Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE4F7FC80E6811F18F3A82A4DAE4EC9C.roa
File: AE4F7FC80E6811F18F3A82A4DAE4EC9C.roa (raw, json)
Hash identifier: cLf1s1RvVQYqZ+v4eLVswaIKYXYCAbAYEtqO+DdvwMw=
Subject key identifier: C8:C8:DF:D6:76:1B:DF:55:DE:D5:0F:85:3F:99:FC:43:3C:A5:3B:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE4F7FC80E6811F18F3A82A4DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 14:30:19 +0000
ROA not before: Fri 20 Feb 2026 14:30:15 +0000
ROA not after: Thu 04 Jun 2026 14:30:15 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
154.206.18.0/24 maxlen: 24
154.206.21.0/24 maxlen: 24
154.206.24.0/24 maxlen: 24
154.206.25.0/24 maxlen: 24
154.206.26.0/24 maxlen: 24
154.206.27.0/24 maxlen: 24
154.206.28.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.206.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113290 (0x1ba8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 14:30:15 2026 GMT
Not After : Jun 4 14:30:15 2026 GMT
Subject: CN=69986ffb-4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:fb:4e:6e:1c:25:5f:f7:2b:d9:f0:8c:53:
17:ef:dd:f5:58:df:79:59:d8:d1:dd:59:ac:60:2c:
13:1a:2d:fe:62:30:e3:13:31:75:47:02:80:ec:fb:
fe:36:ee:e0:2e:9c:04:00:99:a0:0c:a6:f3:ed:31:
45:8b:c3:eb:7a:60:94:e7:cc:65:15:c7:4e:12:ed:
f1:ce:8a:e8:7a:b0:26:ec:5f:c1:71:bc:26:54:5c:
56:46:45:9d:38:19:a0:11:9e:de:d1:58:c3:ff:ed:
d5:78:d6:4c:37:89:3a:85:0e:8a:61:5e:d5:ca:eb:
b5:d9:24:99:b2:4f:80:75:83:dc:97:1c:fa:ac:3f:
48:51:a9:9d:fe:40:bc:68:69:d0:12:17:af:a9:f3:
c8:ec:70:3b:e1:48:62:b5:dd:e1:65:0e:d6:dc:49:
17:93:f4:33:8e:9f:18:a3:66:9d:3c:15:90:a4:1e:
51:9b:97:da:e1:27:6c:95:3e:7e:79:86:94:cf:16:
73:39:f6:ea:c0:42:2d:14:e4:64:b3:2b:3b:fe:fd:
e9:a4:b7:a0:f7:9f:4a:fd:ba:09:7b:69:02:60:ef:
25:be:bd:a5:ba:9d:b2:1a:7a:cb:4e:5f:23:d6:29:
87:3f:5e:d3:ff:f3:e9:6c:3b:a2:7f:b8:33:df:51:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:DF:D6:76:1B:DF:55:DE:D5:0F:85:3F:99:FC:43:3C:A5:3B:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE4F7FC80E6811F18F3A82A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0-154.206.18.255
154.206.21.0/24
154.206.24.0-154.206.30.255
Signature Algorithm: sha256WithRSAEncryption
b3:c0:98:3c:12:b3:d3:e4:1f:a3:e1:c9:42:66:34:9c:fa:f2:
c7:56:f4:da:6a:30:f5:b8:12:a5:de:d8:d1:2e:42:fa:80:cf:
21:e6:7f:47:46:88:d9:a0:75:8b:0d:52:d0:a7:92:42:48:67:
d9:b4:16:7e:ec:a0:fa:04:18:42:be:a3:77:15:b0:1a:f5:c5:
a4:85:40:81:20:9f:59:cf:77:ec:5f:8e:df:50:b4:2e:d2:32:
0b:45:27:21:20:2d:da:67:63:29:da:7a:a3:b5:6b:54:59:d0:
ef:1b:cd:2b:0e:6d:36:47:99:d9:0c:dc:84:f6:c5:94:f2:6b:
24:33:f8:12:9a:44:26:b1:f2:63:e8:62:2d:04:62:30:b7:34:
02:e0:78:a1:f6:60:38:bf:e8:cf:07:8a:68:d0:c1:be:7a:e3:
a0:5d:ae:fe:4b:26:a4:64:1e:76:a2:19:ed:65:38:73:00:85:
0c:dc:c4:e2:eb:f7:10:d7:f4:6d:91:c8:d4:e6:48:d5:63:e5:
60:b2:43:75:4d:2a:d5:15:e5:95:8b:37:45:68:4d:e3:19:b1:
be:3b:9b:3d:b7:2b:a6:c2:2b:77:e4:18:70:ee:df:ca:96:86:
06:6c:8d:e5:8d:b6:d9:5b:ae:a5:cd:e0:fd:3b:36:c7:7e:04:
97:e3:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:38 2026 by rpki-client