Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B222873C3E9011F1962965A5CE1D38B0.roa
File: B222873C3E9011F1962965A5CE1D38B0.roa (raw, json)
Hash identifier: ADu/+qZKQr5+Q5e5K070ksXPg3RWehcAgHR1iOqGL2Y=
Subject key identifier: F7:A8:61:B0:CE:A9:22:36:06:64:89:14:C4:94:71:48:15:E4:60:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B222873C3E9011F1962965A5CE1D38B0.roa
Signing time: Wed 22 Apr 2026 21:17:41 +0000
ROA not before: Wed 22 Apr 2026 21:17:37 +0000
ROA not after: Mon 08 Jun 2026 21:17:37 +0000
asID: 395793
IP address blocks: 154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116388 (0x1c6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 21:17:37 2026 GMT
Not After : Jun 8 21:17:37 2026 GMT
Subject: CN=69e93af5-ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:a9:93:b2:28:61:f2:c4:ed:51:52:50:f8:
bf:be:1d:aa:ff:11:41:13:bc:09:86:76:f0:b6:7f:
90:fd:ff:54:e8:dc:4b:25:6f:f8:88:24:93:9e:19:
de:52:68:4d:9a:d9:da:8c:52:ae:36:53:b9:2e:3c:
ba:f5:1e:95:a3:3f:c1:15:9f:a5:18:f3:43:1d:6a:
ca:d1:c6:b2:11:52:f8:21:57:54:c1:67:4f:8c:36:
b3:08:f4:69:f5:44:83:99:da:e2:11:11:c5:6d:ee:
e1:ce:f7:ea:de:08:84:32:cf:a0:03:32:c6:d3:46:
d4:67:37:b4:55:73:62:ec:99:64:2b:0c:32:79:38:
4f:08:cf:26:4b:d8:84:84:7b:40:46:18:0a:16:8f:
93:0a:a6:51:ed:f8:ab:59:bb:b0:31:10:9d:92:96:
ff:6f:e4:71:ba:a2:50:67:3a:80:64:5e:85:ce:19:
d1:32:cc:f5:36:d1:31:75:b2:4f:92:b8:d0:0b:e7:
77:ce:77:9e:f5:a4:c7:b6:8d:11:6e:d5:55:2a:da:
11:91:71:2f:ac:f9:76:0a:84:71:af:ae:cc:50:99:
33:f6:4c:fa:aa:1a:04:39:8e:71:11:8c:88:c7:98:
ca:9e:a8:f8:43:85:a9:a6:6a:d2:60:55:fd:71:2e:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:61:B0:CE:A9:22:36:06:64:89:14:C4:94:71:48:15:E4:60:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B222873C3E9011F1962965A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
71:f0:47:c8:23:d6:d1:ba:f9:ac:76:d4:63:5b:b4:78:8e:58:
6b:80:a7:6e:1c:46:65:50:2e:14:54:df:31:c2:54:e7:f1:f8:
77:76:bf:94:4e:86:69:b9:96:65:19:bf:16:35:bd:40:8b:16:
60:67:9d:22:a4:c1:18:24:a9:6c:10:db:8a:5c:44:dc:98:d0:
41:0b:9d:1d:5b:b6:cf:92:0e:9a:4d:0c:58:e7:7d:28:45:94:
76:60:24:8f:c2:af:f4:6b:cc:d5:dd:a7:bd:b3:83:1e:e8:8a:
6b:7c:84:a6:db:3b:28:4b:1e:47:b0:63:2d:c0:82:c7:12:e4:
c0:ae:20:46:2d:1e:53:6c:e9:0f:31:13:cb:da:97:b0:12:c9:
e2:a5:37:80:4f:1a:c4:4e:61:8f:45:fe:f8:29:a4:96:68:61:
c4:11:18:0e:93:a2:4a:57:a3:c2:b2:69:32:e2:90:50:8d:a8:
08:6a:b3:37:7d:dc:2b:24:7c:db:ca:3b:f0:44:5b:74:20:a8:
a2:65:d9:96:5e:ae:0e:fa:f5:09:5f:c8:0b:e8:d7:b1:42:da:
8b:41:98:a8:7a:38:86:0b:b9:01:6a:14:59:e7:8f:f0:8a:8e:
13:eb:0e:79:5c:00:e1:7a:53:ac:f6:63:4f:a9:38:71:f6:a4:
92:af:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client