Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/644841FC535111F1A0B3CA00CF1D38B0.roa
File: 644841FC535111F1A0B3CA00CF1D38B0.roa (raw, json)
Hash identifier: 2wsHaMyKXZgKRayuULEzHBTjiiN4q+341YlHwEKjqzE=
Subject key identifier: D4:9B:05:21:BC:2E:A6:D4:D4:BE:D9:96:B2:66:C0:08:57:F7:CF:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/644841FC535111F1A0B3CA00CF1D38B0.roa
Signing time: Tue 19 May 2026 07:07:35 +0000
ROA not before: Tue 19 May 2026 07:07:04 +0000
ROA not after: Sat 08 Aug 2026 07:07:04 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 08:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117846 (0x1cc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 07:07:04 2026 GMT
Not After : Aug 8 07:07:04 2026 GMT
Subject: CN=6a0c0c37-fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:f9:fd:7b:3f:d7:cb:6b:02:bb:b0:8a:14:
f3:25:91:b5:3a:f7:ab:16:e8:7b:12:2f:40:e5:f5:
5c:73:c2:eb:44:3e:b4:65:c1:72:c8:26:88:e8:77:
e1:11:73:40:af:c7:b4:83:50:dc:9a:7d:1f:49:40:
99:d9:9a:ec:ad:ff:31:35:1f:1e:72:62:f8:ff:b6:
d0:62:0d:23:06:16:e3:05:b2:b2:49:20:64:fb:c1:
e9:9e:ed:b1:50:33:a6:36:17:78:4f:eb:c9:a8:4b:
12:8b:65:41:99:10:e0:9e:42:f8:67:4a:b0:13:16:
97:7e:06:d6:58:67:80:76:fb:43:84:15:ac:84:0a:
80:88:40:5a:c8:2a:00:a2:f7:de:ad:3a:c1:47:12:
00:ed:32:b4:cb:24:5d:22:d4:a0:f8:a0:ce:ff:2e:
fb:18:52:e1:64:cd:2d:56:2f:40:ea:69:b5:46:fb:
8a:d8:54:a6:21:43:89:48:02:62:d2:38:0b:98:c1:
c2:a3:c7:b3:a9:c2:65:ba:c1:62:23:64:45:ac:6e:
57:1f:f6:52:60:27:71:5e:47:27:da:b9:ad:64:d0:
9a:da:73:b4:cf:5f:7e:1f:fd:6b:d1:ae:b5:bf:e1:
fd:e9:8d:6b:d5:78:35:18:9d:e4:16:c0:a6:43:6c:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9B:05:21:BC:2E:A6:D4:D4:BE:D9:96:B2:66:C0:08:57:F7:CF:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/644841FC535111F1A0B3CA00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0b:7c:ee:94:ba:86:ad:1c:2c:b2:1c:a2:c3:fb:1b:0a:5b:
8f:9c:f6:6b:64:52:1f:73:2d:08:32:bf:2c:06:e4:78:d1:1a:
ee:85:a2:6f:6e:2e:b5:8a:a8:c1:ec:8c:09:01:88:9d:b1:38:
7f:c2:ad:22:b1:c5:9c:d1:ff:f1:a8:4b:8c:d2:c6:19:43:71:
b9:e8:8d:6b:30:a0:72:95:8f:78:c6:a6:0f:4e:30:fc:98:a4:
81:3a:51:08:f4:3d:c0:f2:ca:d9:b1:c2:75:c3:2d:18:f1:84:
19:dd:e0:d7:ca:d0:1c:6b:58:e4:8b:41:ec:5a:53:b7:1a:68:
4c:a1:64:e8:4f:1a:1b:f2:29:37:d0:72:f0:8b:d5:19:9b:89:
81:e9:4a:fc:54:4f:da:55:22:f8:24:69:ce:86:f1:0b:b7:b2:
49:93:ae:e4:e2:25:af:5c:d1:3e:18:15:11:ec:da:a0:06:98:
43:40:49:b6:06:8e:d8:3d:e6:09:25:21:24:ac:82:0e:ae:46:
b1:19:e2:a3:ff:0d:71:cd:96:17:c1:ce:1e:db:bd:f1:65:33:
90:57:bd:c6:b6:7c:62:be:38:8c:5a:ca:72:98:b1:91:7c:44:
3e:4c:46:66:fa:06:e6:ca:b9:d8:cb:e5:f3:c5:b3:58:fc:1c:
24:a6:16:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:52 2026 by rpki-client