Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE10E16C3E6711F1B0F244B3CE1D38B0.roa
File: AE10E16C3E6711F1B0F244B3CE1D38B0.roa (raw, json)
Hash identifier: /rxz3qtpgAj3hoPLUfBUAJQn3fzr3fBrX7UIzjLuU5U=
Subject key identifier: 63:DC:9F:9D:28:FA:0B:11:CE:25:61:4B:ED:BC:3C:65:AE:B1:A9:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C697
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE10E16C3E6711F1B0F244B3CE1D38B0.roa
Signing time: Wed 22 Apr 2026 16:24:05 +0000
ROA not before: Wed 22 Apr 2026 16:24:00 +0000
ROA not after: Sun 31 May 2026 16:24:00 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116375 (0x1c697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 16:24:00 2026 GMT
Not After : May 31 16:24:00 2026 GMT
Subject: CN=69e8f625-78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:a0:9f:ad:ee:b7:92:c4:2d:fc:73:dc:68:
fd:b8:3a:9a:c6:b8:fe:11:2f:52:ce:d4:04:0e:24:
4f:40:0a:09:95:02:d3:6e:f8:ef:a4:70:81:60:63:
32:e3:cd:df:ad:8c:06:e5:b8:f7:8b:19:15:1f:84:
07:a5:b5:2e:33:fe:cc:df:22:37:e8:38:9f:09:79:
fb:3c:c9:46:ca:2d:19:26:4b:25:2b:d3:9c:ef:d0:
80:84:15:00:9c:c7:f4:78:6e:4b:a5:d8:65:80:73:
65:fe:60:1d:63:e8:66:2a:b5:43:ef:0c:90:04:b0:
5d:37:ea:f5:5d:a7:3f:54:ab:0b:ca:ed:85:36:f0:
9d:02:6f:48:a4:ff:89:ba:b8:a2:dc:db:6f:01:3e:
d1:86:99:21:f2:fd:79:ea:e9:58:e1:68:3e:52:28:
c4:a1:8e:99:43:d5:e6:2a:bf:41:a3:ec:92:04:73:
10:81:d0:98:eb:a2:6e:07:2b:ae:e7:50:14:63:59:
e9:4c:cc:4b:67:4b:00:cf:21:f6:7b:4f:95:7d:11:
79:1c:3b:30:4d:80:08:d2:71:42:8c:bb:e9:bd:35:
5d:d8:57:d0:89:a6:96:95:9a:11:61:8b:96:42:af:
4c:3c:96:8c:5c:51:ca:94:1c:c9:e3:f4:8f:88:43:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DC:9F:9D:28:FA:0B:11:CE:25:61:4B:ED:BC:3C:65:AE:B1:A9:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE10E16C3E6711F1B0F244B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
Signature Algorithm: sha256WithRSAEncryption
bb:d1:65:fe:fc:66:ab:14:60:58:10:c8:1e:a0:96:ec:56:b2:
2c:7d:b3:ad:e1:e0:c2:b3:d3:c9:5e:50:ba:3f:14:6c:36:1c:
8e:4a:7f:7a:aa:f0:33:2d:13:21:72:59:6b:3e:63:f8:ed:46:
7d:7c:43:59:5d:31:53:78:78:45:22:13:c7:7f:46:10:84:82:
3e:26:38:f3:31:c9:35:b6:c7:d2:89:4a:49:6a:43:16:74:6e:
5c:23:fb:bd:96:ad:f9:38:90:bd:b6:d6:ad:18:89:fb:3a:1b:
18:8b:f0:e0:f9:b6:e9:b3:60:90:f1:67:35:3a:25:12:df:fb:
44:94:b5:16:96:b1:a0:6e:e5:de:e0:e0:79:75:8c:0b:a1:93:
9c:7d:c2:48:88:e3:38:4d:46:a1:ce:a9:9b:eb:39:be:ba:2f:
44:01:21:38:3f:19:5b:ff:71:34:f2:9a:e9:f4:d7:3e:ee:3f:
f8:46:91:5b:f1:e6:e5:da:93:1a:99:e4:7f:36:40:f0:71:95:
96:48:2b:f1:cb:24:dc:e5:ec:b0:47:d8:ed:8e:63:79:a8:7e:
d6:9f:5f:62:3d:52:33:66:3d:b1:e5:62:fe:eb:a6:91:95:1e:
c7:4e:70:9e:55:20:47:96:ad:f4:98:ff:e6:5c:41:cd:81:e8:
da:a2:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:16:24 2026 by rpki-client