Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ACE4BCC896911F193500DCECE1D38B0.roa
File: 1ACE4BCC896911F193500DCECE1D38B0.roa (raw, json)
Hash identifier: R2mx9r94dFQ5B2LMokXpmFZajmT+cKNu9UgA6VZJDXQ=
Subject key identifier: EE:74:51:AF:88:54:00:2E:A9:AE:03:11:61:39:E3:0D:DA:C5:E5:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ACE4BCC896911F193500DCECE1D38B0.roa
Signing time: Mon 27 Jul 2026 03:13:14 +0000
ROA not before: Mon 27 Jul 2026 03:13:10 +0000
ROA not after: Mon 03 Aug 2026 03:13:10 +0000
asID: 4760
IP address blocks: 154.88.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Jul 2026 08:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121679 (0x1db4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 03:13:10 2026 GMT
Not After : Aug 3 03:13:10 2026 GMT
Subject: CN=6a66ccca-1fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:a0:bd:9d:dc:28:9c:64:e0:7e:6f:19:94:
47:50:0c:b5:52:f3:bf:b2:64:ac:1b:22:dd:96:f9:
01:0c:af:db:c0:1a:1a:5b:f7:87:cc:6e:bb:60:7c:
6e:94:00:ab:e1:5e:fb:11:7f:af:1d:12:ff:64:f5:
c8:ae:2e:55:51:82:36:bd:ab:32:3b:74:00:c2:9f:
3d:b5:ea:ac:14:a6:df:8f:13:9c:73:aa:5e:09:d4:
e4:69:71:69:dc:9d:ef:dd:6b:6c:7d:60:35:f9:a4:
03:15:a2:0b:ef:b9:81:ba:57:3a:09:fc:a0:ee:ee:
36:0a:bb:2c:e0:1d:49:98:04:35:b5:09:c2:37:1e:
1b:8e:75:4f:6a:1d:6d:70:86:1e:3d:d0:21:b3:2c:
e0:5e:52:7e:cc:a5:1b:29:76:a5:9e:8e:f4:90:c2:
12:2d:4f:52:74:33:d8:d9:61:83:63:00:a8:8c:84:
89:02:de:69:0c:f3:45:35:80:79:54:1c:0e:9f:cb:
2a:19:99:37:62:80:4b:58:46:65:6a:65:cd:a7:7a:
89:3f:5d:b9:8e:db:8f:e8:64:1e:d6:cd:1b:81:60:
1a:7b:5e:d6:25:cc:9a:28:b7:e8:d6:8b:fb:f2:c1:
ec:a4:bc:ae:84:fe:15:32:89:9c:47:00:9b:0d:eb:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:51:AF:88:54:00:2E:A9:AE:03:11:61:39:E3:0D:DA:C5:E5:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ACE4BCC896911F193500DCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.80.0/20
Signature Algorithm: sha256WithRSAEncryption
15:7a:be:8f:ae:4f:99:62:28:5f:bd:96:3b:ce:2d:6a:2d:bd:
45:6d:c4:18:13:fd:84:e9:a4:1d:95:75:3b:3f:3a:21:3f:b1:
d6:8a:4f:82:f6:a3:4f:c5:58:23:db:c0:64:ff:ff:26:33:60:
a9:85:b0:b5:e5:ef:bd:dc:2c:0c:e1:82:0d:b8:8e:72:14:5f:
56:2e:c3:dd:1b:30:04:d1:16:d3:4a:a3:4b:87:2f:c7:cb:33:
29:7e:01:8b:23:a0:d6:34:2e:3f:2e:03:c1:f6:e9:52:d0:65:
d4:cb:39:e6:e8:11:85:1f:3a:97:0c:27:6b:42:91:69:8b:41:
15:ff:b6:15:88:76:43:f9:ec:d3:e6:3b:ca:18:be:be:e7:fa:
8d:29:a0:73:d7:8f:b3:6d:ca:1c:0c:15:cc:c9:c9:8e:75:d2:
b4:30:0e:e6:b4:36:63:51:3b:1a:a8:95:21:b7:97:8b:f4:7f:
cd:cb:cd:34:a9:f7:c4:bb:dc:8b:fd:b9:40:ea:fb:d8:73:00:
4e:ae:10:40:22:db:d6:3c:b4:f1:54:62:7b:36:1a:e1:ce:06:
a4:7a:27:49:fa:45:d1:3e:fb:3b:3a:2e:cf:05:11:6f:f5:5c:
c7:87:f1:ce:c7:28:6e:88:a3:f9:b3:91:e1:d6:fc:5c:b2:1a:
31:dc:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:11:05 2026 by rpki-client