Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7004987E8911F18554AED6CE1D38B0.roa
File: AC7004987E8911F18554AED6CE1D38B0.roa (raw, json)
Hash identifier: ZCuusN5P+YHyh8BFOGAXTvTD3+LaMAq13yePOMIGoxI=
Subject key identifier: BA:66:27:66:BB:4C:B8:B8:95:4B:6F:F9:46:28:07:CC:EA:DA:F4:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7004987E8911F18554AED6CE1D38B0.roa
Signing time: Mon 13 Jul 2026 07:08:40 +0000
ROA not before: Mon 13 Jul 2026 07:08:34 +0000
ROA not after: Fri 22 Jan 2027 07:08:34 +0000
asID: 135419
IP address blocks: 154.209.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Jul 2026 00:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121009 (0x1d8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 13 07:08:34 2026 GMT
Not After : Jan 22 07:08:34 2027 GMT
Subject: CN=6a548ef8-4281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:86:59:c2:69:88:3b:da:d2:b3:ae:2f:8d:
20:d3:6c:d7:6f:21:4d:e7:96:6e:5d:60:c7:7f:7d:
f6:ab:bc:2d:69:e3:33:d5:3f:7a:70:e2:71:0f:a0:
5a:85:b9:a0:8f:fe:15:0a:56:2e:39:1b:e3:24:dc:
bc:5b:a9:18:0e:69:22:9f:13:b7:10:77:20:99:24:
f3:fd:29:c3:bf:01:e5:60:33:aa:f3:de:a6:22:7c:
19:ca:f0:87:42:bd:f5:4a:85:fe:59:fe:84:f4:1f:
cf:19:ce:26:d4:a7:56:6e:8b:50:88:c9:03:1c:24:
fa:54:0c:7b:77:e6:ca:46:15:86:53:75:4e:aa:05:
6b:1a:9b:fd:fc:97:6f:c4:47:18:c9:6e:34:c3:84:
70:3f:3a:37:be:6d:5d:5c:bd:1d:f6:61:e0:c3:7c:
d6:53:d4:bd:73:d8:15:63:c5:4f:fe:43:61:b2:b8:
d9:3f:c9:45:a8:1d:be:de:72:ca:a7:65:81:b0:c4:
1e:97:47:16:7e:bd:af:1e:3e:ec:40:91:72:fd:e7:
a7:81:eb:6c:6a:15:c9:91:3b:25:67:e4:47:8e:48:
a9:12:f2:ec:0f:62:5a:4f:8e:e8:1d:59:81:de:a1:
c5:3e:04:c2:7c:7a:83:5d:f9:02:cb:89:db:09:00:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:27:66:BB:4C:B8:B8:95:4B:6F:F9:46:28:07:CC:EA:DA:F4:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7004987E8911F18554AED6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
95:12:56:33:51:30:5b:c6:ed:83:a7:7f:71:75:ee:7e:90:64:
ad:f8:94:62:cc:61:8c:c9:04:c5:0a:b9:63:b7:d5:8c:f3:d0:
99:05:0c:e6:05:36:bd:68:ca:c7:e2:64:47:cf:bb:2a:68:90:
8e:d6:bd:fe:c2:f0:65:42:d5:88:a8:aa:ff:f1:7d:11:21:4a:
2e:c8:b9:35:61:62:2f:c9:62:06:79:20:83:9f:46:9e:02:90:
e0:ec:84:22:32:f5:ce:ae:cc:48:39:0d:bb:27:37:8b:22:5d:
3c:dc:69:0a:df:e5:61:a7:a6:43:1b:82:01:b2:30:89:7b:6f:
c9:68:d0:3b:8a:71:72:47:84:f3:b7:8e:32:ba:c0:6d:6a:1c:
23:1b:03:39:b1:7f:8a:30:4a:12:17:8f:2d:27:10:80:de:05:
65:74:a0:63:b8:ee:28:93:2a:52:c5:49:5c:89:c7:39:ed:48:
6f:58:23:ae:e0:56:88:ee:db:22:7d:ce:aa:c9:b9:9f:59:b9:
4f:9b:7a:53:56:cb:de:ba:4c:3e:a1:74:c0:2d:49:9b:3b:73:
f4:6c:d6:d6:51:8b:7d:cd:75:4a:43:39:b7:9f:e8:d0:ed:fb:
0d:e5:53:f6:59:7c:8d:18:de:4a:d8:82:33:70:a9:68:69:d4:
3f:fd:0a:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdixMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzEzMDcwODM0WhcNMjcwMTIyMDcwODM0WjAYMRYw
FAYDVQQDEw02YTU0OGVmOC00MjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwqGGWcJpiDva0rOuL40g02zXbyFN55ZuXWDHf332q7wtaeMz1T96cOJx
D6Bahbmgj/4VClYuORvjJNy8W6kYDmkinxO3EHcgmSTz/SnDvwHlYDOq896mInwZ
yvCHQr31SoX+Wf6E9B/PGc4m1KdWbotQiMkDHCT6VAx7d+bKRhWGU3VOqgVrGpv9
/JdvxEcYyW40w4RwPzo3vm1dXL0d9mHgw3zWU9S9c9gVY8VP/kNhsrjZP8lFqB2+
3nLKp2WBsMQel0cWfr2vHj7sQJFy/eengetsahXJkTslZ+RHjkipEvLsD2JaT47o
HVmB3qHFPgTCfHqDXfkCy4nbCQCypQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLpm
J2a7TLi4lUtv+UYoB8zq2vQHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQzcwMDQ5ODdFODkxMUYxODU1NEFFRDZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtGSMA0GCSqGSIb3DQEB
CwUAA4IBAQCVElYzUTBbxu2Dp39xde5+kGSt+JRizGGMyQTFCrljt9WM89CZBQzm
BTa9aMrH4mRHz7sqaJCO1r3+wvBlQtWIqKr/8X0RIUouyLk1YWIvyWIGeSCDn0ae
ApDg7IQiMvXOrsxIOQ27JzeLIl083GkK3+Vhp6ZDG4IBsjCJe2/JaNA7inFyR4Tz
t44yusBtahwjGwM5sX+KMEoSF48tJxCA3gVldKBjuO4okypSxUlcicc57UhvWCOu
4FaI7tsifc6qybmfWblPm3pTVsveukw+oXTALUmbO3P0bNbWUYt9zXVKQzm3n+jQ
7fsN5VP2WXyNGN5K2IIzcKloadQ//Qo5
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:18 2026 by rpki-client