Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D362E1C192E11F19ED744D0DAE4EC9C.roa
File: 1D362E1C192E11F19ED744D0DAE4EC9C.roa (raw, json)
Hash identifier: 9FfhPfiL9Q1P2iGYCmcAaSqqolUMwl4J4e4FUNUNR8w=
Subject key identifier: BC:FF:06:AD:26:A8:FE:F8:A4:ED:7D:AF:15:80:0B:F5:6A:FC:ED:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D362E1C192E11F19ED744D0DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 07:28:47 +0000
ROA not before: Fri 06 Mar 2026 07:28:43 +0000
ROA not after: Mon 13 Apr 2026 07:28:43 +0000
asID: 17497
IP address blocks: 154.222.128.0/22 maxlen: 24
154.222.128.0/24 maxlen: 24
154.222.129.0/24 maxlen: 24
154.222.130.0/24 maxlen: 24
154.222.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114151 (0x1bde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 07:28:43 2026 GMT
Not After : Apr 13 07:28:43 2026 GMT
Subject: CN=69aa822f-8fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:e6:af:08:c9:22:a3:c9:47:7a:6b:b7:05:
4c:1c:c6:4d:2e:07:ce:07:32:35:b8:51:8d:a2:c4:
cd:f8:aa:7b:d9:84:c8:9b:ce:84:06:39:bf:a6:bf:
dd:9b:b7:66:bb:f5:e2:dd:4a:07:f5:43:69:1d:61:
ed:1c:33:46:0b:70:66:3d:23:8b:99:a8:af:61:6a:
23:33:a6:5b:af:c1:a8:24:19:b3:b0:2c:66:e9:e1:
aa:aa:6b:59:3f:75:0c:67:37:5b:f8:af:5d:1c:e6:
e4:7e:b3:2d:70:05:19:d7:5b:a3:d3:7a:26:f3:e5:
04:bf:a7:68:30:c3:42:5f:28:06:9b:e6:65:a0:bb:
50:9c:bf:c1:14:5c:ce:94:51:83:f6:1d:46:58:a6:
b5:d8:69:7d:db:3f:31:4a:aa:3f:77:a2:3d:1c:ae:
c1:df:ca:77:ff:4e:9f:7b:25:72:c2:0b:15:7c:18:
fe:6e:db:4a:ab:85:c2:19:8b:f5:ba:78:8e:c5:b0:
8e:bc:71:ce:78:9b:bb:8c:b9:76:b5:05:80:25:d6:
e6:be:63:df:63:c5:4e:0f:84:d3:20:f6:0a:6e:f6:
05:a4:0d:93:c4:b3:29:ae:c8:e2:1d:08:e6:75:e7:
b1:69:0f:bc:db:c1:b7:2f:77:9e:4e:bf:49:84:c0:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:06:AD:26:A8:FE:F8:A4:ED:7D:AF:15:80:0B:F5:6A:FC:ED:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D362E1C192E11F19ED744D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:f6:41:72:15:23:43:0e:a8:f3:25:ab:90:bc:98:78:d7:e2:
36:64:a3:3c:31:e7:ba:b0:d2:43:52:e7:fd:7a:ee:80:be:0c:
3c:20:af:f6:e6:f2:fc:10:15:a7:dc:f8:34:db:9c:8a:50:9f:
36:d5:92:1e:1d:5e:1f:91:fe:44:4c:9e:c8:94:09:c3:22:4c:
62:5f:fb:43:2e:16:c4:f0:9a:c7:61:24:9d:a2:9e:f5:1a:06:
c6:35:fb:58:b7:fc:2e:66:ec:18:3e:45:4c:c5:ca:e4:98:c0:
07:93:ba:b7:22:b5:6c:dc:3b:47:d8:c6:80:7d:f9:88:ed:32:
35:62:e1:3f:3b:8a:7d:7c:2c:84:70:bb:d3:a5:c0:d6:4d:4e:
62:cb:78:c4:e8:1f:4d:ad:4e:3a:04:ae:4d:c4:2c:42:b6:cc:
f7:79:62:7a:f0:f2:32:d4:f6:5d:43:85:40:16:3d:da:09:d5:
1e:3a:ac:5f:74:c8:e4:f9:12:62:75:c0:01:e9:02:f9:4a:b7:
8e:f4:75:6b:67:55:aa:88:f8:3b:e7:04:26:d6:0b:b5:b9:f9:
3d:9a:8d:91:02:13:95:6b:a2:8a:93:cd:65:96:a2:be:97:ba:
ef:57:6d:29:2e:ac:a9:44:c7:da:e0:46:a8:12:cf:3b:30:6f:
07:c9:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:49 2026 by rpki-client