Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEEF78A8861211F184F4FBEECE1D38B0.roa
File: AEEF78A8861211F184F4FBEECE1D38B0.roa (raw, json)
Hash identifier: mtLnMFvcDqikQi2ceAbqhWIr5m/EZPaQiWl0sJBl4kw=
Subject key identifier: 4F:76:6D:3E:B9:BA:73:9E:BD:BA:54:8D:47:93:53:76:42:3A:71:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEEF78A8861211F184F4FBEECE1D38B0.roa
Signing time: Wed 22 Jul 2026 21:17:03 +0000
ROA not before: Wed 22 Jul 2026 21:16:59 +0000
ROA not after: Fri 31 Jul 2026 21:16:59 +0000
asID: 49581
IP address blocks: 154.83.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121586 (0x1daf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 21:16:59 2026 GMT
Not After : Jul 31 21:16:59 2026 GMT
Subject: CN=6a61334f-453b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:64:7c:65:5a:96:ab:f3:7f:70:a5:3a:c9:
a7:5b:e3:37:32:bb:60:32:21:19:5d:0c:77:5c:97:
06:a6:bf:29:73:4b:a0:0e:72:53:99:44:ba:54:e9:
a0:70:65:40:f4:1a:a7:9a:75:37:08:64:67:61:7e:
75:15:79:3f:3b:53:d6:25:63:e3:fb:e3:a2:d8:27:
06:68:87:09:08:43:b8:79:f9:b8:50:50:91:5a:dc:
a4:e9:c9:a6:08:35:64:92:de:ea:4a:0e:ce:14:a5:
f1:d7:f5:7c:3b:57:30:82:a4:71:20:51:fc:aa:6f:
c0:39:69:39:ec:66:fe:20:7c:d9:c4:6d:ec:9b:59:
be:18:d7:69:ce:cd:73:8c:33:cd:3d:ce:e7:8a:0a:
a2:08:16:41:f7:2e:9f:84:a0:79:70:37:42:6c:97:
77:09:31:08:2e:95:72:e2:82:b6:29:f1:c3:24:62:
83:36:8b:2b:20:34:e0:9a:50:43:00:83:76:42:de:
ee:be:a5:f1:a5:98:56:43:81:ea:0b:e9:cd:ca:b6:
b7:4a:32:94:4b:00:39:a4:e5:ba:61:6c:3b:86:a1:
c4:b5:47:26:5a:d8:30:7b:84:c4:ed:c1:a6:1e:36:
2c:db:d1:b0:3f:14:b3:ec:c9:47:6a:8c:fa:02:8f:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:76:6D:3E:B9:BA:73:9E:BD:BA:54:8D:47:93:53:76:42:3A:71:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEEF78A8861211F184F4FBEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
35:43:07:ee:74:81:0d:d1:14:08:36:68:d6:04:43:a8:0f:7a:
1f:39:ff:e7:7b:f0:a6:d4:ab:0f:1e:10:d8:1d:e3:b2:7f:53:
d4:5f:2a:7a:e6:0e:48:a7:3e:a4:6c:2d:24:34:ec:1d:3d:11:
9c:a2:c2:f3:2f:d7:3d:af:03:b1:42:6c:99:e5:98:3f:a9:dc:
4f:19:03:c3:cc:dc:f8:0e:f7:09:59:91:37:7a:53:69:da:20:
0e:98:ce:f3:17:35:cf:89:36:0f:bd:51:b1:77:45:60:f4:90:
0f:43:0d:d0:14:74:07:45:ca:f2:03:e8:1b:d8:fe:4f:01:77:
66:37:1f:7d:1d:4e:b8:1b:6e:e1:21:39:41:14:88:3a:3f:2f:
f4:e3:47:40:38:1c:fe:82:8a:f4:da:7f:ec:69:e7:1d:87:68:
62:71:46:4f:44:a4:47:f2:92:a4:d6:ca:3c:5e:77:b4:46:0e:
a2:68:dc:e0:94:b5:40:db:c5:cd:d5:cf:5d:33:eb:48:62:30:
4c:c9:91:13:01:f2:8c:ff:0c:80:c3:66:98:47:d0:a1:c8:29:
4b:b1:a5:0d:29:0a:1d:80:3f:60:fb:9c:33:8f:81:71:8d:1e:
22:0a:39:53:f3:ed:24:29:ed:64:29:5a:cb:33:3d:d4:d0:f3:
9a:cb:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:30 2026 by rpki-client