Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50E1BDE740D11F1942D00CBCE1D38B0.roa
File: B50E1BDE740D11F1942D00CBCE1D38B0.roa (raw, json)
Hash identifier: zMGMhftopqAHj9Eq6hak9kW7ZOEUW41Ihx1FPzgSYUc=
Subject key identifier: 53:0C:78:2A:DD:51:E0:DD:1A:2D:73:E1:3E:68:4D:5B:CC:9C:5B:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50E1BDE740D11F1942D00CBCE1D38B0.roa
Signing time: Mon 29 Jun 2026 22:56:05 +0000
ROA not before: Mon 29 Jun 2026 22:56:00 +0000
ROA not after: Thu 06 Aug 2026 22:56:00 +0000
asID: 48031
IP address blocks: 154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120360 (0x1d628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 22:56:00 2026 GMT
Not After : Aug 6 22:56:00 2026 GMT
Subject: CN=6a42f805-4c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:4c:ad:89:82:4c:18:49:b2:87:bb:8a:6f:
c3:05:cf:6b:82:ff:07:a4:30:2d:cc:88:c5:dc:e6:
e1:c6:f9:04:71:0a:f3:96:69:42:6a:e6:df:d3:23:
18:25:e6:42:ec:12:d5:c3:19:ce:96:8a:19:46:74:
65:71:b3:21:c5:2e:6c:18:ca:77:ac:1f:b6:64:fb:
63:0b:01:3d:8a:54:0d:3c:9b:3a:da:03:4c:7d:9d:
5e:35:d6:a3:cb:26:db:51:74:15:b0:40:35:cf:61:
87:73:95:5c:70:ad:5f:14:39:83:6b:97:eb:08:cb:
15:4a:bd:40:66:7c:49:d1:dd:3d:4d:0a:cb:cf:c2:
48:ea:57:7e:0e:c8:f7:a1:b1:62:88:dd:4d:ae:77:
6b:fb:7d:0d:e0:fc:ef:2f:2f:80:c2:fc:67:63:25:
ee:c9:bb:1f:2d:53:0d:e1:e2:3f:e0:4c:f8:84:22:
0c:ff:04:9f:5b:84:2e:02:59:ea:c1:da:ec:d5:fe:
ce:6b:a9:f8:9b:f2:90:f6:df:46:44:16:61:57:5f:
ac:e6:e7:aa:49:53:c8:0d:e1:b2:37:52:f3:ae:93:
d8:97:2a:ba:e4:8c:c1:20:26:94:6e:cf:25:40:c4:
ce:2f:c3:e2:31:a3:6e:1c:fb:f4:ce:5d:00:84:2a:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:78:2A:DD:51:E0:DD:1A:2D:73:E1:3E:68:4D:5B:CC:9C:5B:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50E1BDE740D11F1942D00CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.216.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6a:c5:70:93:c2:d8:ba:ae:d6:78:89:b2:4d:dc:0a:72:37:
6f:26:c9:b4:14:55:f6:35:f4:d8:40:cb:9c:47:06:75:14:30:
52:9a:7d:26:79:b8:fa:93:2e:0c:1d:cb:71:47:28:91:56:1b:
4f:b0:9c:ad:e3:14:f3:17:96:9c:08:b5:05:ed:30:21:b0:e6:
29:b4:d7:2d:83:60:54:b3:16:5b:2b:a3:c9:6e:e9:77:e7:ac:
83:7c:76:b5:59:56:d2:f7:1c:04:e4:9e:d1:fa:06:8e:29:3e:
51:ee:f0:de:d9:64:f3:e4:b5:3d:0f:ee:12:93:6a:30:d7:93:
9e:4d:52:51:b9:37:a0:15:e3:a9:68:42:e6:63:9b:6f:68:b7:
95:6b:66:8b:ae:19:68:9f:27:90:34:50:00:aa:8a:3b:c7:2c:
52:90:67:91:88:8c:97:7a:e9:93:60:67:d2:52:39:12:97:b4:
cd:16:8c:a2:1a:b7:e8:89:9a:32:49:a7:1c:81:c0:6e:dd:58:
f9:58:54:ab:59:38:90:4d:26:48:5f:ed:34:1e:2d:aa:af:3c:
05:0a:59:c4:df:7b:de:8c:59:ac:85:d4:80:ac:c6:16:5b:7e:
1f:fb:a0:81:1d:3f:f0:06:85:f1:92:91:94:00:ea:55:a7:eb:
f8:80:4d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:03 2026 by rpki-client