Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEACE21E1D2011F1B16080A0DAE4EC9C.roa
File: FEACE21E1D2011F1B16080A0DAE4EC9C.roa (raw, json)
Hash identifier: vTzpAjSQBnQBYrUXPW3k4lMLRBYpt4zBUDVVQW94L+I=
Subject key identifier: EF:32:F0:DA:05:62:70:BB:FB:F6:C9:77:3A:E9:56:86:29:EB:56:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEACE21E1D2011F1B16080A0DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 08:04:58 +0000
ROA not before: Wed 11 Mar 2026 08:04:52 +0000
ROA not after: Fri 17 Apr 2026 08:04:52 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114403 (0x1bee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 11 08:04:52 2026 GMT
Not After : Apr 17 08:04:52 2026 GMT
Subject: CN=69b1222a-6c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:29:2b:16:d2:4e:a8:84:95:44:27:69:56:
60:81:e6:66:7e:9f:2a:6d:f9:f3:b1:66:ae:b4:44:
dd:d5:2c:bd:92:92:cd:4d:c2:5f:d3:7a:39:83:85:
29:91:e1:31:ce:bc:e4:03:0c:6e:f6:48:43:de:ec:
5b:a9:b8:bd:e6:48:d3:5f:0e:73:c3:e3:04:39:fc:
42:49:c2:73:25:c0:81:71:38:31:f5:9b:64:29:d8:
0d:27:3a:6d:63:4b:49:df:22:b3:2b:9c:f6:f2:f3:
e9:d5:43:f7:9b:68:7a:de:66:11:8d:75:e7:8e:3b:
ee:8f:ea:52:75:3f:f2:3c:72:f7:fe:e5:66:cd:71:
9f:f2:87:cb:6a:a6:b7:c5:3c:4d:ff:cc:9b:af:83:
d0:a2:57:22:80:be:20:60:12:08:d9:64:62:b3:e6:
9b:ee:ef:23:14:5e:7a:b5:b0:69:c3:57:b3:9f:33:
1a:d7:8a:37:be:89:ea:3f:98:58:3d:bb:5c:74:f4:
0d:f4:20:af:4b:35:86:14:c0:6b:81:de:5f:c4:70:
dc:5d:96:1a:cf:d4:df:b0:ac:0d:24:c0:b1:b6:d5:
04:b3:e3:20:57:d2:34:fe:f2:4b:51:e2:c8:15:62:
56:d1:9f:23:e0:03:87:61:b9:78:76:50:0f:c3:2d:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:F0:DA:05:62:70:BB:FB:F6:C9:77:3A:E9:56:86:29:EB:56:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEACE21E1D2011F1B16080A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
86:88:de:78:b3:33:61:3d:1b:a7:af:7f:3d:3f:db:03:77:ef:
f6:80:91:e1:a6:92:9d:f0:d4:92:16:7a:70:5d:49:22:e2:0c:
61:73:68:19:55:6d:38:d0:6e:e8:9b:44:76:46:fd:dd:6b:77:
8f:fb:07:d7:a7:f8:aa:c8:a0:8b:b1:d0:9a:15:49:a2:35:cf:
93:f7:2d:a3:ea:6f:9d:49:95:e5:ea:a1:78:4e:95:91:8c:1a:
d0:61:64:ca:97:b2:2b:c0:30:d1:60:33:a0:53:22:e2:6b:5b:
04:da:68:19:8d:06:d2:c1:38:99:7d:3f:a5:f6:b5:5e:4e:c2:
79:6b:3a:d4:72:38:e8:2c:a6:9e:f8:a4:e3:e9:b2:60:46:7f:
c7:1f:4a:49:f4:a5:f8:5c:5f:85:2c:7f:1f:0c:c0:46:1b:4d:
27:44:d6:ab:4e:23:ff:02:fd:f8:2c:c4:3d:f7:62:8a:1b:b0:
2c:db:95:f7:29:42:60:45:a4:d1:b0:e4:9c:5c:c6:c0:a5:6c:
e3:4a:32:e6:ae:e4:b5:04:aa:85:c6:6d:13:25:bf:c5:a2:18:
71:34:73:82:7a:ee:e3:88:f1:e3:ca:0f:2c:7f:59:e5:fe:17:
b1:3f:76:50:b3:f6:d6:d3:d9:b6:8e:7e:cc:4e:37:55:c7:57:
12:33:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:18 2026 by rpki-client