Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A22EE792949111F1A3FD1FB8CE1D38B0.roa
File: A22EE792949111F1A3FD1FB8CE1D38B0.roa (raw, json)
Hash identifier: WGOeoMkpRGObXolvGSOfMGNkR/qOF1wS4q0u8g8nybI=
Subject key identifier: B0:83:7D:8C:99:46:AC:90:4D:4F:CA:3A:D9:EA:B4:59:20:0D:D3:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A22EE792949111F1A3FD1FB8CE1D38B0.roa
Signing time: Mon 10 Aug 2026 08:01:04 +0000
ROA not before: Mon 10 Aug 2026 08:01:00 +0000
ROA not after: Thu 17 Sep 2026 08:01:00 +0000
asID: 22773
IP address blocks: 154.198.21.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122320 (0x1ddd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:01:00 2026 GMT
Not After : Sep 17 08:01:00 2026 GMT
Subject: CN=6a798540-06d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:2d:e6:80:eb:e9:83:d8:04:9d:a5:ca:19:
4c:a7:a8:c6:62:4d:25:f6:cd:25:53:27:2d:bd:d4:
2e:d9:47:47:53:f1:da:f1:57:7f:ba:95:5a:2a:6f:
e5:2c:18:89:90:be:e9:63:4f:cc:c6:7a:14:c6:2e:
10:ad:02:ef:e5:16:13:3c:83:b7:5c:4e:80:2d:45:
97:af:15:14:24:5d:c2:45:59:ec:b7:cc:2b:15:87:
64:fd:da:e9:4f:49:c6:f7:55:df:f0:ce:82:4d:03:
c2:eb:05:ca:2c:06:35:ea:95:f0:a1:22:af:dc:61:
0c:ed:c4:4c:cf:6a:de:62:44:e9:5f:30:6d:2a:4b:
43:a4:ea:8e:41:b8:d5:cf:12:49:66:2a:e9:83:35:
c6:92:bc:c8:c4:8e:58:67:37:40:56:48:19:31:80:
a0:77:c6:43:4d:b7:81:71:c2:2a:e7:d0:3a:80:3d:
94:63:ec:08:8d:58:17:d5:e3:19:2c:0a:20:f5:bb:
af:9e:5c:0f:ce:ce:7c:db:73:8e:a0:f1:85:6b:e4:
22:07:c3:d6:01:ea:d9:fc:f9:c0:53:dd:1b:b7:38:
db:ec:ef:74:cf:60:a7:62:c4:3e:b8:0f:a0:e7:f9:
9e:6c:dc:2b:fd:f1:da:a8:9a:46:e0:4d:3c:8e:e1:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:7D:8C:99:46:AC:90:4D:4F:CA:3A:D9:EA:B4:59:20:0D:D3:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A22EE792949111F1A3FD1FB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.21.0/24
154.202.24.0-154.202.28.255
154.213.218.0/23
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
d3:f2:c4:17:aa:af:be:e5:4c:16:59:87:15:5a:e2:e1:79:db:
ac:73:58:3b:c0:57:f9:7d:4b:70:fa:a4:65:42:0d:58:b9:4e:
24:c3:4a:15:d9:bf:5b:91:5f:bf:69:64:6e:f7:88:26:d1:8a:
70:da:73:4f:c0:5b:de:ab:a6:eb:31:47:9a:f0:29:63:c1:d4:
20:d3:13:fc:1d:6f:dd:56:58:60:ea:c8:f1:11:7c:75:81:c4:
10:05:63:c0:c3:a3:f1:a9:40:d4:27:03:5a:45:89:ae:63:7f:
49:75:22:82:96:fd:bd:31:7e:d5:84:81:b9:d3:12:fd:21:56:
a6:55:8c:09:da:0c:64:05:e4:55:c2:d5:7a:be:25:01:4e:2e:
a3:ba:c6:37:17:2c:d0:b5:ff:35:b6:7d:01:a9:52:9a:ce:f5:
3b:9e:6c:49:41:cc:d5:d2:d5:83:db:5a:e5:0d:17:43:31:d7:
83:95:c1:0e:0b:4a:1b:6a:a3:13:b1:6d:a3:26:2c:d1:ac:b2:
f0:ba:c5:4e:3a:30:5b:de:d6:7d:d4:82:a6:9d:ae:99:13:af:
8c:1c:10:ab:bc:3e:f7:2b:60:4f:f1:ad:70:d4:63:d3:1c:b4:
4f:cd:02:82:76:6d:d0:bb:8b:8e:07:be:fe:ac:99:0b:d4:85:
ae:d5:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:15 2026 by rpki-client