Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE348230698111F19304FFF1CE1D38B0.roa
File: AE348230698111F19304FFF1CE1D38B0.roa (raw, json)
Hash identifier: 8YzEzV87Xljv71uJRPVhk16DOMmyfP/0WQvktFNQWM8=
Subject key identifier: 6E:61:ED:3E:21:68:92:3D:35:93:0A:C2:A6:40:0A:ED:2E:A7:29:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D343
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE348230698111F19304FFF1CE1D38B0.roa
Signing time: Tue 16 Jun 2026 12:48:32 +0000
ROA not before: Tue 16 Jun 2026 12:48:27 +0000
ROA not after: Thu 16 Jul 2026 12:48:27 +0000
asID: 17497
IP address blocks: 154.196.219.0/24 maxlen: 24
154.196.220.0/24 maxlen: 24
154.196.221.0/24 maxlen: 24
154.196.222.0/24 maxlen: 24
154.196.223.0/24 maxlen: 24
154.197.16.0/21 maxlen: 24
154.197.16.0/24 maxlen: 24
154.197.17.0/24 maxlen: 24
154.197.18.0/24 maxlen: 24
154.197.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119619 (0x1d343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 12:48:27 2026 GMT
Not After : Jul 16 12:48:27 2026 GMT
Subject: CN=6a314620-31e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:c3:61:be:da:62:a2:8e:38:a9:30:b7:6f:
3e:02:f3:ef:43:b3:98:80:ad:c3:ad:e5:90:39:c7:
2f:26:45:c9:50:30:fb:44:a4:c6:3a:b3:fd:78:67:
1a:ab:a0:bf:62:85:95:ca:5c:01:19:26:5b:30:ef:
e5:ab:77:b0:f4:68:47:c7:c8:b7:de:74:f0:87:7c:
9f:62:34:4e:a5:9d:65:29:56:77:ee:06:e1:f2:47:
cf:12:e5:9f:2a:24:15:8d:56:b0:29:73:9b:90:3b:
35:61:ee:97:fb:44:1b:a8:5f:e0:7b:71:06:9c:f2:
8b:a5:88:fd:ca:3a:87:95:51:d6:7c:83:18:6f:53:
e3:5e:1b:81:a6:9b:64:9a:cf:fd:6c:0e:c3:00:a5:
aa:95:bd:5b:3f:4e:48:09:b5:53:77:21:b0:0b:c0:
11:d0:1a:0b:84:2c:e5:bd:be:29:7c:e9:40:8b:bd:
58:d1:89:33:64:78:7a:2e:2b:88:15:a8:ac:20:38:
67:d7:82:1d:b2:85:6e:53:bb:37:16:7d:a6:29:d6:
63:a0:3f:22:e1:6c:1e:00:09:f4:a7:39:b6:cb:04:
06:d4:16:67:38:c3:8e:ea:c7:8a:ff:1e:52:b9:68:
86:16:46:bb:68:a3:95:7c:12:58:b3:d9:45:a9:31:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:61:ED:3E:21:68:92:3D:35:93:0A:C2:A6:40:0A:ED:2E:A7:29:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE348230698111F19304FFF1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.219.0-154.196.223.255
154.197.16.0/21
Signature Algorithm: sha256WithRSAEncryption
af:18:12:db:78:bf:a2:ea:d9:ff:38:3c:db:1b:2d:83:26:94:
27:e3:3d:33:b5:e3:08:5c:5d:1d:74:62:37:08:88:c1:4f:69:
e0:3b:b4:ea:73:a7:3a:01:21:5d:20:f1:7d:fa:9d:05:38:c0:
3d:1c:60:9e:22:8d:99:99:23:bc:f5:24:43:65:03:24:59:ba:
83:fe:58:cb:df:d5:75:67:21:fa:97:36:11:ea:2a:10:6f:34:
10:87:46:9d:3c:05:d5:a0:69:a6:5d:a6:ba:88:4e:13:31:5c:
b0:53:a8:ea:70:f8:9e:33:fe:55:ff:c9:d8:b7:d2:b2:43:bb:
2d:39:aa:24:43:d3:bc:f4:00:cd:2c:54:67:17:6b:48:0b:13:
d4:49:ab:9a:b4:f5:4a:9e:4b:21:e8:84:61:1d:79:f0:70:72:
39:2e:17:45:0d:09:fa:2d:9f:09:39:0a:ab:e4:ac:23:ab:ef:
17:42:00:fc:81:6f:d3:ce:a8:4b:8f:15:15:68:06:ef:7a:bb:
31:bd:22:fb:62:d8:a3:75:8c:23:76:d5:93:d7:53:e0:02:75:
48:14:9e:e4:94:ad:6f:77:20:1d:73:0f:0f:2d:ca:82:07:d9:
f4:97:57:25:38:c3:ee:e4:8c:21:ab:90:cf:86:5d:d0:a9:cc:
54:80:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:00 2026 by rpki-client