Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/222BF9446EFE11F1AF7E7A12CF1D38B0.roa
File: 222BF9446EFE11F1AF7E7A12CF1D38B0.roa (raw, json)
Hash identifier: uixDcGvRyzm0sVi40Gq7xBAujCd5n0kwc+YuO5Np0u4=
Subject key identifier: C8:69:29:C7:D2:37:56:1B:35:81:7D:74:D6:03:1D:D0:E7:35:C2:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/222BF9446EFE11F1AF7E7A12CF1D38B0.roa
Signing time: Tue 23 Jun 2026 12:22:00 +0000
ROA not before: Tue 23 Jun 2026 12:21:55 +0000
ROA not after: Sun 09 Aug 2026 12:21:55 +0000
asID: 401783
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119970 (0x1d4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 12:21:55 2026 GMT
Not After : Aug 9 12:21:55 2026 GMT
Subject: CN=6a3a7a68-c104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:42:85:9d:85:ff:d4:96:9f:9b:30:5f:2f:d6:
64:d7:29:92:01:af:1a:de:7d:c1:d4:41:94:90:04:
8d:ac:9a:99:a0:94:75:6f:f7:82:64:a9:6d:84:5d:
76:37:09:09:57:47:83:5e:43:2b:b0:22:09:2a:e6:
e6:7e:42:28:da:d2:be:2c:07:55:f0:c5:4d:77:af:
63:e8:83:d9:0e:e9:48:59:0a:64:3c:99:04:da:b9:
33:e8:f8:71:20:62:6b:07:29:19:e5:0a:41:50:94:
a2:3f:bb:d4:44:85:d6:af:6c:2b:12:81:1c:e0:6c:
68:76:d5:ae:34:9b:02:46:00:c5:c5:ba:c1:78:3d:
e8:61:13:f8:29:81:1c:1f:ea:0c:3a:db:b0:39:91:
d9:7e:12:c1:79:a7:e5:29:2e:5e:5f:cd:42:50:0d:
b3:a2:31:7e:41:0f:f2:a9:46:f2:0f:13:2f:35:ec:
6a:35:ea:4e:e3:ef:ea:04:57:39:67:16:27:b6:c3:
36:3b:c2:a2:6d:a8:2a:c7:1b:a9:c7:99:77:20:d4:
00:83:6b:3f:83:35:7e:df:64:87:9a:66:89:a8:d2:
e4:3b:d6:05:ef:3d:bd:69:62:78:51:5b:e1:0f:bd:
fd:d9:db:fc:2c:54:fb:bc:44:19:73:86:21:93:e8:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:29:C7:D2:37:56:1B:35:81:7D:74:D6:03:1D:D0:E7:35:C2:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/222BF9446EFE11F1AF7E7A12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
3c:c0:1a:a4:13:10:2e:ba:45:fa:b3:fb:b9:1e:73:bb:20:96:
d1:ec:aa:e4:c6:04:da:ac:09:27:bc:24:e1:14:b7:f4:d2:15:
be:0f:5b:19:c1:8b:73:36:aa:5c:67:ba:70:84:5f:22:1f:91:
e6:ac:58:ea:c3:84:f7:2c:d9:b5:77:63:28:46:48:56:c9:71:
82:fe:4b:01:47:df:40:56:35:74:45:1a:44:a4:3c:25:13:51:
c9:8d:76:e0:2a:95:9c:7a:fe:ed:c8:8b:bb:60:a1:b1:2e:a0:
8c:7d:f6:30:94:ec:06:26:2f:73:0b:27:c7:e1:d6:d7:6c:5a:
28:c2:20:ac:95:af:88:19:6c:21:dc:b9:a7:86:9f:99:9c:c6:
22:79:6d:4b:1f:f9:a8:ad:23:4b:22:f0:0b:9c:8a:7f:1f:72:
23:0f:b0:70:ba:db:df:66:60:d0:0e:21:e9:56:0e:c1:ac:00:
43:30:f8:bf:86:94:f3:79:d6:7c:dd:49:a3:f6:cd:2c:3b:1d:
6f:34:f3:c1:a2:53:6c:75:63:db:f8:97:46:6b:9c:9d:3f:0e:
71:57:82:5a:41:33:a4:d4:e0:80:61:1e:1a:c1:f9:bc:20:17:
b2:47:28:0e:56:66:67:77:23:b9:56:55:47:8d:62:d7:5e:3f:
f2:51:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:46 2026 by rpki-client