Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFB8CB0108311F1B013B797DAE4EC9C.roa
File: AEFB8CB0108311F1B013B797DAE4EC9C.roa (raw, json)
Hash identifier: +bvWZTOBO7PK6YAD9rB1JyUci4G1ufCXDfE4nnQOwOM=
Subject key identifier: B4:9E:D5:AB:52:50:EA:DD:8C:D6:FA:49:3F:43:7C:1C:E0:D6:10:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFB8CB0108311F1B013B797DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 06:48:39 +0000
ROA not before: Mon 23 Feb 2026 06:48:33 +0000
ROA not after: Sat 28 Mar 2026 06:48:33 +0000
asID: 211687
IP address blocks: 154.193.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113415 (0x1bb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 06:48:33 2026 GMT
Not After : Mar 28 06:48:33 2026 GMT
Subject: CN=699bf847-d6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:2d:09:6f:6c:1a:98:78:4b:01:23:7d:ac:
11:2c:38:2b:93:18:ae:2f:44:99:38:2e:f3:04:2d:
77:63:c1:2c:6a:f0:46:65:59:e6:77:71:64:57:4f:
f3:6d:fa:5a:15:f4:04:a0:42:e1:bc:55:53:6b:cb:
bf:ac:59:9b:ae:e6:43:f9:bc:93:9d:f9:ae:7a:06:
61:1c:07:87:38:23:0c:79:95:1e:d6:2c:7c:1c:01:
ee:cd:fb:ee:6f:ea:25:53:15:e5:58:86:01:26:d4:
aa:1a:90:80:bc:c6:b7:56:d5:05:5a:7e:5e:68:42:
f8:38:ad:84:09:f8:8f:27:67:77:c9:30:8a:f5:0b:
ab:91:d3:bc:d9:9b:2a:ca:b0:e6:a3:70:c1:86:dc:
79:77:05:a1:ed:37:e6:01:37:26:4a:9e:0f:57:16:
5e:51:fa:bc:48:14:23:42:d7:89:f6:c2:67:a4:3a:
65:08:6b:dc:26:5a:87:e7:5f:d2:29:95:35:61:d7:
4e:58:00:d5:f5:f4:a7:96:e2:1d:15:0f:b5:9b:e5:
e5:e2:5c:9f:48:e2:bb:e5:1d:c9:d7:70:f5:74:d8:
29:a7:be:52:f0:cb:63:e2:4a:b3:89:d6:78:c8:29:
2b:cc:c0:70:c3:5e:ea:7d:12:c0:b4:8d:73:a9:4e:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:D5:AB:52:50:EA:DD:8C:D6:FA:49:3F:43:7C:1C:E0:D6:10:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFB8CB0108311F1B013B797DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:0d:d0:d7:9d:8e:34:51:22:b8:d1:84:22:d5:42:aa:9b:a9:
42:7b:98:ab:48:db:8a:a7:da:d1:fe:b6:48:ce:f3:a4:29:ce:
c4:3e:79:cf:35:f3:dd:08:a3:3f:a1:49:8a:60:3e:5f:d4:f0:
0d:49:06:42:3c:b3:0b:43:74:6e:12:23:e7:cd:35:11:18:24:
6b:ff:a0:17:51:6e:e7:3a:9d:ff:e7:57:71:5c:5f:ec:16:40:
2a:1a:27:a0:11:0e:7c:b3:02:14:cb:99:b7:d4:63:07:57:55:
cf:cd:37:fa:bf:6f:ce:cc:27:36:e6:ac:85:a5:e5:44:9d:f5:
f4:1d:6e:b7:81:28:7e:a9:df:9b:a0:2c:29:c5:68:f0:78:0b:
35:f7:7a:32:fa:fb:05:a6:ba:14:b1:67:9f:da:b7:7e:77:6c:
5b:81:58:0e:29:e1:89:91:f2:ac:cd:1c:8e:10:91:e3:e4:6d:
d8:00:21:ba:d2:96:98:b7:87:5c:a1:09:3e:9f:00:c4:b4:e3:
72:ab:18:ed:73:fb:0e:c9:d8:0b:89:44:b3:34:29:e3:3a:3c:
6e:6c:cd:8b:01:3c:ab:0f:8f:81:28:f7:0d:45:43:ef:c7:3f:
2f:dc:5f:62:fa:94:4c:1d:71:ba:da:51:ce:d6:80:5f:79:74:
65:85:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:39 2026 by rpki-client