Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE1174C4568B11F199A59CB7CE1D38B0.roa
File: AE1174C4568B11F199A59CB7CE1D38B0.roa (raw, json)
Hash identifier: zOoMwsChs+ujLrGUzw64Snt+mx1XorZNYbhZh4VHOZA=
Subject key identifier: 77:EB:32:2A:58:CF:5B:03:12:2E:5B:B2:60:57:76:42:27:1B:97:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE1174C4568B11F199A59CB7CE1D38B0.roa
Signing time: Sat 23 May 2026 09:42:15 +0000
ROA not before: Sat 23 May 2026 09:42:10 +0000
ROA not after: Fri 10 Jul 2026 09:42:10 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118393 (0x1ce79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 09:42:10 2026 GMT
Not After : Jul 10 09:42:10 2026 GMT
Subject: CN=6a117677-45ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:27:98:35:fe:5f:b9:5e:d2:79:cb:63:ce:
52:32:4b:41:f9:80:92:f3:72:ed:12:24:5a:a8:5b:
0b:73:0b:21:3f:39:41:cf:e9:86:fa:7d:0a:02:78:
82:3f:a4:40:8d:fd:89:b1:44:51:7e:51:7c:50:22:
67:48:0e:d8:2e:a0:7a:6c:88:8c:05:c3:3c:c5:b3:
1d:cd:4c:3a:43:a6:c3:9e:b4:1c:ba:18:32:a5:00:
99:70:27:f6:f7:49:04:b7:53:13:f2:9d:50:52:fe:
20:59:16:d0:4e:30:4a:10:33:09:57:ea:d2:b4:73:
81:fb:22:21:7a:d1:95:b8:bd:92:16:60:5c:ad:a3:
8c:14:43:a4:53:31:d8:0d:86:29:2f:5b:d2:f0:a8:
c0:36:c9:8d:20:89:a6:bc:e1:10:4f:26:e5:b3:a6:
ca:0e:78:ef:bf:54:df:1d:35:a6:a5:aa:8a:9a:69:
ea:a4:d4:5a:a4:82:24:14:e1:69:ea:90:47:eb:ff:
93:39:c5:30:4d:3b:6e:6a:04:ef:78:09:6f:e6:5b:
71:84:7c:5e:95:d9:a4:94:b7:a6:cb:d7:8c:09:be:
33:8f:d8:10:9d:c1:e9:36:e2:ca:77:89:3e:14:15:
e4:19:84:7f:83:bb:e4:a5:d4:42:d3:4c:55:99:db:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EB:32:2A:58:CF:5B:03:12:2E:5B:B2:60:57:76:42:27:1B:97:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE1174C4568B11F199A59CB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.196.208.0-154.196.212.255
154.200.55.0-154.200.59.255
154.200.63.0/24
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:b9:47:fe:a8:de:4c:f6:0c:6e:dd:63:30:74:05:97:b5:29:
14:63:08:0c:bf:3b:e6:8a:09:8d:77:63:ea:72:89:74:51:72:
f9:c4:02:78:a8:53:dc:23:72:d1:c3:05:e6:c5:17:03:a6:87:
e8:f5:c3:a4:b5:22:28:ba:89:0a:18:f4:c1:76:2a:c1:ea:2d:
e4:10:22:9f:dd:03:ec:b0:8d:d0:c1:a2:3a:af:f0:a3:33:84:
1d:78:7e:77:e1:07:86:2d:e0:ce:f2:01:39:b6:bd:04:28:5d:
d9:2d:95:80:b5:e0:3d:61:d7:fc:e4:a0:03:46:07:d7:03:a7:
82:00:5c:30:98:6e:c5:c6:de:87:e2:be:ac:e7:b9:bf:95:ba:
05:19:83:32:99:15:f7:0e:b7:34:1b:de:bd:b2:a7:e3:fd:1b:
bd:8a:c8:cc:55:d6:bb:fd:d5:df:6c:74:75:20:d6:0b:02:6d:
e1:f5:17:4c:76:f4:16:47:73:64:a0:9c:fd:7b:74:86:a2:3b:
17:b7:f7:88:7d:fe:6e:3e:96:6c:b5:e2:b8:92:02:4d:c2:db:
be:e1:db:94:85:9c:47:a7:e0:78:f9:f9:92:dd:e3:34:de:09:
d0:4c:c7:56:dd:89:1a:92:76:f0:3b:b5:d9:80:98:8f:b1:cd:
33:fe:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:13 2026 by rpki-client