Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7614B217C811F1AB981DB6DAE4EC9C.roa
File: AE7614B217C811F1AB981DB6DAE4EC9C.roa (raw, json)
Hash identifier: k3GHkbqHjBm/n2wbgSt/5IBTOZzron0495Ow0uv4i+Q=
Subject key identifier: FA:FF:57:83:F9:07:9B:74:8D:87:C8:8B:0F:31:9B:73:05:04:6A:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7614B217C811F1AB981DB6DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 12:50:11 +0000
ROA not before: Wed 04 Mar 2026 12:50:07 +0000
ROA not after: Fri 10 Apr 2026 12:50:07 +0000
asID: 141159
IP address blocks: 154.94.224.0/24 maxlen: 24
154.94.225.0/24 maxlen: 24
154.94.228.0/22 maxlen: 24
154.94.228.0/24 maxlen: 24
154.94.229.0/24 maxlen: 24
154.94.230.0/24 maxlen: 24
154.94.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114039 (0x1bd77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 12:50:07 2026 GMT
Not After : Apr 10 12:50:07 2026 GMT
Subject: CN=69a82a83-e3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:f8:7c:cb:2c:39:f4:9a:fa:b6:5b:7b:10:
b5:f5:2a:6d:39:da:b6:44:be:70:6b:03:33:fc:88:
ad:96:56:6b:a3:83:a6:92:d4:ad:c1:0b:a2:4f:83:
07:81:ac:05:06:bf:01:b0:ba:70:57:65:cc:47:4f:
5f:17:75:ce:22:14:63:23:6b:83:fd:8c:38:c8:ad:
f6:1e:12:25:2c:28:09:bb:07:07:35:0d:0e:a1:8c:
e1:68:e8:c1:5a:6d:b2:cf:30:df:67:0e:b7:5d:26:
16:14:2f:ba:97:e7:6b:64:38:1c:e7:62:d0:54:a2:
0d:3a:aa:ce:a0:57:49:ec:99:7a:57:f0:c3:0c:4b:
c2:40:93:32:9c:4b:1c:57:dd:d4:2f:4b:18:f4:76:
97:a1:e5:06:bc:ae:5f:43:a3:40:66:b2:b8:f4:7e:
e5:72:62:a8:2a:f7:d6:91:57:fb:b4:1d:39:37:c0:
85:60:ec:05:65:d0:89:2b:e0:d2:d8:4b:33:5c:8b:
83:a1:c6:2d:bd:cc:c3:79:da:5a:2e:d0:94:65:84:
65:92:7c:55:16:63:4b:a7:68:86:4a:0c:5d:86:5b:
98:e0:48:ef:3d:2d:65:af:3b:e2:64:5c:f7:1d:ba:
e0:d5:7c:30:c2:cd:3c:49:51:69:58:75:52:88:93:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:57:83:F9:07:9B:74:8D:87:C8:8B:0F:31:9B:73:05:04:6A:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7614B217C811F1AB981DB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/23
154.94.228.0/22
Signature Algorithm: sha256WithRSAEncryption
30:2a:06:a9:1d:58:d2:9e:be:04:00:df:50:5b:97:c4:0a:3e:
70:15:20:e8:32:78:97:b7:19:00:6f:cf:89:6e:ff:b3:79:f4:
93:8b:1c:c7:6d:67:8a:ab:ca:dd:fe:5c:ac:02:d5:be:78:88:
39:48:a9:e9:ba:a3:59:5b:de:fc:ec:34:12:f6:d1:11:f8:f7:
d8:73:6e:fa:9d:20:4b:f5:9a:9a:1f:8a:0d:86:00:5b:d1:ec:
74:1e:e9:ac:0c:2d:f1:13:25:6f:0f:7b:66:b9:62:83:15:df:
29:82:38:97:f8:32:b3:af:44:58:4a:57:2d:83:3a:00:7e:77:
d6:25:0b:46:f6:b9:4b:45:cd:9e:a7:54:57:39:16:66:84:1e:
d4:0a:25:43:33:05:bb:29:57:52:73:e4:ed:dd:75:ad:94:ee:
0c:56:9e:5d:68:54:68:1a:dd:52:cb:1b:a2:38:13:65:f7:be:
1e:26:25:94:a6:eb:29:91:a5:2c:0c:6a:08:8b:ef:4e:f3:aa:
c4:95:f3:22:f0:af:6d:49:52:6b:fd:0d:54:13:26:0b:20:10:
9c:cd:54:cc:2c:2e:b6:f8:8d:8b:32:2e:e5:0d:a4:49:94:4b:
34:5d:ed:30:79:4b:c1:81:3e:aa:9d:cc:a5:c7:6b:19:95:fd:
97:33:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:34 2026 by rpki-client