Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11DA3356449E11F1B0EC7A17CF1D38B0.roa
File: 11DA3356449E11F1B0EC7A17CF1D38B0.roa (raw, json)
Hash identifier: 3bJtQ1OcT9LuM2UajXShTymQlpJQoQAi8CgMWj6yxDI=
Subject key identifier: 5A:84:7C:33:D7:2E:5C:F4:87:6A:A9:27:E4:9D:CB:91:F5:68:46:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C859
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11DA3356449E11F1B0EC7A17CF1D38B0.roa
Signing time: Thu 30 Apr 2026 14:08:32 +0000
ROA not before: Thu 30 Apr 2026 14:08:27 +0000
ROA not after: Fri 05 Jun 2026 14:08:27 +0000
asID: 48031
IP address blocks: 154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116825 (0x1c859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:08:27 2026 GMT
Not After : Jun 5 14:08:27 2026 GMT
Subject: CN=69f36260-f3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:d5:b7:8a:7c:a7:31:71:8a:e2:3d:23:0c:
10:85:1f:3b:9f:9d:4d:80:4a:83:ae:be:81:cf:ad:
9c:35:9d:b4:f9:e1:1f:16:54:34:b8:d6:21:6b:9c:
3a:bd:f1:90:91:72:a3:1d:43:22:05:86:0b:68:57:
b1:57:e8:23:33:1f:66:33:61:f1:85:80:ee:09:48:
11:44:0a:5d:d7:62:85:05:d1:31:30:ae:3a:a4:4e:
ae:29:a7:47:90:62:81:db:65:1d:39:2f:b9:9b:e7:
04:17:f6:41:a6:91:f1:21:19:e8:f7:51:8a:70:49:
af:83:a7:db:5f:76:c2:a8:9c:9f:c2:f2:00:7e:06:
4b:35:e6:0e:e9:18:6c:89:34:bc:95:bc:3b:2f:d5:
7d:a5:02:e5:0c:34:a5:b6:59:ec:d7:ca:6c:2c:a2:
08:99:69:23:e4:f2:16:25:2f:99:b6:3b:e2:57:f0:
04:29:03:ba:51:ed:0e:dc:21:14:44:8d:77:b8:7d:
da:ba:fa:8a:ee:35:2d:a2:e4:41:82:5c:81:60:4d:
aa:73:ee:0c:5b:56:c4:b9:7f:fa:d6:3c:13:55:19:
c0:6d:6f:ea:df:8e:61:1e:a0:40:25:97:23:20:da:
07:58:e2:e5:5b:7e:a3:b5:b8:ac:ad:6a:cc:6f:21:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:7C:33:D7:2E:5C:F4:87:6A:A9:27:E4:9D:CB:91:F5:68:46:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11DA3356449E11F1B0EC7A17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.216.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:43:37:3f:9a:1e:0e:de:27:b1:22:a3:29:95:12:3a:ee:ac:
05:97:20:39:00:71:0a:82:d7:d4:37:21:b8:7a:a9:87:63:53:
97:72:b7:7b:9f:83:01:06:f1:cc:b4:e1:37:87:d4:40:d4:0c:
d1:7b:d5:d1:dc:e9:43:2d:19:77:12:4a:49:c8:39:7d:97:1c:
b8:a4:b4:aa:e8:e8:e5:5d:5e:cb:2f:8d:1a:48:c7:28:21:62:
24:0f:a1:fd:f0:f3:41:c3:64:4b:2e:ff:e8:90:5c:0c:e3:57:
df:ec:0c:8f:37:88:75:7a:c6:a2:7f:5d:4c:50:12:9b:ab:b3:
fc:8a:14:8b:36:a1:d9:21:47:d7:8a:43:e1:7b:9c:28:ec:24:
78:5c:09:a7:84:f0:fa:b5:1f:25:75:ba:94:46:58:12:f5:c3:
af:77:06:00:ab:ad:21:c7:a4:f6:5b:5b:57:2c:39:45:99:33:
b0:c7:a2:9c:9e:f5:be:0e:5c:33:4c:c2:63:7f:c7:1a:44:4e:
70:36:ba:86:2d:7e:be:70:96:63:7e:e0:1b:2e:ae:66:dd:5d:
29:66:76:9a:8e:4c:fd:ca:85:bc:2e:ec:60:37:7d:d0:0c:fd:
18:51:d1:bb:0a:a7:c0:26:ce:d7:66:66:8e:f5:fa:d0:54:19:
c9:4b:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:03 2026 by rpki-client