Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BABE1C44D0711F1A731E2C8CE1D38B0.roa
File: 1BABE1C44D0711F1A731E2C8CE1D38B0.roa (raw, json)
Hash identifier: VpuN3241eX3OAKsnIj6Kx6u6GdOwW130uLIGy3bSHtU=
Subject key identifier: 75:D2:C3:A9:B8:44:72:EA:66:71:DB:66:2C:4C:D7:CE:F7:DB:63:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BABE1C44D0711F1A731E2C8CE1D38B0.roa
Signing time: Mon 11 May 2026 07:00:35 +0000
ROA not before: Mon 11 May 2026 07:00:29 +0000
ROA not after: Mon 15 Jun 2026 07:00:29 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117490 (0x1caf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:00:29 2026 GMT
Not After : Jun 15 07:00:29 2026 GMT
Subject: CN=6a017e93-eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:f3:a1:a4:fb:6f:56:01:73:e7:1f:39:8e:
0d:93:c0:c4:0d:7e:e6:14:51:4b:5d:43:95:e9:bf:
0f:64:5d:2a:92:ca:a4:f3:e1:6c:73:b6:42:5f:9c:
a1:4e:1b:50:65:55:38:83:60:21:e8:4d:44:dc:3e:
37:ba:3a:c2:89:de:e4:60:6a:42:22:8c:e4:c4:fe:
0c:99:3e:65:09:79:70:60:af:a5:11:69:5b:ce:99:
38:b3:2a:ed:ec:a9:70:e2:91:f9:f7:5f:09:90:ff:
6b:0f:7c:99:33:38:d9:47:16:54:db:1a:94:65:b8:
1f:8b:69:62:3d:50:99:e1:9b:04:9f:bb:c6:ad:1b:
e4:49:84:76:61:a0:3e:6f:68:b4:ba:13:4b:0e:57:
0a:20:73:1e:e1:a2:93:8b:eb:7c:28:fb:34:c0:c6:
ec:35:22:c7:56:a5:3e:80:85:2d:bd:48:e6:d4:d3:
27:bc:34:5a:05:0f:da:1a:06:4d:e0:a3:12:7d:fe:
92:de:8f:5d:5e:69:f0:32:17:88:4b:a8:d8:94:1f:
c3:66:a4:91:1b:17:f5:4d:e5:55:e6:97:25:b2:1c:
19:25:f2:47:61:08:1b:09:19:84:af:b8:08:bd:14:
a4:31:8b:35:87:88:8a:51:3e:08:82:46:41:aa:b2:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:C3:A9:B8:44:72:EA:66:71:DB:66:2C:4C:D7:CE:F7:DB:63:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BABE1C44D0711F1A731E2C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:83:f0:5a:75:e5:9c:91:af:4f:89:de:c2:3f:36:5b:45:dd:
41:24:14:f5:98:b6:f9:15:cc:f5:fd:4a:0c:bc:95:d6:48:b0:
05:95:35:38:f5:2a:65:aa:5f:d7:28:ef:d2:81:c9:0c:28:7e:
e8:87:0c:66:b5:0f:d4:3f:54:22:bc:81:b0:63:af:92:9e:4e:
c7:68:c7:81:45:17:ba:54:f9:e9:6d:7d:80:bf:41:5c:41:90:
32:75:ed:e7:d1:9a:80:54:bc:10:4c:bf:63:8b:96:39:ac:30:
a4:3c:15:97:74:b1:15:2f:88:82:f4:86:d8:3e:42:27:ea:52:
71:28:98:e5:1c:2d:87:f1:ad:1d:69:03:b9:28:87:05:26:1a:
bb:0d:9d:e0:26:b5:33:ca:8a:78:bf:34:15:72:23:5a:e7:d9:
c2:c0:6b:79:be:df:1d:3a:9a:4b:4f:17:f5:af:35:b4:11:83:
05:5b:0e:b8:e0:9e:52:dc:b4:83:95:14:dc:78:96:e8:ec:24:
a4:e6:f7:f4:e8:4b:a0:37:ac:d9:61:25:fe:42:ca:1b:69:95:
9e:76:42:29:58:ce:ef:e9:72:25:39:80:e4:5d:32:7d:09:ee:
7a:51:f5:92:ed:59:03:6a:e9:3d:3d:60:f0:e5:74:33:7e:21:
bc:8b:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:32 2026 by rpki-client