Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EE50F68449B11F1A4461207CF1D38B0.roa
File: 3EE50F68449B11F1A4461207CF1D38B0.roa (raw, json)
Hash identifier: mUZXCAzKx5dld5k0xsqVH16Oi+3+4f7nHIbmq03cIDs=
Subject key identifier: B5:6B:35:25:B1:66:23:94:12:AB:19:62:33:18:24:BC:40:3A:5F:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C84D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EE50F68449B11F1A4461207CF1D38B0.roa
Signing time: Thu 30 Apr 2026 13:48:19 +0000
ROA not before: Thu 30 Apr 2026 13:48:15 +0000
ROA not after: Fri 05 Jun 2026 13:48:15 +0000
asID: 48031
IP address blocks: 154.222.213.0/24 maxlen: 24
154.222.214.0/24 maxlen: 24
154.222.223.0/24 maxlen: 24
154.222.240.0/24 maxlen: 24
154.222.241.0/24 maxlen: 24
154.222.243.0/24 maxlen: 24
154.222.244.0/24 maxlen: 24
154.222.245.0/24 maxlen: 24
154.222.246.0/24 maxlen: 24
154.222.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116813 (0x1c84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:48:15 2026 GMT
Not After : Jun 5 13:48:15 2026 GMT
Subject: CN=69f35da3-2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:43:4e:a9:76:68:95:4f:b0:f0:e3:3e:6e:4e:
fd:81:52:19:1d:7e:07:46:01:1a:c4:ce:09:01:2b:
66:d4:a0:ce:4d:92:3a:07:81:f9:ce:53:33:df:3c:
53:a3:40:14:3c:15:9f:63:74:2b:68:38:0b:63:93:
67:fb:d2:f0:c5:04:59:90:1a:d2:c8:dc:47:7c:25:
c9:c4:95:b9:59:5c:9c:1d:52:cb:4a:9d:79:fe:fe:
6e:16:ab:26:78:c5:3c:8e:74:7c:dd:8e:0c:5a:02:
18:1e:52:49:23:5e:19:12:d7:46:97:8e:4f:b9:b3:
aa:3f:a5:21:dc:ef:b2:40:72:f7:4d:2e:f2:e8:35:
c5:41:10:bf:69:0f:8a:07:cb:e6:a3:fc:0a:b9:fd:
6c:94:f0:1f:24:19:05:c2:6d:6d:93:d8:f1:e2:b8:
c1:52:63:12:c3:dd:91:a4:ac:ca:4d:13:ab:0a:b1:
f2:23:55:81:81:27:30:8d:9d:d9:92:08:39:03:8f:
0b:bc:f5:5d:68:b9:9b:ba:e7:2d:70:44:b1:1e:38:
23:e3:82:c9:0f:e7:ce:68:e8:c7:e5:84:14:30:c2:
db:59:ad:81:a6:52:ac:10:19:be:0e:84:11:f2:f5:
42:90:49:c2:72:86:39:a3:b4:1f:f4:66:1a:24:da:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:35:25:B1:66:23:94:12:AB:19:62:33:18:24:BC:40:3A:5F:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EE50F68449B11F1A4461207CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.213.0-154.222.214.255
154.222.223.0/24
154.222.240.0/23
154.222.243.0-154.222.247.255
Signature Algorithm: sha256WithRSAEncryption
05:1e:57:59:9a:62:0d:51:99:f2:ef:a5:83:28:cd:f3:be:86:
5b:a8:6a:6c:4f:f2:d3:08:83:9c:92:78:ae:b2:20:44:ac:51:
7c:1c:c7:31:68:04:f3:49:e2:f7:a7:05:54:fa:25:2e:26:d0:
d6:bd:cc:c6:4f:a5:3a:34:ba:47:b0:fd:52:5f:25:91:20:f8:
de:ac:ec:41:2a:1b:3e:ff:c5:5f:2c:28:d4:06:74:5b:a9:15:
57:4c:b4:66:ba:e0:6c:e5:95:5e:d8:a4:d1:5f:1b:c4:66:1a:
57:0c:06:fd:12:ca:bb:c0:c0:58:1e:a2:cb:a0:ff:67:0d:22:
f5:96:6b:e1:f8:a4:c0:56:16:1c:6a:89:20:31:22:ef:ec:7c:
ef:48:95:29:93:35:41:70:92:8b:d0:64:02:5e:ba:44:9d:0c:
1d:74:f0:de:89:cf:fe:68:d1:b3:e0:5b:7e:fc:2a:ec:00:cf:
0d:09:c6:f2:ea:c4:88:75:a0:05:50:1e:7f:c4:63:bd:25:93:
c5:16:43:24:1c:d7:d6:f2:a1:2d:9f:d3:6f:db:3c:24:6b:84:
fc:8b:36:13:e0:b9:80:1d:21:97:e6:ce:1f:66:b9:79:63:82:
bf:d5:ec:3b:80:1e:0e:69:11:4d:73:6f:25:ac:1c:5e:3a:7f:
bf:82:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:05 2026 by rpki-client