Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F772BC42ED511F1AF833B91DAE4EC9C.roa
File: 1F772BC42ED511F1AF833B91DAE4EC9C.roa (raw, json)
Hash identifier: EY/NiiX57G74qRpWL2KZBkiNqgdlreEcL3Wg74Vp+Uc=
Subject key identifier: DB:62:2A:F0:9D:41:FD:84:1C:BD:D6:34:5C:1C:0F:18:4A:E6:7F:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C28B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F772BC42ED511F1AF833B91DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 20:47:12 +0000
ROA not before: Thu 02 Apr 2026 20:47:06 +0000
ROA not after: Sun 10 May 2026 20:47:06 +0000
asID: 63139
IP address blocks: 154.223.22.0/24 maxlen: 24
154.223.25.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.31.0/24 maxlen: 24
154.223.36.0/24 maxlen: 24
154.223.38.0/24 maxlen: 24
154.223.39.0/24 maxlen: 24
154.223.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115339 (0x1c28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 20:47:06 2026 GMT
Not After : May 10 20:47:06 2026 GMT
Subject: CN=69ced5d0-4d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:ae:17:dd:0e:5c:22:c7:61:26:b5:43:fc:
f8:96:9b:d6:64:f3:e1:ff:fa:4b:3d:eb:79:f3:24:
92:30:a8:6d:39:bd:9b:76:2a:bc:5a:44:d7:12:e3:
85:5d:aa:64:a5:a3:f4:60:8f:02:bd:14:3d:3b:1f:
00:e9:e5:ae:65:5a:65:9d:fb:43:83:39:5b:3e:d8:
0a:f7:bb:7c:d2:26:89:be:1e:5a:a8:86:c4:b1:da:
ca:aa:fe:33:12:63:46:dc:ed:09:9d:f1:8a:6c:7a:
e4:e7:88:2b:cd:02:bc:99:27:b7:7b:98:e5:d6:7f:
8f:7b:4a:8a:ad:1b:58:34:37:23:b5:ea:e0:ab:40:
fc:ab:2d:4a:89:47:dd:56:1e:0e:89:07:7d:3f:c0:
09:70:4e:55:94:8c:a1:bc:37:f3:ab:23:1d:c8:60:
5a:dd:1e:7a:fd:a8:22:c8:05:81:82:4d:7e:f3:23:
be:52:29:1c:70:7c:a5:c2:aa:8c:23:c3:01:51:0a:
44:50:44:e6:7d:9c:b4:04:ee:67:cb:e3:fe:cd:f3:
12:45:2a:20:19:50:76:c6:55:10:2b:ad:ad:81:44:
6f:3b:3a:4e:ae:fa:54:be:ba:11:75:73:e9:52:c3:
b1:a3:64:46:2c:b4:af:88:30:c0:fc:1f:ee:41:06:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:62:2A:F0:9D:41:FD:84:1C:BD:D6:34:5C:1C:0F:18:4A:E6:7F:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F772BC42ED511F1AF833B91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
154.223.25.0/24
154.223.27.0/24
154.223.30.0/23
154.223.36.0/24
154.223.38.0/23
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:97:f6:c9:17:54:66:3c:eb:4d:5d:99:01:3e:5b:0a:fd:58:
82:1a:3d:05:d9:7a:b0:8f:e7:b0:57:22:80:dc:0a:0b:8e:a3:
44:06:eb:69:8c:d7:10:33:c5:85:ec:8d:6e:e7:22:b2:c9:3d:
f8:f6:c1:e1:11:1b:30:bd:24:3b:43:72:57:31:6b:f6:0f:63:
63:1c:60:24:64:e0:6d:08:96:63:7d:04:1d:58:d9:c3:51:17:
a8:47:e9:c0:11:67:f2:f8:52:3c:a8:2c:08:c1:30:6b:20:0f:
96:de:2e:57:27:c7:da:09:e6:ff:60:28:6d:35:cf:02:9d:f2:
e6:23:5c:80:93:89:d7:22:4a:12:8a:f6:e3:bf:92:a0:a5:77:
55:75:c2:48:b0:c2:85:cf:9c:37:10:a9:92:23:e0:28:64:69:
8b:6e:e8:70:17:89:cc:2b:5e:34:fc:7d:04:bf:7b:92:9d:f9:
dd:ea:70:c2:0e:90:51:e3:b9:93:75:d7:97:61:f6:a4:54:ad:
3f:b2:56:22:a8:c9:98:99:9b:bc:f1:ab:b0:51:f6:a4:9e:49:
6d:ec:1e:7c:d1:61:69:bd:4e:27:26:df:45:75:fa:76:b5:b2:
e4:11:07:66:65:be:5d:5c:ef:78:9c:d2:b4:79:c9:8e:7d:b9:
37:d7:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:18:28 2026 by rpki-client