.255
154.222.223.0/24
154.222.240.0/23
154.222.243.0-154.222.247.255
Signature Algorithm: sha256WithRSAEncryption
75:68:c5:6b:23:3c:6e:7b:d7:37:ab:38:6f:b7:48:89:db:57:
bd:95:66:74:fc:69:1f:9c:28:db:6e:67:3d:9f:70:4e:a1:32:
4f:66:b7:fa:35:da:e8:c8:97:0f:7a:02:77:d2:cd:75:07:46:
b3:f8:16:7c:53:c7:58:21:96:d7:45:53:1e:f8:4c:69:49:23:
e5:9d:22:34:2a:df:63:c9:91:36:8c:d8:1a:42:66:49:eb:56:
7f:48:05:01:7f:bd:f0:09:11:67:2c:9c:03:d4:c6:90:ad:64:
4b:9e:78:2e:ed:56:5a:63:b0:0c:29:06:b9:21:f4:cc:90:31:
93:5e:1c:2f:df:cb:58:77:b9:2c:8b:e3:4b:17:a4:1e:b6:d6:
54:d4:24:93:07:e4:74:c5:f7:2d:ca:eb:cf:38:3e:4b:d6:3a:
cd:90:f0:d5:ae:ae:14:1b:7a:fe:63:99:c7:b0:0c:f5:3a:e0:
8a:cb:60:da:26:b3:25:8b:e6:1b:c3:9f:2a:6c:41:73:46:16:
bf:a3:da:eb:59:b5:f8:0e:74:d8:c0:0d:e5:de:72:4a:e0:f3:
4c:e4:bb:4b:0e:2e:99:67:bf:4f:07:2c:6e:5a:46:5c:8e:27:
fc:93:4c:f2:e8:c0:b3:5e:7c:04:eb:09:b8:0e:8f:3e:56:d8:
30:16:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:30 2026 by rpki-client