
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/467921E890A811F186D69703CF1D38B0.roa
File: 467921E890A811F186D69703CF1D38B0.roa (raw, json)
Hash identifier: pv2+QpuWo+7nYW+piQtd2flkCIP2sO7YxXx66Zb6IHU=
Subject key identifier: ED:29:93:DD:D9:58:02:A2:D4:03:B2:CC:FB:28:B1:56:C2:84:E8:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/467921E890A811F186D69703CF1D38B0.roa
Signing time: Wed 05 Aug 2026 08:33:04 +0000
ROA not before: Wed 05 Aug 2026 08:33:00 +0000
ROA not after: Sun 15 Aug 2027 08:33:00 +0000
asID: 36898
IP address blocks: 154.214.212.0/24 maxlen: 24
154.214.214.0/24 maxlen: 24
154.214.215.0/24 maxlen: 24
154.214.216.0/24 maxlen: 24
154.214.217.0/24 maxlen: 24
154.214.219.0/24 maxlen: 24
154.214.221.0/24 maxlen: 24
154.214.222.0/24 maxlen: 24
154.214.223.0/24 maxlen: 24
154.214.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122049 (0x1dcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 08:33:00 2026 GMT
Not After : Aug 15 08:33:00 2027 GMT
Subject: CN=6a72f540-902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:ca:75:be:ae:72:4f:74:19:21:32:0a:fc:
46:8f:8c:f4:79:18:f1:36:49:1d:40:2a:4b:6c:3a:
b3:1a:71:cd:b3:aa:48:f3:4e:10:e1:cb:15:e2:d8:
38:ab:6f:4a:60:bb:9b:42:da:bb:47:82:7e:f5:f3:
0c:38:98:bb:cc:d6:9a:a8:fb:7e:a3:f7:5e:85:a7:
bf:69:fa:2d:b3:0b:5e:43:80:7b:d7:0e:d3:12:36:
da:f2:3f:c2:c2:8b:cc:90:70:0e:52:02:2d:b8:77:
cc:40:df:a8:dc:18:58:14:b5:91:e8:d8:3f:9e:1e:
b1:91:0c:d6:13:9f:f4:51:d0:26:1e:e8:11:cb:69:
ff:d9:d9:b2:a8:7c:97:37:63:08:2f:87:28:3b:cc:
a9:9b:91:ae:95:af:77:bb:33:7f:3d:f4:cf:e0:f5:
e2:dd:37:2c:2f:e9:ef:ff:ac:c1:b2:f5:7a:50:83:
81:ec:ff:03:a3:65:b8:0b:36:1c:73:aa:d2:6f:e5:
6f:f1:2e:25:a0:35:2c:34:f2:30:eb:92:36:be:5f:
df:3a:af:03:b1:ba:f8:61:75:b8:34:34:5c:98:3c:
7a:cd:0d:49:2a:44:62:0a:03:8b:75:13:fc:c9:ed:
fc:aa:74:5d:d5:11:d3:59:ae:b3:cc:c8:aa:a6:2b:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:93:DD:D9:58:02:A2:D4:03:B2:CC:FB:28:B1:56:C2:84:E8:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/467921E890A811F186D69703CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.212.0/24
154.214.214.0-154.214.217.255
154.214.219.0/24
154.214.221.0-154.214.223.255
154.214.228.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fc:6a:b0:96:74:dc:ca:cd:a4:3a:1d:97:fe:d8:66:66:24:
c8:e2:52:c6:8b:42:e9:aa:1d:8a:0d:da:f3:fe:2f:96:26:00:
e8:bb:10:24:21:00:a9:da:4c:d7:a7:f5:5e:8f:4f:f0:8e:7c:
75:23:f6:53:9a:57:25:31:ce:40:c4:e7:cd:16:ee:3c:cb:16:
10:45:41:a5:07:98:48:0b:d5:0d:fb:db:02:b8:b9:3b:ef:4e:
37:9b:93:0d:79:58:ea:54:bb:c7:0f:15:3c:10:28:20:0c:12:
bd:6d:aa:95:d0:35:62:1a:4a:6c:cc:51:df:fc:d3:f5:cc:0e:
bf:ba:52:f9:86:91:05:53:c4:f6:16:1d:cf:e7:76:cc:4d:12:
d8:d5:42:6f:37:1c:2b:46:94:09:2e:0d:0c:ef:70:42:6a:aa:
3c:2b:1b:56:99:d7:34:05:20:ae:83:bb:ee:56:f5:4d:64:03:
a4:27:1c:d1:64:e7:17:10:0e:04:ff:41:52:c1:e1:d2:92:0c:
c4:1e:36:7f:ff:4c:49:2a:c0:64:08:82:4b:0b:b5:75:74:26:
53:04:09:a7:d1:79:18:3a:b1:19:95:49:4d:28:81:5a:14:f4:
43:fe:2d:ec:ae:46:39:c4:fa:ac:86:8a:b8:cb:3b:4b:c8:7e:
44:4e:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:48 2026 by rpki-client