Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACE49EE6001411F1BD953D95DAE4EC9C.roa
File: ACE49EE6001411F1BD953D95DAE4EC9C.roa (raw, json)
Hash identifier: Qz3FG4mu8m8OboWyyy6XBEIyHyxAjJmX7J7biUnvHak=
Subject key identifier: 7A:90:25:05:97:3E:D4:AA:AE:AE:4F:63:C5:0D:08:C1:45:7B:D6:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B84D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACE49EE6001411F1BD953D95DAE4EC9C.roa
Signing time: Mon 02 Feb 2026 08:53:43 +0000
ROA not before: Mon 02 Feb 2026 08:53:38 +0000
ROA not after: Mon 16 Mar 2026 08:53:38 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112717 (0x1b84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 2 08:53:38 2026 GMT
Not After : Mar 16 08:53:38 2026 GMT
Subject: CN=69806617-59ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:b4:24:a3:57:a8:58:5b:bf:fe:c9:15:24:
b7:dd:0c:cd:ca:1b:ef:6c:b3:28:ef:4c:c4:15:0f:
93:2a:20:04:50:ff:12:94:87:47:a7:16:94:d1:a1:
89:32:c7:e7:76:b4:cb:63:12:b2:ba:89:4e:5e:79:
73:fa:a8:2c:a6:8e:e4:6c:0a:ca:56:26:e6:db:64:
54:64:5d:97:34:f6:3f:3a:53:e6:76:cb:3d:14:61:
5b:bf:40:2e:ca:5e:4a:c2:22:df:44:f2:41:46:7f:
1c:fd:bd:8b:69:3e:f0:ba:e4:f7:46:07:bb:56:b8:
11:50:3a:ee:50:e4:00:b2:7d:a0:8c:58:1b:08:64:
e5:25:20:4e:b2:4d:e9:2f:f9:62:20:a1:27:e4:af:
07:be:53:ba:ae:7c:fe:24:a5:d4:47:ed:0a:46:d7:
b1:85:42:ec:eb:75:12:79:fc:7b:4a:2b:df:1c:aa:
7c:77:ab:79:ac:9d:d2:04:cd:17:b3:eb:a1:25:07:
f2:aa:b8:87:63:61:23:29:2d:1d:36:67:34:6b:6a:
9f:05:d3:af:19:47:2e:ea:50:e3:34:60:0d:dc:87:
4e:43:6a:48:bb:19:8a:f6:4f:e0:04:df:ae:db:fe:
62:0b:ee:7f:22:c2:28:43:89:83:a3:64:da:35:8d:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:25:05:97:3E:D4:AA:AE:AE:4F:63:C5:0D:08:C1:45:7B:D6:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACE49EE6001411F1BD953D95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:9c:ea:76:d9:0b:44:dc:03:24:8b:25:b3:48:b3:36:67:60:
c3:e5:fa:f3:5a:71:7d:58:1d:12:f4:02:48:d5:fd:39:87:44:
b3:4d:8a:02:00:ee:0c:e7:51:a2:d7:70:b2:8a:52:61:bf:b3:
57:02:06:72:65:9e:b3:83:4f:e4:40:21:f3:3d:2a:59:69:58:
f1:f8:ce:d1:f8:4d:c4:2d:44:50:d4:a9:bf:79:96:7c:8f:ca:
e7:aa:09:55:09:31:53:aa:ff:d4:30:8e:26:3d:56:a6:93:ca:
11:d0:3f:05:77:ac:06:8f:c4:a9:2c:55:91:8d:9c:2b:11:1d:
d1:7c:b3:d5:7f:01:66:2c:68:36:5a:10:a4:c8:c5:85:84:27:
b2:68:3f:e5:e9:17:69:7e:55:86:98:ad:27:37:36:0a:33:ee:
63:37:dc:eb:ba:ed:f8:e7:7e:8f:d8:ce:d4:29:c0:31:da:ad:
2b:88:3c:bb:79:b5:df:76:2f:fb:29:81:4f:06:05:0d:6f:76:
c2:10:e5:f3:68:18:ee:7f:16:da:75:03:76:65:31:c7:b9:48:
c2:85:f6:71:e4:12:2b:2e:06:00:02:7c:52:d4:a0:80:a7:87:
c5:70:36:03:76:be:8b:ab:21:b7:01:eb:49:74:93:fe:19:78:
4c:1f:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:49 2026 by rpki-client