Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22A3A3F24CF511F1B47E79D8CE1D38B0.roa
File: 22A3A3F24CF511F1B47E79D8CE1D38B0.roa (raw, json)
Hash identifier: H85q9j+wsLIy8sW5eoYLNMjt4mMXMO7AXmhMZp2WpcI=
Subject key identifier: 01:EC:77:55:09:6D:9D:C0:B0:8C:1D:21:DD:2B:4B:AD:E9:76:36:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22A3A3F24CF511F1B47E79D8CE1D38B0.roa
Signing time: Mon 11 May 2026 04:51:56 +0000
ROA not before: Mon 11 May 2026 04:51:51 +0000
ROA not after: Sun 21 Jun 2026 04:51:51 +0000
asID: 2914
IP address blocks: 154.216.132.0/24 maxlen: 24
154.216.133.0/24 maxlen: 24
154.216.134.0/24 maxlen: 24
154.216.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117474 (0x1cae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 04:51:51 2026 GMT
Not After : Jun 21 04:51:51 2026 GMT
Subject: CN=6a01606c-5de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:b1:94:b7:97:64:64:7f:fd:83:e1:14:48:
14:e7:c4:61:85:b2:e0:d8:38:c9:69:19:78:97:47:
ba:db:f2:36:eb:f8:d4:ad:ab:38:c9:f9:ef:ea:82:
9a:f8:74:66:a8:d1:53:fa:24:40:10:a4:ba:66:ba:
08:9d:82:67:ac:85:85:32:5d:eb:36:cf:e5:48:7b:
83:39:df:cd:61:21:65:b8:68:24:a1:9b:df:ac:cd:
bd:63:18:3a:ef:6b:ed:3e:71:b9:cc:8d:98:2f:5a:
76:71:bf:84:cf:a3:70:fe:50:18:cb:ea:e3:74:b5:
b5:db:ee:8f:0f:32:1f:68:81:0a:f2:bd:c0:bd:c0:
a2:66:89:8b:96:52:4d:05:7b:8a:8e:1c:3a:7b:ba:
66:63:e8:74:b5:86:f6:c1:1f:8f:71:70:7f:9e:17:
27:74:71:8f:1d:d9:2b:6e:ae:fb:e4:63:21:77:4e:
89:f7:26:5e:08:5a:5e:52:c7:bc:1b:40:73:74:12:
6c:cc:74:da:55:58:86:a5:b2:5c:30:fe:ba:6e:c6:
35:3d:9f:49:5c:bf:6f:12:43:a9:c2:bd:62:b4:ea:
04:72:6d:99:fb:05:62:69:ea:ad:f4:8a:f5:e2:4a:
93:fd:07:11:b5:fd:33:d2:a6:e6:42:1d:72:c8:bd:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EC:77:55:09:6D:9D:C0:B0:8C:1D:21:DD:2B:4B:AD:E9:76:36:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22A3A3F24CF511F1B47E79D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:45:ed:d4:27:34:52:fb:b7:d4:7d:5b:54:1f:71:03:ca:91:
66:53:8c:2b:89:61:eb:d7:4a:46:eb:41:f6:90:68:85:62:14:
8e:16:e2:d8:e9:8e:7d:34:94:67:c1:ba:1b:66:3b:8d:ea:ee:
62:cf:af:35:2a:0b:91:41:c2:2f:f1:39:ef:81:16:b3:36:f8:
7d:fb:4f:ad:e6:1c:dc:b3:de:24:fc:17:12:93:9f:18:d9:f6:
04:86:b6:e3:e6:15:02:f7:f1:52:9e:d0:b9:5e:11:6f:c6:25:
b1:5e:07:80:55:9f:b8:83:20:9f:1d:f5:b5:c3:1c:75:5c:a3:
0d:c4:91:54:8e:dc:66:c0:51:2d:83:c2:91:c2:4b:77:81:96:
fd:f7:8f:fd:67:15:b3:a7:82:46:f5:04:35:f3:3f:b4:a5:f7:
70:0e:41:f7:4d:21:73:76:51:d8:e9:f9:f2:a7:02:01:8b:4c:
a9:1c:0e:33:6a:cf:9e:c5:41:37:d8:ec:fa:91:59:81:c4:19:
3b:1d:d6:ea:97:03:bf:c1:18:44:be:7c:a1:1f:ca:9e:8f:3f:
43:63:a9:76:6c:11:17:bb:37:be:fa:32:8b:68:4c:2d:30:2f:
f3:46:81:3e:1d:0c:f2:1c:e3:3b:4f:34:d7:01:07:31:90:6b:
7d:84:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:32 2026 by rpki-client