Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24197784B8211F199E9F00DCF1D38B0.roa
File: F24197784B8211F199E9F00DCF1D38B0.roa (raw, json)
Hash identifier: wL0vcM8afcWBmXCqCBOwpnmilJ5swjhHETOJfn0P4ZU=
Subject key identifier: 9B:AF:87:B6:18:0D:53:99:22:49:89:D0:D4:C4:C6:31:DB:6A:0C:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24197784B8211F199E9F00DCF1D38B0.roa
Signing time: Sat 09 May 2026 08:42:01 +0000
ROA not before: Sat 09 May 2026 08:41:56 +0000
ROA not after: Tue 16 Jun 2026 08:41:56 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117398 (0x1ca96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 08:41:56 2026 GMT
Not After : Jun 16 08:41:56 2026 GMT
Subject: CN=69fef359-0ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:a0:3c:13:8f:c7:2f:90:3f:80:dc:b5:89:
51:5d:12:d2:e2:d0:f1:4e:e6:82:5f:43:c2:a7:6a:
95:27:7a:37:f5:be:66:d2:d5:95:4b:7f:3d:9b:b2:
df:1f:f7:a5:3e:ff:6f:cc:67:5b:68:b4:40:eb:85:
c6:0c:0c:b3:02:30:a9:9b:94:64:c5:64:7e:bc:8d:
22:9b:b2:72:7a:1e:21:4f:3f:06:9e:7c:93:6c:93:
70:13:b0:42:d6:e7:ba:10:6c:60:51:2c:78:52:b1:
89:d4:b1:34:ae:c5:e2:49:25:98:aa:ae:50:b7:23:
34:aa:00:e9:54:57:70:2f:73:e2:5a:65:ac:cc:d7:
b5:86:25:23:e9:ad:86:51:d5:93:e8:af:6f:06:3d:
79:a5:af:52:02:3d:90:b6:b7:a2:a6:1b:ee:08:8d:
61:a6:34:62:5a:57:4c:35:18:4a:5c:bc:07:42:37:
39:2e:f9:60:1f:51:a4:e8:10:dd:be:df:f4:97:f1:
52:21:89:10:75:f6:3a:b6:c2:c1:7a:e0:e3:02:51:
a0:9a:00:98:7c:27:aa:f6:e0:ca:52:af:b7:0b:18:
50:12:1c:2f:9d:96:e6:e3:25:d7:e4:1f:0d:2e:ba:
ab:44:24:78:a7:e8:c8:f9:fd:b0:7d:aa:88:ce:30:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:87:B6:18:0D:53:99:22:49:89:D0:D4:C4:C6:31:DB:6A:0C:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24197784B8211F199E9F00DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:b0:c5:d2:ad:e2:a5:e5:a3:50:22:55:86:67:cd:ee:3e:24:
99:9f:a7:69:6a:3f:bb:d1:90:cb:33:36:94:48:56:fa:98:ea:
37:70:d2:5a:aa:c9:36:f4:d4:05:7e:b4:e5:f3:55:fe:db:90:
7b:32:ec:73:36:12:57:7b:18:f2:56:33:67:09:00:c1:ac:76:
3f:16:0b:2e:a9:08:ef:c3:9b:16:ed:aa:26:c7:38:c2:1b:b3:
22:0c:47:f2:65:9b:60:95:af:0b:e7:da:86:19:6d:5e:3a:b5:
36:f0:51:5a:24:3d:9b:1a:4b:62:51:4d:c1:6b:c8:38:ac:2e:
b3:40:6b:91:8e:3c:fb:8e:9a:b0:71:b4:e9:83:59:c8:f7:1d:
50:aa:31:dc:d8:29:1d:44:15:1a:d5:e8:aa:59:29:26:33:a1:
0e:4c:d0:6f:8d:f6:8a:52:23:09:21:74:09:aa:c7:3b:cf:82:
0b:7a:d6:e8:8d:75:d3:dd:16:c0:74:69:3d:79:f7:2b:9b:2b:
22:5b:43:d4:99:76:cf:2a:78:58:e1:fd:09:e4:5f:12:26:32:
d0:5d:09:ab:83:8b:19:75:e6:c6:b3:98:55:b0:f0:18:74:89:
23:c3:8b:dd:e6:e8:04:c1:1e:36:9f:aa:7c:ca:1d:f5:21:a3:
23:96:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:02 2026 by rpki-client