Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22808256162B11F1B443A2C8DAE4EC9C.roa
File: 22808256162B11F1B443A2C8DAE4EC9C.roa (raw, json)
Hash identifier: gYsVjQBUgGYwCca29g1FJsT3jCG0vLDZ0m65n+RwjwU=
Subject key identifier: 7F:94:06:21:65:C0:35:DC:D9:44:C6:A9:F3:A0:C3:7E:98:5F:FB:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22808256162B11F1B443A2C8DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 11:29:54 +0000
ROA not before: Mon 02 Mar 2026 11:29:50 +0000
ROA not after: Fri 02 Mar 2029 11:29:50 +0000
asID: 17561
IP address blocks: 154.80.12.0/24 maxlen: 24
154.80.13.0/24 maxlen: 24
154.80.14.0/24 maxlen: 24
154.80.15.0/24 maxlen: 24
154.80.16.0/24 maxlen: 24
154.80.17.0/24 maxlen: 24
154.80.18.0/24 maxlen: 24
154.80.19.0/24 maxlen: 24
154.80.20.0/24 maxlen: 24
154.80.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113909 (0x1bcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 11:29:50 2026 GMT
Not After : Mar 2 11:29:50 2029 GMT
Subject: CN=69a574b2-49e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:eb:f7:0b:58:52:45:1d:97:c6:8f:15:33:
94:c7:d3:7a:f9:ab:98:06:b2:e2:38:11:dd:e0:97:
15:04:c3:9d:bf:c6:38:d5:36:da:30:25:69:44:8d:
08:a0:9b:49:3a:21:91:37:48:e8:d4:bf:d0:c7:bd:
2e:24:1a:9a:32:87:d5:8e:ae:2d:e1:dc:63:ce:5f:
df:bb:78:47:b1:3d:49:43:b9:d2:b1:4e:38:24:03:
9c:d3:c8:4a:69:f1:bd:f7:d7:1a:a5:b1:0d:f4:11:
08:81:50:37:4e:fe:99:d2:5a:6c:54:dc:ad:af:15:
07:94:45:f3:4d:6d:45:09:c5:4e:5e:19:53:b1:64:
2f:64:1b:3d:b1:fb:5f:9b:58:ce:f3:79:5a:15:4b:
90:b3:80:ed:3c:94:0e:c5:6d:d5:48:05:4a:83:da:
af:95:23:6e:f1:54:2a:87:79:62:31:bb:62:ce:7e:
c0:45:53:7d:e2:f1:f9:d0:9e:c4:5a:c9:51:e2:94:
66:51:71:58:49:9f:fe:12:18:7e:97:00:9c:a0:37:
8c:bc:ad:b3:57:99:56:83:c4:60:85:d0:64:8a:63:
c4:07:49:99:d2:0d:a9:5f:63:70:5b:49:37:7b:2f:
1e:2e:bd:4a:ca:7d:77:f0:bc:f4:43:1e:75:01:44:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:06:21:65:C0:35:DC:D9:44:C6:A9:F3:A0:C3:7E:98:5F:FB:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22808256162B11F1B443A2C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.12.0-154.80.21.255
Signature Algorithm: sha256WithRSAEncryption
80:0e:d3:c7:cb:7c:ba:7a:81:c2:1f:db:24:0e:a8:cd:2a:e7:
58:f7:a2:a7:f2:94:9f:5e:3c:b4:46:ff:62:db:98:03:30:53:
70:2f:c7:97:ea:5c:0b:ee:6f:5c:69:50:b0:37:d0:7e:03:bb:
b0:8f:f4:3f:d1:17:a6:aa:22:4d:e8:60:04:61:e7:12:62:66:
93:1e:5b:27:9f:0f:60:54:4a:7e:28:ac:fe:bd:0b:d3:20:b0:
48:95:84:51:4d:82:54:e6:61:51:5d:cf:73:c4:c1:0d:05:1e:
5f:2c:72:77:e6:a2:ea:8e:3d:ff:a4:e8:e2:e3:9f:f1:a9:f6:
46:09:74:db:3c:7e:61:71:7c:40:8e:72:b4:d9:34:b2:98:f6:
d7:6c:e5:a2:52:fc:b0:b7:00:e5:7d:a2:1d:00:3e:70:dd:e7:
83:77:ff:73:4b:b1:f2:e9:e9:3a:10:5d:2a:73:8a:83:89:cb:
d4:24:c1:cd:6b:b7:ef:39:ea:6f:49:d0:33:ba:8d:17:5e:2f:
12:92:2f:54:d1:67:3a:f8:f8:f0:2c:46:97:d4:25:98:90:9c:
82:3a:6b:39:ac:20:6a:80:d1:53:98:74:cf:61:97:d6:64:81:
4f:25:32:29:97:39:96:c0:54:62:09:bd:32:39:48:3c:9a:ca:
74:ce:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:49 2026 by rpki-client