Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE2A240A2E7811F19D4D3685DAE4EC9C.roa
File: FE2A240A2E7811F19D4D3685DAE4EC9C.roa (raw, json)
Hash identifier: Rjwm6P9ejPsPwob7c+TNv5wclRMUgQ80ZIhvHmUeVDg=
Subject key identifier: 81:30:90:D0:1D:50:C7:8D:62:9A:0F:ED:62:DE:EF:AE:72:C5:07:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C223
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE2A240A2E7811F19D4D3685DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 09:47:42 +0000
ROA not before: Thu 02 Apr 2026 09:47:38 +0000
ROA not after: Wed 06 May 2026 09:47:38 +0000
asID: 202656
IP address blocks: 154.219.246.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115235 (0x1c223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 09:47:38 2026 GMT
Not After : May 6 09:47:38 2026 GMT
Subject: CN=69ce3b3e-e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:5a:b3:5c:5c:c9:a7:f0:4e:85:bb:36:cb:
7f:d0:e3:33:06:b6:28:60:78:6d:de:35:03:ac:8a:
69:ef:77:2b:b8:52:13:6c:b2:d5:45:72:45:f2:16:
93:5d:ae:bf:d8:4b:97:e6:3c:b8:5a:ab:d2:fc:5d:
17:1f:4f:d6:c6:fd:5a:cc:cd:6b:d3:d5:33:d3:a2:
ee:0f:6a:75:51:6e:0e:3e:11:19:ab:21:23:b5:94:
bc:b5:91:b9:e7:db:96:27:74:98:48:95:4d:e7:12:
ac:f3:a0:4d:d8:ff:ad:2a:07:80:a4:ad:c3:5d:ab:
19:e3:ba:38:a8:d4:18:0d:99:1b:3f:6f:fa:79:20:
46:70:d5:37:71:27:1a:5c:b6:a7:10:36:72:cd:f2:
c4:4a:cb:f8:d6:66:a1:10:90:03:16:c0:d9:57:91:
ac:b5:20:2d:31:a9:fa:7e:c7:46:ac:37:df:fd:56:
a6:9a:15:c0:60:3d:fe:10:72:bd:80:dc:10:8e:47:
ec:04:65:b6:33:c3:a6:4f:28:e9:11:3a:a3:6f:38:
94:f4:be:54:94:4c:fd:0d:7f:5f:f1:97:44:f2:20:
f1:b5:2e:1d:91:14:e7:3e:d2:26:b5:d1:26:19:ee:
db:b5:f7:ec:fd:58:96:de:95:d6:de:a6:ed:b7:48:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:90:D0:1D:50:C7:8D:62:9A:0F:ED:62:DE:EF:AE:72:C5:07:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE2A240A2E7811F19D4D3685DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.246.0/23
154.219.250.0-154.219.255.255
154.221.60.0/24
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
51:67:7a:1e:21:9d:70:35:9c:4d:1c:5d:b2:89:5b:e0:50:d9:
0a:73:8d:54:81:b5:f3:98:18:17:d3:b9:19:6e:25:67:df:c8:
49:fb:41:f2:6b:48:26:50:e7:04:ab:db:7b:aa:42:57:42:a3:
d1:19:65:19:43:56:88:05:28:aa:e2:68:b5:cf:cc:ec:4a:49:
7e:7a:e8:5f:fb:0d:5c:55:ad:4d:ca:b4:65:49:44:44:4a:f0:
54:4f:e6:44:e4:78:fa:6a:04:79:b5:a6:3f:9d:be:85:fb:86:
b7:3e:f6:eb:b7:11:2a:2b:02:b3:dd:f7:c5:be:91:d7:f9:da:
07:3f:af:8a:60:ab:71:61:9e:1e:e3:c5:e7:06:ff:2b:61:5a:
a4:72:27:cd:be:e0:f3:c4:63:ad:fa:84:87:ca:0f:5d:2c:e3:
84:0f:f4:80:02:f6:94:8f:9d:76:2c:8d:8b:53:21:3f:ca:14:
36:76:22:5a:16:7f:58:a2:d8:ee:a1:10:8c:c9:0b:cb:26:f4:
ae:8b:c5:44:44:79:b5:c1:68:9a:fb:4a:be:08:88:25:fd:7e:
82:64:9e:52:c3:57:86:6f:4d:9d:6d:f4:ff:61:18:a1:59:34:
e5:ef:c4:0a:bf:83:b2:22:4e:5b:5b:15:36:84:eb:31:b1:9f:
2c:ad:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:45 2026 by rpki-client