Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57077BBE458911F1AE4975AACE1D38B0.roa
File: 57077BBE458911F1AE4975AACE1D38B0.roa (raw, json)
Hash identifier: zbql5IZDT5rt6dXqAKjwHG7fBiTfIUaE0OcN06OnRqg=
Subject key identifier: 30:D1:48:F4:C4:A9:DC:EB:2D:1B:5D:BB:9A:57:4C:36:EE:64:4E:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57077BBE458911F1AE4975AACE1D38B0.roa
Signing time: Fri 01 May 2026 18:12:40 +0000
ROA not before: Fri 01 May 2026 18:12:35 +0000
ROA not after: Fri 05 Jun 2026 18:12:35 +0000
asID: 202656
IP address blocks: 154.222.1.0/24 maxlen: 24
154.222.12.0/24 maxlen: 24
154.222.13.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116953 (0x1c8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 18:12:35 2026 GMT
Not After : Jun 5 18:12:35 2026 GMT
Subject: CN=69f4ed18-76a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:69:ca:cf:51:af:a8:50:d2:24:35:4a:2f:
ae:56:e2:45:a2:c1:58:94:de:a3:f0:e0:4d:cd:66:
87:22:ff:7c:9d:20:95:7a:02:3e:a8:c0:fe:b5:24:
dc:50:e4:95:8c:8f:50:d3:22:6b:5f:8d:b2:d1:c5:
aa:c5:d8:c6:97:a4:19:1e:a1:74:56:c4:66:18:a5:
3b:3f:ef:2f:96:e4:82:ba:7a:60:82:af:36:3c:d9:
53:26:8f:1a:67:14:3c:43:f3:7a:50:0c:49:9c:10:
ee:25:76:82:2a:b2:17:f0:da:85:0b:83:f4:71:66:
b8:7b:c9:5c:79:bf:81:63:9e:c6:cf:23:a8:82:1c:
53:17:df:2b:d5:43:2f:06:20:d3:c8:10:70:37:9b:
08:d4:fa:a5:a5:a6:07:9d:a5:a4:b2:a2:e8:ea:f7:
07:ae:17:aa:41:e0:60:c1:61:6c:fb:ab:56:68:f0:
c0:cf:6f:d1:73:9b:7d:7b:42:9b:5f:ab:f2:6d:cb:
54:67:4c:92:43:2e:0d:c0:d0:b8:9b:f0:ce:bc:c2:
6b:6e:40:f6:09:a4:6e:67:67:d9:e9:05:4c:69:80:
88:44:b7:4a:17:3c:f6:e7:9f:f0:ed:2c:1d:b7:4e:
5c:85:28:c8:4e:c3:f7:35:7c:13:0e:63:c0:e8:f4:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:48:F4:C4:A9:DC:EB:2D:1B:5D:BB:9A:57:4C:36:EE:64:4E:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57077BBE458911F1AE4975AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.1.0/24
154.222.12.0/22
154.222.43.0-154.222.47.255
Signature Algorithm: sha256WithRSAEncryption
29:61:d6:f5:8a:3f:95:dc:6a:d0:f4:b9:a1:9a:de:a6:66:61:
66:ef:05:d1:c6:a1:25:68:5b:65:18:dc:15:22:26:90:9b:80:
6a:7e:c3:8e:33:dc:0c:59:11:0e:e0:fc:67:ad:c8:0b:dd:7e:
4f:fb:0a:91:a5:3e:24:37:9d:a0:2d:f9:6c:95:24:28:4e:ca:
6b:90:73:81:2c:43:9a:06:3a:47:82:8e:ec:30:f3:e3:cb:81:
5e:7e:a0:fd:33:53:95:7b:91:01:ce:4b:90:66:ad:ff:b0:d9:
4a:d4:f1:6f:bc:38:c2:a4:c1:fd:68:24:45:23:77:73:0c:95:
8d:03:cf:1e:cc:12:c7:07:cd:ab:81:35:62:b6:0c:2c:37:b3:
a6:ea:59:cd:3e:b3:23:43:a1:d7:68:87:bf:02:a3:fe:b8:29:
1d:e0:eb:6d:e0:35:01:ca:38:6e:76:f9:e6:27:94:8f:55:c1:
88:4c:55:6e:67:0e:4b:84:e2:04:ff:a8:b0:c0:f0:46:4e:56:
b7:19:34:88:cb:c8:b4:7a:8d:3e:cd:a0:9f:c1:be:9f:cd:c6:
0e:13:c4:5a:14:0d:02:3e:88:42:d7:3a:e0:8a:af:6d:dd:73:
2e:43:44:b0:7f:48:9e:82:53:ac:e1:6f:aa:92:ea:3d:34:e2:
18:dc:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:58 2026 by rpki-client