Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACEE96AA42FC11F1AC64CDAECE1D38B0.roa
File: ACEE96AA42FC11F1AC64CDAECE1D38B0.roa (raw, json)
Hash identifier: BW6haWgpgGnNhv+LkDxcQFsiB573/n2KSTQAKXsassE=
Subject key identifier: 79:C8:D6:88:60:93:70:A7:78:89:07:2F:14:6C:CE:B2:AD:C8:19:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACEE96AA42FC11F1AC64CDAECE1D38B0.roa
Signing time: Tue 28 Apr 2026 12:20:43 +0000
ROA not before: Tue 28 Apr 2026 12:20:38 +0000
ROA not after: Thu 04 Jun 2026 12:20:38 +0000
asID: 199707
IP address blocks: 154.202.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116661 (0x1c7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:20:38 2026 GMT
Not After : Jun 4 12:20:38 2026 GMT
Subject: CN=69f0a61b-1866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:6a:ae:8d:a5:5b:92:ff:60:d8:f0:fe:f3:
b5:c9:b6:bc:46:26:07:9e:4f:53:70:ec:b8:a1:b2:
d0:0f:5e:b1:73:e5:e1:4c:f0:db:ae:35:b0:4f:22:
4c:7f:65:8c:25:41:d8:22:04:c8:11:c7:2a:da:4b:
21:44:92:42:5d:41:df:c5:ae:35:6b:94:ce:47:f2:
86:1a:fa:41:e1:4a:95:bf:d6:dc:3a:18:4d:ee:f0:
44:6a:18:6b:cb:3f:0e:70:cc:bd:a9:17:de:8b:a5:
8d:58:df:85:0a:d3:ed:99:7b:c6:5d:4e:1e:eb:b9:
0c:b3:4b:c6:6b:75:b9:7c:09:0c:fc:89:41:c6:75:
11:af:c8:d0:68:82:6a:94:19:a8:24:42:c7:c4:75:
64:47:dc:9f:c1:4f:8b:22:92:aa:c2:b4:8f:43:73:
ba:f3:3c:8a:6f:20:83:82:70:d9:d2:cd:ed:1e:83:
9c:ac:ed:18:aa:b8:a6:6a:8e:d8:59:36:da:2f:76:
b5:4d:02:10:57:6f:1f:f1:60:fc:7d:a2:05:3e:7e:
81:16:5c:81:fb:f9:40:5a:53:f2:c8:4a:79:e3:06:
c2:cb:82:31:7f:84:69:db:5e:47:b5:99:8e:45:80:
23:46:34:bb:32:90:62:48:42:65:21:86:d9:97:49:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C8:D6:88:60:93:70:A7:78:89:07:2F:14:6C:CE:B2:AD:C8:19:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACEE96AA42FC11F1AC64CDAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:6f:6b:53:15:43:4f:39:06:2d:fa:36:72:d1:cb:09:fe:4f:
71:27:5b:dd:1e:bc:50:7f:f2:6f:c9:fd:3c:9f:d3:73:8f:e5:
eb:47:59:04:37:d3:c1:8c:47:0d:a5:16:1a:8a:28:9f:bb:40:
1f:4b:99:d7:7a:2d:b3:43:c7:f8:c6:b9:51:b5:bb:38:88:6d:
c9:7b:1b:72:ed:8a:19:f0:cc:13:c0:38:67:52:9d:4c:bc:9e:
4c:ee:33:4e:82:c1:c4:aa:33:63:ff:12:66:ac:07:62:cd:0b:
d8:30:d5:22:79:21:ec:21:59:d2:58:81:9c:04:59:fb:92:cc:
f6:95:14:9a:23:93:3e:16:90:49:26:59:1b:3a:dd:56:5c:c2:
ff:be:4a:c2:48:f6:64:07:ec:e4:d1:9f:b1:db:7b:5e:82:f5:
90:c1:01:c4:10:e3:60:0a:b9:77:22:4d:b5:2f:45:8b:06:01:
27:4d:3d:23:d9:c6:ff:b3:4a:a2:d2:4e:c3:ff:1f:d5:cf:41:
50:bb:da:d6:c7:1f:b6:39:59:83:79:21:ab:46:19:2a:b8:47:
f1:61:63:43:10:d2:43:79:90:d9:4e:39:06:9c:31:7b:46:94:
4e:da:06:00:87:bc:2c:47:9d:d0:55:91:31:f1:8a:80:10:78:
4c:bc:ad:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:56 2026 by rpki-client