Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22F9602E6A3E11F1B8DAFDEDCE1D38B0.roa
File: 22F9602E6A3E11F1B8DAFDEDCE1D38B0.roa (raw, json)
Hash identifier: 2iSA82QFe2OLunH2KGueip/GGYo5hiX640AhnZqXHww=
Subject key identifier: BF:03:BD:F4:70:36:43:6F:99:F8:3D:FA:4D:2F:30:A9:90:F2:D2:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22F9602E6A3E11F1B8DAFDEDCE1D38B0.roa
Signing time: Wed 17 Jun 2026 11:17:33 +0000
ROA not before: Wed 17 Jun 2026 11:17:29 +0000
ROA not after: Fri 24 Jul 2026 11:17:29 +0000
asID: 154376
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119720 (0x1d3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 11:17:29 2026 GMT
Not After : Jul 24 11:17:29 2026 GMT
Subject: CN=6a32824d-dd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:80:9d:39:53:a8:c2:f8:18:d2:dc:58:40:
f5:d2:91:59:b8:f3:92:59:99:2c:1d:e6:43:25:3e:
8e:ad:5f:cd:46:be:a6:e2:8e:75:28:af:a0:39:2d:
8a:2a:30:53:44:32:8b:0a:51:16:9c:d0:6b:36:c4:
8e:bd:67:e8:db:31:aa:07:2e:80:8e:27:f7:cb:8f:
f2:68:3c:7e:69:f6:6b:17:be:54:7c:25:be:e8:7f:
7b:8e:5b:cc:c8:02:b6:85:3e:bc:6d:ce:7f:73:d9:
2c:73:b8:61:6a:e5:01:d2:35:92:b7:97:f0:36:0e:
9b:4c:74:5b:1e:70:f6:58:9b:f5:bb:34:4b:7e:3e:
b1:09:5a:97:3b:a0:b6:d1:89:f4:9a:c3:4d:27:2f:
31:60:4d:6e:9b:71:7c:34:f3:5d:9a:7c:88:73:3d:
e4:a1:a3:6c:27:44:79:26:35:a2:67:28:f4:ce:ad:
c0:7b:ca:37:52:67:ba:c8:01:11:ed:a2:88:7d:9e:
04:a4:0c:14:be:5f:8a:ee:66:02:53:85:21:8c:b2:
9e:69:14:63:88:67:b2:08:f9:8b:fe:e4:4a:87:1b:
68:4c:6a:b6:57:cf:c7:37:6e:b0:42:e9:6b:c4:d3:
19:cd:5a:82:0d:a3:19:96:ce:e9:76:66:42:0d:a0:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:BD:F4:70:36:43:6F:99:F8:3D:FA:4D:2F:30:A9:90:F2:D2:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22F9602E6A3E11F1B8DAFDEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
16:db:98:a4:be:3f:bd:47:c7:da:85:99:a9:83:90:d0:37:ae:
38:b2:a5:d3:77:ac:87:9d:96:99:da:a3:9f:7d:7f:4f:e8:44:
af:6a:a2:f1:5d:d0:bc:a7:6c:60:92:7f:64:6a:f1:88:08:c4:
0a:58:56:e4:cf:67:3d:20:27:0f:b9:30:98:74:35:d5:de:1e:
ce:d8:d9:04:a6:3a:36:a0:0e:a2:07:5f:55:f3:89:5e:7b:37:
7f:12:11:96:0d:30:f9:7e:56:6a:40:a0:2e:9a:b0:19:86:c6:
de:28:6c:c3:ef:60:d2:5e:8b:30:b4:b8:ef:82:15:15:8b:af:
24:be:5f:6c:e4:8a:e5:10:cd:b9:ce:79:81:38:bb:25:82:4a:
c0:be:b3:02:4e:62:a6:42:79:57:c4:6a:75:ea:93:f3:8b:63:
05:89:b5:05:9f:e8:83:7f:be:49:5d:86:b2:7e:ad:ac:33:74:
23:ff:c7:b6:97:8c:f4:b1:77:ab:7a:d6:96:4b:d8:47:5c:26:
ae:b9:14:8d:73:f0:7c:d6:75:37:94:4b:53:6f:f8:a6:48:bd:
9c:b6:58:0f:65:c4:5d:a3:a9:81:33:42:f6:79:7e:69:ce:9b:
8f:e6:44:cf:27:66:8a:0a:5c:b3:d6:4b:40:8d:98:e9:d5:3e:
b0:b5:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:18 2026 by rpki-client