Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE1944E6922D11F19FE967BECE1D38B0.roa
File: AE1944E6922D11F19FE967BECE1D38B0.roa (raw, json)
Hash identifier: Wp/QrjQliXfRiUKDTPqP9xqhjzw4LmxfxJHYgeyu3CQ=
Subject key identifier: E3:46:FB:66:25:BD:DE:AD:3B:B4:AA:D5:56:AB:EB:D5:E2:34:5B:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE1944E6922D11F19FE967BECE1D38B0.roa
Signing time: Fri 07 Aug 2026 07:00:32 +0000
ROA not before: Fri 07 Aug 2026 07:00:28 +0000
ROA not after: Fri 21 Aug 2026 07:00:28 +0000
asID: 63099
IP address blocks: 154.196.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122157 (0x1dd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:00:28 2026 GMT
Not After : Aug 21 07:00:28 2026 GMT
Subject: CN=6a758290-a4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:4b:69:59:27:c7:5f:ed:13:34:00:2a:7b:
6a:48:ef:64:52:44:a2:f0:92:7f:aa:00:56:fd:57:
04:a7:6a:b2:57:78:93:2e:46:c6:a2:f2:3e:d8:8b:
5a:4c:b5:7e:66:74:86:68:41:2a:1f:6e:12:08:7d:
88:3f:bb:76:0d:9d:d0:88:f0:18:99:9d:26:dd:59:
a3:1f:72:9d:20:62:43:e5:3b:50:6a:20:e3:f1:93:
91:4f:60:aa:32:21:0d:4e:89:bd:cf:b5:b7:39:a7:
04:e7:bc:9f:cc:f1:f4:72:2d:47:8a:80:ce:ec:54:
5a:d6:a4:c8:cd:49:94:4f:05:48:9e:e7:f4:b5:8b:
dd:d7:71:b0:69:f3:e3:99:36:3c:01:78:a5:46:40:
28:a8:89:0c:f9:1c:7a:85:4a:9d:eb:7a:1f:83:26:
8a:72:9c:dd:f7:d4:a4:36:6c:84:8c:72:b0:08:f2:
72:09:bf:83:26:3e:94:6a:ab:a9:c6:f3:24:e0:a8:
55:9f:5c:5f:c4:f0:19:bb:15:fa:be:40:bb:0d:a6:
17:58:af:19:1d:6f:66:8d:6f:71:a1:28:b3:c3:06:
56:4f:9a:52:ef:98:88:7c:fc:c0:af:69:30:ab:64:
6f:9f:2c:99:3c:db:56:59:b4:24:da:68:2e:c8:b9:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:FB:66:25:BD:DE:AD:3B:B4:AA:D5:56:AB:EB:D5:E2:34:5B:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE1944E6922D11F19FE967BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.214.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:27:f9:ef:e3:86:f6:af:48:eb:af:58:f6:4c:2a:c5:69:36:
2a:8e:31:f9:f1:79:ce:90:14:59:60:59:98:d5:98:53:80:5e:
01:39:5c:69:e8:86:4e:08:ba:eb:59:47:a7:a2:47:f3:b5:db:
c0:28:e1:8a:64:22:4e:cd:e6:fb:99:03:4b:3c:b3:0e:59:5c:
5e:3e:ed:dd:33:61:fa:3b:7d:72:80:1d:76:6b:9f:12:4e:3a:
ef:6d:59:7e:c7:47:49:81:60:de:e6:f8:ff:a6:bc:9e:7a:85:
57:94:6b:8f:a3:e6:f9:c9:91:11:8f:bb:c7:df:dc:20:41:0d:
20:0a:a1:01:92:1f:8b:60:aa:9b:9d:6f:ed:ca:cf:18:e9:63:
98:44:69:20:78:6e:32:b5:33:f9:fd:ac:18:1a:86:dc:01:18:
54:a5:c0:d4:b0:0c:82:51:3c:55:1a:18:34:28:96:36:44:dc:
fb:95:a0:cb:e5:83:04:7a:a4:4e:72:d2:34:10:9a:ce:4f:0f:
19:4f:69:a4:e6:b7:d0:ae:06:9b:df:38:ec:f9:ff:95:a2:fe:
04:fa:4f:be:88:c3:57:4c:48:ec:21:58:53:fc:33:f8:2d:06:
c4:d7:9c:91:0c:8a:b4:7a:cf:34:b4:85:5d:1e:45:0f:16:e7:
73:e4:6b:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAd0tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODA3MDcwMDI4WhcNMjYwODIxMDcwMDI4WjAYMRYw
FAYDVQQDEw02YTc1ODI5MC1hNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw0xLaVknx1/tEzQAKntqSO9kUkSi8JJ/qgBW/VcEp2qyV3iTLkbGovI+
2ItaTLV+ZnSGaEEqH24SCH2IP7t2DZ3QiPAYmZ0m3VmjH3KdIGJD5TtQaiDj8ZOR
T2CqMiENTom9z7W3OacE57yfzPH0ci1HioDO7FRa1qTIzUmUTwVInuf0tYvd13Gw
afPjmTY8AXilRkAoqIkM+Rx6hUqd63ofgyaKcpzd99SkNmyEjHKwCPJyCb+DJj6U
aqupxvMk4KhVn1xfxPAZuxX6vkC7DaYXWK8ZHW9mjW9xoSizwwZWT5pS75iIfPzA
r2kwq2RvnyyZPNtWWbQk2mguyLkLDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFONG
+2Ylvd6tO7Sq1Var69XiNFu0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRTE5NDRFNjkyMkQxMUYxOUZFOTY3QkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsTWMA0GCSqGSIb3DQEB
CwUAA4IBAQDKJ/nv44b2r0jrr1j2TCrFaTYqjjH58XnOkBRZYFmY1ZhTgF4BOVxp
6IZOCLrrWUenokfztdvAKOGKZCJOzeb7mQNLPLMOWVxePu3dM2H6O31ygB12a58S
TjrvbVl+x0dJgWDe5vj/pryeeoVXlGuPo+b5yZERj7vH39wgQQ0gCqEBkh+LYKqb
nW/tys8Y6WOYRGkgeG4ytTP5/awYGobcARhUpcDUsAyCUTxVGhg0KJY2RNz7laDL
5YMEeqROctI0EJrOTw8ZT2mk5rfQrgab3zjs+f+Vov4E+k++iMNXTEjsIVhT/DP4
LQbE15yRDIq0es80tIVdHkUPFudz5Gs1
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:58 2026 by rpki-client