Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22C4E44707311F1AFCAE3F5CE1D38B0.roa
File: E22C4E44707311F1AFCAE3F5CE1D38B0.roa (raw, json)
Hash identifier: aqdGx807GQixnZapeeNnZrNjztIXpkZsOreAo3seEaY=
Subject key identifier: B3:D6:3E:37:C7:D9:31:97:15:B0:24:ED:66:12:8E:07:96:32:42:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D51E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22C4E44707311F1AFCAE3F5CE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:57:25 +0000
ROA not before: Thu 25 Jun 2026 08:57:19 +0000
ROA not after: Sat 01 Aug 2026 08:57:19 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120094 (0x1d51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:57:19 2026 GMT
Not After : Aug 1 08:57:19 2026 GMT
Subject: CN=6a3ced74-e099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:eb:d9:44:9e:e3:e7:54:ac:c3:08:a0:45:
73:cf:53:d6:db:bd:9d:24:b2:29:aa:a5:6c:8d:f4:
fc:40:f6:7f:ba:34:93:ce:b9:c4:d4:f9:ab:17:9f:
b9:61:37:cb:72:85:da:b5:c9:47:63:df:4d:3d:0d:
07:db:86:4a:2e:85:78:d4:e4:7f:ea:89:21:93:d3:
41:cc:2d:87:33:05:09:e4:e5:96:20:1b:eb:53:4e:
cf:0a:05:cf:78:ec:e4:a2:e0:70:95:87:46:2f:ca:
28:90:66:d1:04:2c:e6:92:5c:fc:a9:91:fc:0e:14:
3b:82:79:24:01:ed:57:06:51:d7:04:f0:40:39:0c:
9a:e1:3a:c5:43:b2:d0:a9:ef:27:46:95:e1:3b:9f:
29:7f:11:bf:13:89:07:c2:76:eb:23:fd:8e:09:b8:
9a:31:67:df:42:51:58:9f:f6:db:42:60:03:a1:73:
8d:1b:02:69:16:e4:f5:b1:cc:86:3a:a2:ba:bd:b3:
9c:b4:fa:50:3c:bb:8d:61:2d:dd:1b:9b:e8:b8:93:
b9:1b:6f:74:9a:1b:e8:4d:95:89:6d:56:d3:fa:1d:
4c:be:5f:5f:1b:92:68:35:71:71:e7:84:b9:de:00:
77:a4:86:c4:4e:de:43:b1:a2:07:18:7d:a3:c4:42:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:3E:37:C7:D9:31:97:15:B0:24:ED:66:12:8E:07:96:32:42:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22C4E44707311F1AFCAE3F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
154.205.226.0-154.205.234.255
Signature Algorithm: sha256WithRSAEncryption
0f:97:6c:ab:e6:f8:52:eb:6e:44:7c:61:c9:5d:d6:23:42:ab:
10:29:28:79:b1:72:93:1f:5d:39:65:01:bc:64:e7:0c:e1:60:
a2:6c:dd:55:5c:9b:bf:00:1e:66:88:98:54:8b:8e:f2:df:53:
ae:51:2d:e3:7e:52:ba:ad:f2:72:1b:6f:d1:1a:d8:3f:d0:34:
fd:68:3c:21:65:29:8c:ee:9a:c2:db:72:1d:49:de:e1:13:9d:
ec:03:a8:ba:dc:37:98:14:5a:63:fc:34:c1:94:0f:cb:ed:b0:
cf:93:34:59:ac:f7:43:7b:a5:43:b5:76:88:0d:88:e1:97:99:
42:f8:08:9a:ca:87:e3:b6:b8:93:12:d8:01:cc:8f:01:b9:89:
65:22:e2:3b:24:14:5e:2f:f8:41:4f:59:ad:2a:d5:96:6f:b7:
ea:31:19:12:72:04:29:45:44:d7:5f:c5:b3:01:5d:18:68:88:
01:54:fc:76:82:bb:bb:ef:71:51:e6:e4:2f:a2:3f:44:f5:ad:
42:5a:5f:58:be:a5:5e:1e:1d:c5:2b:87:26:a8:73:73:d5:e3:
5b:ee:ba:e0:d7:a3:cb:08:a6:00:03:70:e0:d6:37:31:5d:24:
ac:03:b0:b4:ea:5e:83:0f:2e:5d:95:8e:45:2b:c2:d4:8a:93:
79:cc:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:47 2026 by rpki-client