Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB2CEAE8E4B11F18F2BF9AFCE1D38B0.roa
File: 3AB2CEAE8E4B11F18F2BF9AFCE1D38B0.roa (raw, json)
Hash identifier: 3PizHJqdp2ELe9OyPxBE2TcXQ796fVfas3P23K/ii1k=
Subject key identifier: 1F:8A:DA:DB:04:4F:C6:FB:AF:0B:F8:5B:0B:8A:B2:F2:E5:C1:6E:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB2CEAE8E4B11F18F2BF9AFCE1D38B0.roa
Signing time: Sun 02 Aug 2026 08:21:59 +0000
ROA not before: Sun 02 Aug 2026 08:21:54 +0000
ROA not after: Wed 16 Sep 2026 08:21:54 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121927 (0x1dc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 08:21:54 2026 GMT
Not After : Sep 16 08:21:54 2026 GMT
Subject: CN=6a6efe27-de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:10:22:1b:4d:19:2b:5f:dd:e9:7c:89:d9:
d2:47:43:43:7a:66:fc:22:bb:f9:0f:8a:44:f6:a9:
1f:41:52:e1:83:ef:a4:2b:4f:74:b2:89:27:6d:3e:
f8:7c:93:a8:9f:aa:80:49:0c:3a:6f:3a:2e:dc:28:
e5:37:0b:51:3a:d8:d9:4f:27:ad:30:83:2c:e6:f1:
57:ce:a2:bd:af:31:aa:7e:ee:3b:66:be:63:4b:1b:
37:a3:38:2d:fa:32:76:a2:31:79:c3:e5:2b:21:bf:
32:2f:83:83:cc:4a:5b:12:23:61:7d:e4:63:b5:da:
5a:53:6a:cf:18:b4:d2:44:56:09:2c:4e:27:72:46:
21:7d:34:c1:c6:7c:34:57:cc:f7:83:13:1d:dc:f4:
c3:58:41:e4:29:1c:3c:cf:4b:d3:6b:1b:82:e7:62:
19:d9:dc:7f:ed:4b:88:0b:39:60:03:cc:a7:7f:18:
21:68:69:d7:a6:9b:18:6a:59:96:36:56:12:6f:12:
66:70:d7:8b:d3:30:89:b6:d9:ea:1e:a4:16:2c:bc:
73:00:0d:dd:49:ce:b1:a9:ca:82:c5:ea:c2:6d:fb:
ca:87:56:d8:d8:96:58:7d:71:84:a3:7c:af:7b:eb:
9b:11:dd:0b:20:5d:4a:a9:96:8b:2a:e4:d9:e7:0f:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:DA:DB:04:4F:C6:FB:AF:0B:F8:5B:0B:8A:B2:F2:E5:C1:6E:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB2CEAE8E4B11F18F2BF9AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:07:bc:cd:05:94:ca:49:a0:ec:ca:69:6a:06:0d:a8:c1:db:
df:0e:61:6c:22:e3:28:ed:fd:5f:65:fd:e3:f9:23:6c:eb:1e:
a2:19:f6:db:96:e4:8e:0c:04:c5:3a:22:49:8c:9c:a6:53:f8:
e4:14:94:89:ad:81:d8:b4:ea:ee:57:55:e3:e7:a5:af:19:02:
f2:fc:60:7a:e9:6d:14:fd:27:4e:3d:88:a9:15:10:50:11:d1:
99:bf:26:ce:00:30:ac:a6:63:df:9a:0c:30:30:88:63:52:53:
93:23:f0:e1:5f:87:82:be:20:1e:54:70:8b:73:6f:65:79:e9:
d1:0d:0d:b7:a9:2a:0c:e5:e5:c2:47:a2:0a:29:85:44:30:00:
5e:92:58:c0:3f:d8:5b:86:ff:52:24:18:8d:29:01:11:c9:54:
6d:d0:f0:1b:6a:ac:e7:0b:0c:77:ad:50:5e:8b:9a:df:71:ac:
13:85:33:95:f6:ee:dc:68:3e:02:42:b3:1f:8b:3a:30:8a:70:
e1:17:24:3e:a8:59:89:e6:9d:ab:81:15:b8:45:8e:18:c2:e2:
6c:6f:2e:f2:f0:38:94:71:93:58:3c:56:c8:07:e7:ba:02:a8:
78:86:01:b2:43:d6:70:08:95:4f:9b:1d:9b:29:61:b4:5b:1d:
35:87:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 14:10:28 2026 by rpki-client