Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3421EDC8161811F1BEC0D9D4DAE4EC9C.roa
File: 3421EDC8161811F1BEC0D9D4DAE4EC9C.roa (raw, json)
Hash identifier: qGpFpo7h5StvEO4xMtVPw4gAkeGqnOaiWEgCsi3l6oU=
Subject key identifier: A2:36:04:53:88:9F:1D:01:F6:D7:0F:50:CC:A0:C2:74:F9:DF:94:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3421EDC8161811F1BEC0D9D4DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:14:23 +0000
ROA not before: Mon 02 Mar 2026 09:14:18 +0000
ROA not after: Thu 09 Apr 2026 09:14:18 +0000
asID: 63139
IP address blocks: 154.223.22.0/24 maxlen: 24
154.223.25.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.31.0/24 maxlen: 24
154.223.36.0/24 maxlen: 24
154.223.38.0/24 maxlen: 24
154.223.39.0/24 maxlen: 24
154.223.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113889 (0x1bce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:14:18 2026 GMT
Not After : Apr 9 09:14:18 2026 GMT
Subject: CN=69a554ef-b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:52:57:be:6c:b0:a3:e3:0e:73:ba:1f:2f:
7b:0a:3b:e2:37:28:17:f9:47:71:56:2f:16:f8:dc:
5d:70:16:d5:1f:12:fa:e1:36:cd:38:05:04:e6:05:
db:cb:dc:60:43:1b:65:e5:60:27:a2:d5:e9:ce:58:
0b:35:0f:f4:60:19:35:4a:4d:5c:87:ab:31:d1:30:
00:11:e3:74:de:ba:20:23:e7:04:66:81:9c:8c:2e:
4f:1b:0f:39:fe:e7:9e:21:79:fe:81:12:59:4b:01:
24:c3:81:9d:66:31:08:c0:55:82:62:87:f9:74:02:
b3:f2:a4:21:68:a6:8b:69:70:18:6e:dd:14:74:40:
be:17:f6:79:54:c8:4c:84:a0:c1:fb:2e:7f:32:94:
82:c0:47:59:93:25:fe:ce:6c:87:89:b6:37:af:44:
a3:7e:6f:15:19:63:ac:17:72:fe:14:94:99:65:f2:
8b:2f:2b:03:83:f6:0d:6c:e4:4f:bc:f6:60:92:e7:
5f:ea:ae:be:89:f2:48:84:a0:50:8e:a9:64:95:89:
93:31:c7:80:d0:68:ed:c9:fc:78:a4:d1:74:33:fb:
26:56:3d:28:88:9a:d0:d3:04:9a:f4:d2:7a:4d:4c:
7d:49:3f:a9:e4:c5:1d:1a:36:70:9d:18:27:f8:e5:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:04:53:88:9F:1D:01:F6:D7:0F:50:CC:A0:C2:74:F9:DF:94:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3421EDC8161811F1BEC0D9D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
154.223.25.0/24
154.223.27.0/24
154.223.30.0/23
154.223.36.0/24
154.223.38.0/23
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2c:43:4b:3f:c5:9d:9a:b1:10:1b:bf:19:d2:78:38:e7:5a:
57:3c:be:9a:a3:3d:2d:d5:3f:f1:a7:6a:75:02:5e:39:ac:ec:
a5:cd:76:85:86:aa:8a:9f:33:50:f5:b6:2e:1d:66:3e:69:84:
ec:5f:25:08:ee:5e:6c:40:4d:c3:80:5a:6f:96:84:36:78:2f:
f1:42:c2:65:3d:52:37:39:2c:44:d1:87:a5:89:61:63:f8:eb:
37:bc:72:ba:16:ec:2f:da:fc:9c:96:f3:aa:18:f2:42:01:ac:
30:f2:83:e9:35:58:01:fe:21:4e:03:52:99:0b:7f:9d:d3:ac:
b8:13:40:ae:6a:0c:3b:4c:39:66:aa:64:54:84:a6:e3:8c:e0:
ce:a7:30:17:9e:47:2b:c4:2d:12:43:25:f8:fc:1c:c9:7f:52:
26:38:f6:10:e7:33:9f:c7:93:ee:cd:63:e1:86:ae:f0:66:b0:
8b:2d:af:a6:38:73:aa:25:35:6b:b2:34:aa:2a:01:ee:ff:b0:
49:bc:55:d6:4a:c2:66:dd:a9:da:79:e5:88:7b:3d:66:0c:d5:
4c:e0:33:28:8b:fb:dc:41:42:c6:38:c1:4c:c5:ea:b1:de:bc:
f8:c6:19:3d:ab:91:fe:69:b8:bc:04:1a:9a:e0:31:63:98:89:
3f:ca:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:34 2026 by rpki-client