Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22D9753C3E6211F19969B40FCF1D38B0.roa
File: 22D9753C3E6211F19969B40FCF1D38B0.roa (raw, json)
Hash identifier: C6ocj+btHYtEv2HFMIJQyL0NO/Fl7X6oFHsZHJjZFUo=
Subject key identifier: 92:B9:3E:41:51:73:BE:09:7A:11:1E:07:A6:CA:15:9F:C4:FF:CC:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C691
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22D9753C3E6211F19969B40FCF1D38B0.roa
Signing time: Wed 22 Apr 2026 15:44:24 +0000
ROA not before: Wed 22 Apr 2026 15:44:18 +0000
ROA not after: Sat 30 May 2026 15:44:18 +0000
asID: 32043
IP address blocks: 154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 11:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116369 (0x1c691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 15:44:18 2026 GMT
Not After : May 30 15:44:18 2026 GMT
Subject: CN=69e8ecd8-4c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:c3:fe:e9:50:9f:d7:4f:d4:7e:78:af:0d:
a6:0d:c7:9d:03:86:92:01:30:db:05:98:64:5a:12:
7a:1d:fb:d9:06:49:20:88:6b:cc:71:a7:e1:c0:ca:
8f:22:ed:96:c8:a0:b7:0e:39:c2:d4:b1:d3:2c:53:
84:05:6e:51:51:a1:09:ae:ba:7f:64:0a:1a:fe:40:
e3:0a:25:a6:99:ca:49:4e:e6:57:91:26:80:57:2f:
2f:b5:68:a2:15:01:f5:28:e1:4d:48:bb:27:1c:43:
a2:0a:cc:22:3b:ac:81:f9:00:0f:81:51:ce:63:e8:
1b:ab:fb:d6:9e:74:81:09:2e:a7:da:76:cf:61:63:
03:77:b2:0f:72:14:60:45:b3:a3:40:ee:f0:59:dd:
0b:db:72:66:93:7e:2a:60:4b:43:e0:3c:40:ab:16:
a3:bc:1d:67:82:7d:a3:9a:86:c1:2e:b1:80:4b:1b:
dd:0e:3b:0a:5c:ea:8d:02:0b:ce:56:88:f1:58:e5:
83:fd:46:3a:eb:10:6b:64:4f:b0:98:ba:b7:f3:87:
52:97:4f:13:e8:1c:00:7c:f6:59:67:19:ae:cd:4d:
40:7a:9b:dc:e7:f0:7c:26:fd:38:6a:0d:b4:d5:8d:
53:e1:71:34:98:ad:4b:e0:98:27:8f:3f:cd:ca:e5:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:3E:41:51:73:BE:09:7A:11:1E:07:A6:CA:15:9F:C4:FF:CC:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22D9753C3E6211F19969B40FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
90:f2:56:e4:fc:2f:ad:e7:0b:e2:e7:2f:74:14:b2:4c:bc:44:
29:6c:82:6a:af:e8:8c:76:e3:63:be:84:5f:bf:56:18:94:ae:
3a:09:a1:39:a0:23:5e:1a:1c:74:ca:90:a2:47:3e:b7:8f:d8:
4c:18:32:d3:ea:50:e7:0d:a0:01:e9:95:ee:25:29:86:a1:db:
7f:5e:b6:ca:3f:e4:e5:3b:68:c8:ad:a4:87:dd:db:1d:67:a6:
f9:61:16:00:03:64:82:89:cd:a8:25:c6:d8:c1:0c:d8:d8:eb:
d1:1f:d0:4d:fc:63:1c:fb:d4:3e:6f:89:c2:6c:41:67:81:fc:
32:c6:34:3f:b7:59:22:e2:6b:41:6d:aa:a4:c8:7d:ff:2e:67:
4a:1f:75:0e:5a:8a:dd:dd:3a:1f:bf:0d:9f:86:5c:35:af:c6:
f6:1a:2b:c2:b3:9a:e7:d2:c2:ed:93:3e:a7:c4:f0:7e:18:48:
0c:33:0b:54:40:8c:87:85:15:32:90:65:a8:81:a3:82:aa:9d:
7b:0a:00:69:88:cd:1f:a5:49:22:92:ff:7c:69:25:66:33:7d:
13:25:49:7a:92:d0:88:13:8a:eb:15:fd:3a:d6:01:ca:0d:ea:
ed:8a:0d:ca:ed:3f:3e:10:9a:92:bf:d7:fc:05:76:13:cb:fd:
df:56:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:36:17 2026 by rpki-client