Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB2454C437CE11F1AABE09CFCE1D38B0.roa
File: AB2454C437CE11F1AABE09CFCE1D38B0.roa (raw, json)
Hash identifier: AJfYK9M0sgkBQkMYzXYe07cYx1vAnlEw/LRSx1J9esM=
Subject key identifier: 2C:D0:CF:EF:FE:C8:02:1F:87:08:DF:BE:6E:AF:71:96:37:29:10:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C535
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB2454C437CE11F1AABE09CFCE1D38B0.roa
Signing time: Tue 14 Apr 2026 06:53:40 +0000
ROA not before: Tue 14 Apr 2026 06:53:36 +0000
ROA not after: Tue 02 Jun 2026 06:53:36 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
154.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116021 (0x1c535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 06:53:36 2026 GMT
Not After : Jun 2 06:53:36 2026 GMT
Subject: CN=69dde474-5efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:05:da:24:0a:c9:4a:a1:04:4e:09:a9:11:
e0:d8:8d:af:bb:da:c3:50:9e:69:fa:01:21:f8:28:
84:ec:bb:88:d2:f0:83:1d:d7:40:4f:b8:4c:2c:93:
cb:3f:22:c2:2c:ac:f6:aa:32:61:55:9c:cf:8b:99:
4d:e1:03:6f:ae:43:84:b4:a8:43:f3:4e:57:62:65:
5f:9a:82:72:8b:c3:83:d8:c9:ae:16:a4:57:bc:06:
f2:e9:22:17:a7:00:17:54:56:05:22:1c:f7:ee:cc:
e9:3a:0d:f1:d4:80:0e:e8:0e:f6:10:41:a9:3a:fd:
7d:1f:51:c3:b9:02:fd:1d:81:4b:88:40:96:a3:cc:
63:4a:76:64:ca:bf:a2:3a:7b:7d:75:38:05:64:11:
e9:b0:12:a3:c4:3d:01:a9:97:09:fd:6a:60:b0:8f:
a4:3b:f5:47:9c:0d:e1:ea:0e:87:65:55:6c:87:9e:
75:66:d1:ea:f1:38:60:62:e5:bb:5a:33:22:ac:71:
bd:30:64:d3:b7:5e:f3:3f:39:62:c7:eb:ed:7f:e3:
97:7d:f1:89:32:9a:d3:d4:be:ff:a8:ce:c5:7d:da:
43:ac:61:75:06:9b:c3:03:1d:91:f2:f3:68:7e:ab:
5a:f8:be:3a:f3:32:24:3d:58:8b:c1:3d:3f:87:b5:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:CF:EF:FE:C8:02:1F:87:08:DF:BE:6E:AF:71:96:37:29:10:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB2454C437CE11F1AABE09CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
154.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:86:9c:df:7f:32:1b:76:07:7b:74:f7:55:76:c3:ee:a7:ad:
e6:70:41:6c:32:07:f1:e8:3e:68:d5:bd:a7:2d:47:5f:09:44:
e7:58:64:9d:40:79:ef:65:92:61:fb:78:b8:f5:70:75:7e:c7:
65:46:a2:34:b6:16:45:69:3f:68:d8:71:63:94:65:ec:35:c9:
a8:a7:d2:0a:aa:1f:54:b4:fa:0d:86:47:d6:1b:b8:67:bc:3a:
db:7d:90:c2:d3:47:8a:42:ee:23:1f:ee:cf:21:bb:0d:5a:fa:
30:df:58:da:ec:43:82:88:e9:a2:46:b5:84:34:cb:ad:6b:ce:
2f:c5:56:a0:81:26:8c:83:d7:cc:c5:9a:89:ba:ee:3e:8e:af:
58:db:e1:91:ba:ff:a2:4b:65:d5:82:ab:69:69:f5:d7:dd:b9:
aa:be:27:4e:81:82:1c:ab:56:52:96:85:7b:9c:58:d8:1e:72:
f4:83:2c:1d:8b:b5:ba:e5:74:5d:1a:e1:10:4b:89:46:4a:fb:
57:4b:ea:37:3d:6d:b5:7e:05:89:63:b9:10:5e:25:2b:fd:4d:
3d:34:ec:d3:72:e4:30:21:f1:ac:d8:74:de:af:dc:25:bf:a9:
8d:6d:09:41:e6:aa:12:c2:74:d8:93:9b:d0:db:bc:cd:de:9e:
84:d1:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:06 2026 by rpki-client