Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/22E9A04A1B8211F18A6803A7DAE4EC9C.roa
File: 22E9A04A1B8211F18A6803A7DAE4EC9C.roa (raw, json)
Hash identifier: o2oSmT5XMRceQB7vvUJ62zJZyK7qqtUp831xxa7NGwE=
Subject key identifier: 6C:C2:E8:5F:DD:CE:D0:B0:F9:F6:81:F8:6E:2D:C7:56:B9:52:2C:DB
Certificate issuer: /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial: 0653
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/22E9A04A1B8211F18A6803A7DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 06:35:18 +0000
ROA not before: Mon 09 Mar 2026 06:35:13 +0000
ROA not after: Wed 01 Dec 2049 06:35:13 +0000
asID: 327979
IP address blocks: 154.66.196.0/22 maxlen: 24
154.66.196.0/24 maxlen: 24
154.66.197.0/24 maxlen: 24
154.66.198.0/24 maxlen: 24
154.66.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 22 Mar 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Validity
Not Before: Mar 9 06:35:13 2026 GMT
Not After : Dec 1 06:35:13 2049 GMT
Subject: CN=69ae6a25-2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:72:8c:fa:b7:ab:2b:c5:0a:e6:fd:ba:2f:
b0:a0:99:e8:d7:55:c8:d5:3c:20:04:2e:34:f4:9e:
8b:cf:de:89:5c:00:29:d0:66:d7:9f:42:ad:2b:d8:
77:a8:38:ad:4b:7a:b6:a6:08:77:09:30:1e:81:03:
7e:6b:86:b6:37:df:88:92:d8:2b:aa:9b:78:d2:e5:
f5:be:3d:9b:36:2b:8d:54:0e:49:42:ff:8d:66:a8:
4e:1a:09:19:13:d0:c0:f8:ea:d1:7a:16:0e:ff:7d:
d4:9d:d0:6d:32:53:73:56:ce:44:5e:8e:64:4c:f4:
82:e5:fe:2a:91:26:d1:0b:d4:f0:83:ad:9e:29:66:
4e:53:c6:be:02:d1:91:17:d9:4d:78:85:2f:94:f5:
59:7f:93:60:0b:43:62:d3:a0:70:71:14:c3:99:54:
f8:88:21:fa:90:52:ee:c0:a0:00:33:dc:79:74:cd:
0a:3d:37:60:7c:27:19:dd:d2:53:93:ba:17:13:8d:
1d:e5:48:4a:6d:ca:8f:30:73:e0:b7:10:a6:cc:1f:
f0:f5:45:2a:fd:09:cc:18:ed:6e:bd:4a:7c:49:a8:
ae:78:7c:38:8b:ef:0f:70:62:fa:45:ab:ae:2a:41:
f0:dc:99:4a:b8:76:b8:20:b2:f3:85:3b:c1:a3:b3:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:E8:5F:DD:CE:D0:B0:F9:F6:81:F8:6E:2D:C7:56:B9:52:2C:DB
X509v3 Authority Key Identifier:
keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/22E9A04A1B8211F18A6803A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:cb:4c:d4:c6:1d:c5:a0:85:f2:84:b8:9c:5b:b0:cd:ec:01:
59:6a:a9:3b:ba:cc:61:44:3c:01:22:0c:43:16:20:5a:a6:7f:
01:d6:13:17:cd:68:98:18:96:98:b9:33:32:36:39:dc:a5:4a:
08:42:a8:59:66:1e:6e:07:91:67:a0:ea:df:eb:39:c6:cd:23:
50:29:8d:79:7c:cb:f3:17:4b:65:64:8d:67:f3:11:08:78:e6:
37:f6:d2:2e:e3:06:20:a3:4b:29:28:c5:ba:9b:4d:f6:eb:8a:
bb:47:5b:94:79:46:2e:17:72:a6:f4:6c:57:18:7f:1e:9a:dd:
83:a3:0a:d2:ec:4c:10:2a:5b:fe:82:09:05:ef:09:ba:37:3a:
e9:95:78:92:88:12:39:42:0a:6a:ab:5e:8c:bd:84:49:95:d1:
bb:a8:0b:18:12:b7:61:f8:3a:4c:1e:75:92:2b:6d:32:86:a0:
5e:80:0a:6f:25:8e:59:bd:4f:f4:0f:c0:4c:3f:35:90:08:b7:
82:39:77:90:e0:14:72:cf:eb:db:47:98:47:12:b6:4f:88:7a:
f6:b5:c7:ef:e7:c5:46:9c:12:c9:c8:03:db:2e:59:32:0c:5c:
e5:2a:ae:fb:ca:ca:05:53:44:fa:99:3b:82:bc:54:25:9b:49:
dc:91:72:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 23:36:06 2026 by rpki-client