Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FEEBBE0560511F1BBCB02F9CE1D38B0.roa
File: 8FEEBBE0560511F1BBCB02F9CE1D38B0.roa (raw, json)
Hash identifier: 3nQWmz/rva26jYko7pyapbT90NqsL0RH3YOPOf4jqCQ=
Subject key identifier: BC:58:F8:F6:7F:11:90:04:65:D5:5E:F0:E8:E7:B3:40:41:EF:D5:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FEEBBE0560511F1BBCB02F9CE1D38B0.roa
Signing time: Fri 22 May 2026 17:42:12 +0000
ROA not before: Fri 22 May 2026 17:42:07 +0000
ROA not after: Sun 28 Jun 2026 17:42:07 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118340 (0x1ce44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 17:42:07 2026 GMT
Not After : Jun 28 17:42:07 2026 GMT
Subject: CN=6a109574-6d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:11:f1:ef:3e:b7:fd:70:71:1f:a2:ed:87:
b6:d1:cf:3c:b3:ba:1b:1c:23:64:13:e6:c9:9f:0b:
04:de:f6:69:89:1d:31:17:b6:e2:9f:68:dd:b8:85:
38:9b:ef:6e:29:0a:6b:5f:dd:8a:69:bd:8c:44:4f:
b2:d9:08:0a:25:9d:6f:11:10:ee:fe:5c:ad:b1:71:
dc:45:26:2b:ee:0f:b1:59:95:4e:05:8d:95:f8:1d:
62:c4:bb:43:f2:ff:a8:e1:e7:e1:bf:3f:0e:5f:84:
9d:14:0f:d8:19:fc:7b:f7:90:a9:5e:c9:37:a7:07:
08:1e:32:9a:0c:fc:60:70:bb:1c:15:4b:f2:aa:01:
c2:6c:74:08:05:51:20:3a:f6:c0:f3:f4:31:88:6d:
a3:98:17:48:c6:99:86:2c:ef:7f:9f:f9:09:dd:cb:
9b:58:3e:c0:30:17:02:c8:a0:a7:23:9a:12:01:6a:
9e:33:66:bf:13:86:e4:d3:86:61:98:0e:a6:f9:f5:
fe:6a:c7:cb:00:87:5a:d7:93:60:3b:b5:29:3b:79:
41:fa:f3:2b:9b:3d:35:12:81:8c:1f:b5:bd:de:e8:
4e:b4:ff:fe:8a:70:39:ae:a4:c8:33:df:3f:a5:8d:
9e:c7:50:49:7f:dc:53:58:44:34:82:84:d0:72:37:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:58:F8:F6:7F:11:90:04:65:D5:5E:F0:E8:E7:B3:40:41:EF:D5:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FEEBBE0560511F1BBCB02F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a7:c2:02:a4:9d:46:a5:f7:c6:9e:bf:a1:f4:3a:0a:75:c9:
f5:0b:6b:71:78:57:c7:8d:f6:c2:1e:aa:c2:b0:b2:32:95:d0:
73:8a:8c:c5:d3:a3:b3:e6:79:b7:b7:c7:12:8b:06:45:ff:a1:
da:ca:c9:f5:16:21:46:e0:21:f2:61:8d:f9:04:cb:dc:43:3a:
9c:5b:5f:5d:14:86:df:da:63:8f:ac:68:f5:60:67:86:9e:a7:
ed:80:98:b1:51:c5:72:86:36:05:47:9b:ec:32:d1:ce:6e:82:
50:1b:c4:6a:50:84:ea:55:04:62:c7:bc:bb:10:25:9d:f9:3a:
be:8f:05:e9:50:6e:e9:a0:e1:7e:9a:d3:a3:6c:ed:8e:de:c6:
aa:84:40:1b:be:32:c4:06:14:34:33:b3:d2:bb:75:2b:3b:78:
40:b6:55:c6:fc:27:16:b0:c8:54:7f:9c:96:76:f2:da:af:1b:
68:1a:62:e4:5e:34:2a:38:84:5d:d2:09:e6:65:e2:12:e0:bb:
94:eb:0b:1d:19:19:26:f5:37:55:93:04:4a:74:60:a3:bf:2a:
86:f7:7f:34:56:c2:ae:58:6b:36:c7:4b:2e:61:ff:6c:83:e0:
a9:ce:d9:ab:d9:f3:cd:66:aa:be:41:cd:d5:a5:21:29:e1:fb:
a7:2c:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:12:47 2026 by rpki-client