Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B05706430811F18596F2F2CE1D38B0.roa
File: 22B05706430811F18596F2F2CE1D38B0.roa (raw, json)
Hash identifier: pVpe632BNzmbNBhOj3bbLrmMnuI9Zi2tVVtveSiHAn4=
Subject key identifier: E4:EF:48:BF:8C:FE:87:F9:B3:D5:12:52:99:7D:AB:97:E2:08:EE:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B05706430811F18596F2F2CE1D38B0.roa
Signing time: Tue 28 Apr 2026 13:42:45 +0000
ROA not before: Tue 28 Apr 2026 13:42:40 +0000
ROA not after: Wed 28 Jul 2027 13:42:40 +0000
asID: 328608
IP address blocks: 154.200.146.0/24 maxlen: 24
154.200.147.0/24 maxlen: 24
154.200.148.0/24 maxlen: 24
154.200.149.0/24 maxlen: 24
154.200.150.0/24 maxlen: 24
154.200.152.0/24 maxlen: 24
154.200.153.0/24 maxlen: 24
154.200.163.0/24 maxlen: 24
154.200.164.0/24 maxlen: 24
154.200.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116667 (0x1c7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:42:40 2026 GMT
Not After : Jul 28 13:42:40 2027 GMT
Subject: CN=69f0b955-c8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:81:d1:a4:83:cb:a0:e2:af:cc:c7:90:57:
37:35:5a:a8:87:7d:d0:54:f6:02:d1:6f:b6:c5:e9:
1c:1b:8d:48:69:c9:cc:36:58:87:8c:d9:70:50:87:
b7:3d:04:e0:a9:9c:e5:51:0f:8c:9c:25:81:50:63:
08:c2:56:59:ef:a2:75:c0:f0:3e:1b:fc:4a:33:00:
7a:8e:e5:7b:01:1d:cb:c3:19:b9:cd:80:e0:e0:cf:
74:04:fe:16:86:8a:10:65:f9:c4:3b:a3:bf:8d:7b:
2d:bf:96:67:40:50:8f:85:41:eb:fc:1e:16:7f:bc:
5e:14:4c:7a:40:0f:e2:c7:85:a7:12:08:46:7d:f9:
df:ff:7e:72:50:d4:7d:76:8c:38:4a:5f:0c:0b:8a:
ff:f9:b2:c4:fc:d2:92:e6:2e:88:42:c6:50:c0:7b:
03:fe:38:f0:47:6d:50:0e:91:02:fa:31:8a:dd:d8:
9a:a9:f7:14:60:4d:12:fa:70:cb:dc:a1:d1:d5:1b:
ac:43:9f:07:3a:7c:e5:29:7d:b2:53:32:41:6e:aa:
c7:db:cb:df:fd:fe:2c:e8:cc:9a:0d:93:de:5d:b0:
a8:20:1c:c0:c6:c3:06:82:f8:09:12:3f:12:21:46:
34:d7:e9:a9:f8:d6:ae:11:d9:07:f9:86:39:14:da:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:48:BF:8C:FE:87:F9:B3:D5:12:52:99:7D:AB:97:E2:08:EE:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B05706430811F18596F2F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.146.0-154.200.150.255
154.200.152.0/23
154.200.163.0-154.200.165.255
Signature Algorithm: sha256WithRSAEncryption
b4:bb:9d:3c:34:96:df:a8:0c:94:6d:8c:da:17:6c:65:ca:eb:
13:cb:73:47:48:66:05:2c:f1:65:5c:0e:8d:70:e1:71:78:27:
a0:0b:8a:4f:d3:e6:d2:6f:c0:a4:da:f7:f4:10:77:88:1f:42:
22:82:81:d6:ee:a3:ec:3f:06:77:0e:68:48:a4:96:e2:f7:c1:
ef:80:33:2e:7c:58:74:7a:34:a8:a7:14:78:40:af:86:c7:c8:
27:56:73:64:00:a3:f6:2d:56:f7:31:c0:e1:1f:fd:49:d3:6a:
d9:fd:ff:1c:38:26:38:60:65:7e:48:31:e6:42:da:0a:26:aa:
6f:18:1b:63:10:c7:56:65:20:4e:04:3c:b1:05:8b:da:0a:b4:
c3:eb:52:2d:4d:61:b2:20:e6:eb:06:4d:f1:73:d5:d5:20:90:
01:8d:f0:7f:13:a9:30:c6:f9:c4:bc:99:cf:19:3c:4f:4b:af:
26:36:21:08:d8:ed:ca:c8:8e:39:7b:bd:56:a9:46:ba:51:6d:
b3:31:08:99:8c:63:6b:f6:3b:b1:29:2f:2b:b7:62:a1:78:82:
61:2f:6e:4f:d8:92:63:07:48:15:f0:57:08:53:8c:5e:ba:cc:
17:05:9f:d3:ea:42:65:55:97:ca:b8:de:c2:1e:d6:a6:e1:01:
29:88:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:48:28 2026 by rpki-client