Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF5F000E8E11F190596887DAE4EC9C.roa
File: EADF5F000E8E11F190596887DAE4EC9C.roa (raw, json)
Hash identifier: hFYT/37WfDYw4EMb2kROu4RQvT0fW70IEBzkBq1XJFM=
Subject key identifier: C1:D7:2E:5C:41:E4:7C:81:73:5D:04:82:44:E1:D7:82:63:B2:20:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF5F000E8E11F190596887DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 19:04:01 +0000
ROA not before: Fri 20 Feb 2026 19:03:57 +0000
ROA not after: Thu 04 Jun 2026 19:03:57 +0000
asID: 18229
IP address blocks: 154.206.22.0/24 maxlen: 24
154.206.23.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113312 (0x1baa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 19:03:57 2026 GMT
Not After : Jun 4 19:03:57 2026 GMT
Subject: CN=6998b021-f9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:15:eb:65:67:ce:5d:8d:60:f3:05:b1:76:
9d:3e:39:35:72:8d:d1:c6:26:01:37:ed:4f:a5:89:
81:48:74:9f:08:55:47:33:1d:b6:f4:db:1f:82:e2:
f2:48:11:15:ff:75:75:6a:e5:b8:5b:30:11:12:e9:
3b:2a:69:92:fd:b5:0d:24:49:f0:d3:32:2f:54:53:
82:0b:71:42:31:53:e0:23:a4:e1:a9:35:97:1c:f7:
f5:30:db:78:64:50:42:3e:eb:c7:25:36:50:1a:88:
4a:10:79:7c:88:73:0f:50:d4:f3:ff:52:31:f6:d3:
a5:50:c1:13:7b:45:3d:77:5d:81:9b:74:b9:d7:db:
a3:2e:ad:df:79:bf:05:b5:1a:6c:79:cf:82:38:33:
6f:54:81:7f:56:32:4c:64:54:ad:89:ff:04:f1:27:
89:f7:95:e0:23:60:68:cf:ad:02:9c:b3:2e:9b:b3:
a2:e6:e3:73:67:d1:4d:d1:d2:57:53:d0:92:1b:96:
4d:c3:20:43:27:4f:18:65:9a:0a:8f:51:17:c8:6b:
62:9d:54:dd:be:85:23:d8:ab:6b:e9:0e:de:76:b3:
f3:ed:65:0f:6b:c3:0b:49:8b:e5:d4:e9:cc:fe:8d:
14:74:45:58:ee:46:3e:19:f5:71:9d:9e:5b:73:a5:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D7:2E:5C:41:E4:7C:81:73:5D:04:82:44:E1:D7:82:63:B2:20:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF5F000E8E11F190596887DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.22.0/23
154.206.29.0/24
154.210.128.0-154.210.134.255
Signature Algorithm: sha256WithRSAEncryption
59:dc:3e:4c:a8:fe:b6:e1:80:de:a8:40:06:63:23:83:5e:60:
6f:31:b3:c2:40:c2:a1:83:14:36:21:25:11:0e:c7:8e:9d:d8:
46:41:d9:ba:a3:db:00:54:15:c6:62:08:b4:38:68:cc:71:7b:
3c:94:8d:b6:eb:45:95:6c:93:9f:32:72:a2:01:d0:c5:87:d0:
ec:ba:1b:4c:8a:8f:3f:48:ee:8c:5e:d4:28:d9:00:d2:b5:11:
0e:1d:5a:98:95:c3:3c:c9:3b:eb:92:14:cf:91:ac:a4:d5:e7:
57:0f:db:97:72:e6:e4:53:c3:07:9f:9f:46:0f:2e:c7:bf:12:
99:ca:e2:21:3e:24:36:8b:41:7a:b0:e8:e9:4c:06:54:4b:c2:
77:d6:6b:df:ce:7f:51:d5:10:c2:80:71:e1:c7:2d:b7:f6:81:
10:df:f5:b3:c7:b4:62:94:a5:10:7d:c1:78:b1:c5:11:6b:ed:
57:5c:d7:5a:33:8b:c2:30:d5:a8:64:4d:97:14:05:25:87:50:
0f:c3:4b:c9:13:33:87:ec:7f:6b:5f:8e:86:a9:c0:30:ba:1f:
94:14:fb:1f:1f:e1:6b:29:4d:ec:28:6b:ba:61:4a:30:a7:e0:
f9:0e:dc:90:d8:cc:f1:5d:2d:b9:b2:46:50:1d:30:2d:4b:d3:
97:28:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:31:35 2026 by rpki-client