Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1456A2243E11F1BCA9CAA2DAE4EC9C.roa
File: AC1456A2243E11F1BCA9CAA2DAE4EC9C.roa (raw, json)
Hash identifier: +LLVgqerJgydZGgJbJU0BWMKK0KR7Szl/bpRdUvaiXU=
Subject key identifier: 43:38:EB:C1:57:E8:0B:CF:C3:8E:B2:53:9E:32:A0:AF:12:2C:BD:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C00C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1456A2243E11F1BCA9CAA2DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 09:25:02 +0000
ROA not before: Fri 20 Mar 2026 09:24:57 +0000
ROA not after: Sun 26 Apr 2026 09:24:57 +0000
asID: 63139
IP address blocks: 154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
154.94.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114700 (0x1c00c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 09:24:57 2026 GMT
Not After : Apr 26 09:24:57 2026 GMT
Subject: CN=69bd126e-d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:63:56:2b:3f:b6:4b:f6:f7:5b:44:1d:b4:
a8:52:01:79:f1:e3:42:0a:30:6a:82:d6:e6:f7:4b:
04:7d:1d:b4:22:ae:06:ba:03:55:9b:63:6f:68:33:
4e:ce:1c:0f:f3:ee:77:7f:77:58:db:e6:f5:17:d3:
af:d2:02:26:c4:20:a3:18:29:4e:3d:e4:45:11:44:
df:bc:f7:f0:ed:74:cc:83:d2:9b:82:b7:3e:19:53:
d5:30:9c:e6:7c:3c:e0:27:ec:70:77:b2:df:4c:14:
ab:5b:72:62:e7:98:a2:18:9a:a7:b0:88:4e:15:ca:
cc:01:1f:4a:7f:77:ff:7f:1e:4b:2c:eb:47:1b:5d:
78:77:99:4a:74:34:52:af:fc:f4:21:e9:d9:24:3f:
59:b7:9c:b0:c9:37:62:e8:9e:51:5e:c3:26:93:c9:
09:b7:20:72:00:53:39:05:46:89:ca:ce:87:f6:8b:
6f:62:b2:d5:3b:58:bd:cb:59:95:c2:bb:aa:bf:7f:
aa:ab:90:0e:5d:03:32:68:db:68:3d:bc:d3:2b:a3:
aa:4a:bc:7c:ea:51:e6:11:72:bc:0a:5a:31:f1:dc:
d0:c7:1d:05:b9:32:a2:56:01:b4:03:90:95:d1:a1:
b6:24:03:2e:79:b9:f8:ab:29:8b:c0:64:35:15:f2:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:EB:C1:57:E8:0B:CF:C3:8E:B2:53:9E:32:A0:AF:12:2C:BD:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1456A2243E11F1BCA9CAA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0-154.94.90.255
Signature Algorithm: sha256WithRSAEncryption
27:db:41:4e:b2:47:16:cf:66:be:33:c2:3d:17:02:9e:23:3a:
f1:16:7e:00:56:bf:8d:6d:12:e9:70:c3:4b:c9:e8:dc:e2:ac:
18:52:38:38:79:90:7b:de:16:93:69:13:ea:fc:56:39:30:0d:
24:14:38:aa:ec:a8:84:98:02:7a:e5:e5:80:bb:75:9c:d4:8f:
dc:83:ea:26:e3:c2:c0:6f:25:87:22:ae:28:05:6a:75:74:8b:
cb:99:d1:cf:ec:dc:f4:f1:26:49:68:32:2c:5b:0a:42:bc:74:
f7:99:64:2c:7f:05:0c:9e:31:83:c0:62:91:ea:30:68:c5:27:
cb:71:47:3a:8f:fe:1f:61:21:fb:3d:b4:c5:d3:f2:8b:89:9d:
d3:c3:50:d5:da:b8:e4:ff:cd:cb:03:c4:e6:c7:00:be:f6:3b:
5c:6c:32:be:d2:b1:4d:e6:72:79:ef:2a:bd:89:9f:3d:3b:26:
6d:c4:dc:a8:12:76:e4:e2:ce:11:84:de:dc:82:61:51:45:8f:
7b:b3:68:80:b5:6a:24:1e:58:b2:22:e0:32:33:5a:db:83:14:
9a:c9:dc:29:6c:e4:14:74:be:97:34:15:40:00:d7:56:4b:db:
5a:ab:62:f0:65:3a:da:b4:6b:f1:a0:58:15:6b:bc:45:1a:b8:
33:b2:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:44 2026 by rpki-client