Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE3FD405BB811F18EC1521ACF1D38B0.roa
File: AEE3FD405BB811F18EC1521ACF1D38B0.roa (raw, json)
Hash identifier: oeTT7EMHOoilNaUUWtHAdwkfeb2JknqE1vVSS7wcvVk=
Subject key identifier: 83:42:75:6A:97:8F:6B:0B:4C:DB:18:10:E8:A9:E4:DB:CF:3B:8E:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE3FD405BB811F18EC1521ACF1D38B0.roa
Signing time: Fri 29 May 2026 23:46:59 +0000
ROA not before: Sat 30 May 2026 23:46:54 +0000
ROA not after: Wed 01 Jul 2026 23:46:54 +0000
asID: 62240
IP address blocks: 154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118971 (0x1d0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 23:46:54 2026 GMT
Not After : Jul 1 23:46:54 2026 GMT
Subject: CN=6a1a2573-2696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:17:e5:e3:19:5d:3c:a5:8b:cf:bb:f0:4f:
f9:cc:be:19:93:ac:b0:b1:42:59:f2:96:11:0c:27:
26:29:9a:3a:e2:2b:f1:45:88:85:0b:f7:08:39:cd:
57:aa:d2:5e:1a:b8:c6:aa:53:c3:0d:e0:45:94:21:
56:95:fc:7d:74:32:f9:7d:24:cb:19:b8:b2:76:b8:
f8:ce:0d:dc:21:20:6b:7d:5b:00:0b:9c:dc:3e:31:
62:54:8c:c0:28:2d:07:6b:88:ac:25:33:c3:f4:0a:
51:6f:37:d8:7d:21:2b:6f:3d:94:df:80:e0:1a:0f:
36:b8:e1:21:42:b1:67:27:15:aa:fc:49:e5:a9:b5:
47:c4:36:ec:cd:d4:76:5b:f3:bf:a6:51:6d:11:17:
d7:aa:e7:5f:bb:e2:d6:65:44:68:a1:a7:f7:83:0b:
35:b4:47:05:76:50:82:57:57:fc:c5:9e:4d:19:b3:
04:d2:4c:1b:c2:f9:b4:7e:d5:34:a4:ca:69:c8:65:
e0:54:2f:81:3a:63:f1:41:41:33:9d:ac:41:d9:00:
ee:5d:5f:29:e3:24:79:2b:20:20:57:9b:6a:4f:58:
f5:8d:80:af:3f:3d:df:82:fa:34:7c:81:7c:5e:09:
3c:fa:85:fb:95:28:69:c6:e4:22:f3:4f:67:52:2e:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:75:6A:97:8F:6B:0B:4C:DB:18:10:E8:A9:E4:DB:CF:3B:8E:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE3FD405BB811F18EC1521ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.111.0-154.195.112.255
154.195.116.0/23
154.195.120.0/24
154.195.124.0/24
154.195.135.0-154.195.137.255
154.196.29.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c5:b2:55:11:60:29:ca:24:fe:61:27:83:3c:c7:7e:93:01:
2c:ca:78:42:9d:9a:98:86:65:e2:dd:ad:bf:61:24:83:7f:12:
0f:6f:0b:f8:0e:2f:a1:3f:b6:f2:ae:52:07:47:13:e2:8e:d6:
04:b3:ce:54:8d:9c:10:7a:d4:c8:e7:5f:3e:08:74:ef:c8:8b:
e9:99:bc:71:65:ca:16:33:dc:40:eb:63:f4:41:fe:ab:7e:b5:
46:68:69:b6:49:cd:c6:bd:da:9d:67:2f:14:4a:0e:fc:b8:09:
8e:cd:95:45:02:ea:4e:dc:31:88:aa:32:eb:f7:5c:f2:03:6f:
45:d5:8c:5c:ff:a6:4e:7b:d7:06:b3:ab:22:95:43:ef:f0:24:
1f:a0:85:83:0d:2b:36:8e:9d:cc:ce:d8:9f:89:e8:94:74:77:
ee:38:bf:3d:69:83:f0:2e:33:14:3d:08:d5:6d:04:be:e9:78:
23:84:f4:ce:5b:44:7e:b7:51:46:0e:4b:88:eb:03:43:1b:7e:
45:35:f1:54:70:b1:da:12:ef:ce:20:f4:1f:ba:3a:ed:fc:eb:
f3:5b:91:56:19:ee:c2:6b:c1:4f:69:88:eb:b1:17:34:45:13:
64:27:89:98:fa:bf:0a:13:64:34:9c:b6:48:d7:34:79:b7:74:
61:85:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:32 2026 by rpki-client