Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACB558FE457C11F1A9627EDFCE1D38B0.roa
File: ACB558FE457C11F1A9627EDFCE1D38B0.roa (raw, json)
Hash identifier: /Xjdw+PE5vsf8XFCC2UuowdevlRrx/aGqaRnmgjVYYE=
Subject key identifier: BB:C7:AF:DC:AD:68:B0:36:2F:30:A8:3E:CC:F4:FD:5A:40:D2:8E:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACB558FE457C11F1A9627EDFCE1D38B0.roa
Signing time: Fri 01 May 2026 16:42:00 +0000
ROA not before: Fri 01 May 2026 16:41:56 +0000
ROA not after: Tue 09 Jun 2026 16:41:56 +0000
asID: 44559
IP address blocks: 154.210.237.0/24 maxlen: 24
154.210.238.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116927 (0x1c8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:41:56 2026 GMT
Not After : Jun 9 16:41:56 2026 GMT
Subject: CN=69f4d7d8-10e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:2f:7a:75:90:44:72:06:56:f4:d2:88:90:
72:59:6c:15:11:ef:69:8e:15:b3:41:8a:d1:ff:31:
66:c2:1a:a4:dc:18:8a:81:ce:4a:58:aa:ec:62:3d:
b5:1f:09:b1:12:e4:ed:a8:d7:7c:57:31:c5:ca:a9:
e4:a0:82:47:3c:68:a0:22:8b:08:50:ff:16:68:57:
ce:cc:8e:5a:47:65:bd:5c:b7:b3:f8:e2:d7:16:3e:
01:02:1b:68:53:36:41:8f:46:75:bc:c0:ee:69:0f:
a0:f6:a6:45:bb:2f:17:72:a6:82:d8:cf:b1:ee:5a:
b0:c3:52:8b:70:f6:0a:c4:bf:7a:40:8b:98:47:a4:
a0:81:fa:ba:55:37:7a:37:c6:73:e2:94:f4:f0:25:
18:82:88:f8:74:33:d9:2e:5b:09:07:f8:7b:36:9f:
0c:16:fb:99:ca:a1:f9:d9:a6:28:8f:c8:77:45:5f:
18:49:1f:a5:4d:77:8d:e4:10:0a:32:08:72:62:c7:
4c:ef:80:ca:70:ce:c1:d8:54:f4:18:16:6b:ba:19:
c8:d9:39:8a:a7:e2:6d:7b:a4:a7:0f:38:0e:97:63:
3d:e1:4f:d9:43:cb:16:9e:c8:5e:6d:96:44:d6:6a:
1e:43:3f:52:25:65:96:19:c8:e9:c3:71:11:6f:3c:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:AF:DC:AD:68:B0:36:2F:30:A8:3E:CC:F4:FD:5A:40:D2:8E:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACB558FE457C11F1A9627EDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.237.0-154.210.238.255
154.219.72.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1f:ea:79:02:ae:1f:5b:81:08:78:9b:31:39:38:12:58:a4:
96:93:72:2a:bf:7f:6a:7a:41:05:97:7b:da:b7:83:95:25:1e:
e5:70:92:0f:d6:ca:97:66:6c:15:93:b4:36:1b:7f:13:81:30:
99:10:82:69:a0:f2:a3:8f:f2:31:96:fc:5a:4b:51:bd:0e:76:
8f:da:cb:7a:3f:7f:5d:ed:0c:e9:87:f4:cc:de:60:ba:ba:44:
e0:f4:b0:d9:f3:ed:d2:a7:17:1b:44:22:83:35:06:03:b2:78:
c7:e8:1b:35:46:e3:23:2a:73:70:7c:6b:7f:9b:23:22:df:3f:
b9:6f:6c:2f:77:66:cd:67:f4:9e:5c:6f:23:0f:57:17:b0:65:
46:ab:65:a1:70:e9:f8:71:60:04:8c:7b:f7:7a:08:da:8d:41:
39:8c:fd:76:ab:e8:c6:8b:e5:6a:cb:1b:e0:13:8f:89:ad:d3:
1a:89:b5:a4:1b:10:d3:a2:19:44:93:33:21:a2:28:7f:4a:19:
74:de:b4:0f:96:0f:09:7a:5f:28:8f:1f:f7:69:75:5c:e1:90:
99:64:d7:7d:a2:0b:69:59:83:a4:a5:2d:2a:ad:0f:62:30:43:
a8:ed:fb:e5:62:ae:05:80:29:1e:d0:e1:49:b3:95:b6:a7:e8:
25:05:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:40 2026 by rpki-client