Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F819A826449711F1940BD3F2CE1D38B0.roa
File: F819A826449711F1940BD3F2CE1D38B0.roa (raw, json)
Hash identifier: oJgiROOh9PEJvxsT1bYqbVc8r88x/hcrujdgL8n4hI0=
Subject key identifier: F5:80:BB:1C:AC:0A:8B:40:9C:BC:7A:96:45:5F:64:15:55:A3:B5:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C845
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F819A826449711F1940BD3F2CE1D38B0.roa
Signing time: Thu 30 Apr 2026 13:24:52 +0000
ROA not before: Thu 30 Apr 2026 13:24:47 +0000
ROA not after: Fri 05 Jun 2026 13:24:47 +0000
asID: 202656
IP address blocks: 154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116805 (0x1c845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:24:47 2026 GMT
Not After : Jun 5 13:24:47 2026 GMT
Subject: CN=69f35824-1199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:0a:3c:42:f8:d1:c3:b4:55:b0:01:28:71:
fb:19:6b:2a:c2:11:63:97:6b:22:65:09:88:fa:f6:
f9:b1:af:3a:58:fc:ea:47:e2:06:d8:61:c3:be:cf:
7c:3e:84:6e:fd:97:4d:f7:c4:f6:5c:dd:34:a5:55:
df:ee:64:72:35:3c:b3:59:3d:fb:36:3e:b4:75:36:
b2:90:3b:48:b7:ae:a1:85:ab:e5:3d:f5:ae:32:60:
89:11:a1:36:86:29:4f:f4:5e:ff:95:a1:a2:d4:ab:
2d:65:a5:1c:82:3e:22:ba:68:f1:84:d5:70:56:04:
7a:4e:af:79:42:c2:df:ee:cf:e9:59:63:81:f6:39:
55:ca:91:87:ef:f4:8c:ff:b7:18:e2:94:0c:52:9d:
e6:c5:8f:c3:de:8e:43:64:83:b9:79:fd:4b:6d:57:
eb:69:03:ef:74:a4:8c:11:4e:74:19:37:0c:52:84:
9f:2b:63:0e:79:93:fc:37:f0:87:2e:a9:9e:e9:a5:
ff:95:fa:b4:8c:5e:c6:38:9a:3c:73:ff:eb:4b:d3:
81:4f:58:78:06:cc:3f:5f:23:fa:73:de:60:ff:d7:
b4:52:f5:fc:bb:b3:f6:be:87:d7:b7:5a:16:71:f8:
ae:c0:ff:90:22:75:07:e4:e5:fc:ba:26:55:d3:32:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:BB:1C:AC:0A:8B:40:9C:BC:7A:96:45:5F:64:15:55:A3:B5:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F819A826449711F1940BD3F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.225.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.236.255
Signature Algorithm: sha256WithRSAEncryption
4e:32:c7:ad:12:71:be:9f:29:37:f0:72:9c:38:2e:f6:19:06:
13:87:83:c0:3d:6f:0f:2a:68:45:57:c9:04:0c:38:a5:42:40:
0d:a5:ef:43:16:68:52:e2:39:27:1d:c5:09:3c:c1:90:05:06:
f3:00:e4:dc:b6:e8:2b:5b:53:8f:df:a5:f8:c6:08:88:91:8a:
99:da:af:63:1f:33:e4:3c:f8:0c:fd:f9:9f:5c:4e:22:03:69:
43:f8:01:ee:76:83:14:40:db:aa:d8:fd:7f:6e:be:c7:8e:60:
29:74:e6:b7:2a:e4:30:3b:98:46:e7:d0:35:a9:c6:0f:5b:32:
13:91:ea:34:f5:6a:d4:5d:47:96:72:d6:40:f0:c1:88:d0:d7:
58:0c:29:c6:bc:40:52:cc:b2:e5:c9:8e:98:e1:f0:c4:14:3f:
eb:08:05:e8:da:7f:97:11:4c:34:a4:c8:b9:6e:38:31:33:de:
40:31:75:5c:32:f3:a4:fd:77:ef:05:a7:54:f4:54:20:1d:61:
22:a8:10:82:06:df:be:dd:f2:27:9c:6a:d3:9b:b5:52:57:3b:
a0:77:fa:86:96:77:ae:2a:48:a7:e8:42:c7:77:fc:53:37:8e:
0a:a1:87:68:4d:a0:03:a6:2c:c5:27:52:7f:13:9a:89:8c:06:
ea:ef:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:18 2026 by rpki-client