Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE84FBA4C5E11F19A050BC5CE1D38B0.roa
File: BAE84FBA4C5E11F19A050BC5CE1D38B0.roa (raw, json)
Hash identifier: yIzIHIkt0Nn0c5OvX9D4wmgkVzvSjU1RKaaXzs/ieJA=
Subject key identifier: BA:B3:1B:F0:6F:C0:06:FA:34:8C:BD:08:CE:63:D3:B7:DF:33:DC:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE84FBA4C5E11F19A050BC5CE1D38B0.roa
Signing time: Sun 10 May 2026 10:55:17 +0000
ROA not before: Sun 10 May 2026 10:55:12 +0000
ROA not after: Tue 16 Jun 2026 10:55:12 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.90.0/24 maxlen: 24
154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
154.85.18.0/23 maxlen: 24
154.85.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117433 (0x1cab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 10:55:12 2026 GMT
Not After : Jun 16 10:55:12 2026 GMT
Subject: CN=6a006415-f556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:26:59:f7:52:20:45:59:f1:90:8a:08:c7:
c8:23:ef:50:fd:fe:cb:36:f9:6b:82:c5:96:a3:76:
fc:10:aa:b1:f1:de:40:11:bb:4b:37:ee:05:09:e8:
d5:76:0d:69:a1:5c:5f:55:23:16:67:a6:b6:65:f7:
75:d3:4c:af:a1:f6:3e:3c:f6:e6:58:ea:e7:17:fa:
3b:c4:a8:f6:62:3e:6b:8d:79:7d:0a:66:98:57:8c:
bd:a7:f1:a8:5c:88:d1:76:9b:c8:05:25:35:90:50:
79:ee:11:4f:95:09:dc:55:13:23:e2:c6:54:d6:28:
c8:12:d1:cd:f3:6c:3d:e3:b9:57:58:a1:21:31:29:
7d:cd:05:63:31:a4:e0:fa:27:63:ae:8e:2e:de:6f:
33:39:2b:b6:6d:9b:49:e9:9b:54:b9:fe:b2:9a:2a:
1e:36:0d:5a:13:38:56:90:0a:b2:cb:be:a0:23:ed:
68:a8:8a:7b:70:23:97:48:86:8f:e2:ef:f6:3e:c8:
b1:04:7a:0d:c1:72:94:46:c6:7f:4c:28:35:e9:3b:
19:4a:a8:ce:ce:47:0c:75:14:22:98:ee:cf:e1:b8:
0f:0b:b6:7a:04:95:4e:f6:40:17:e5:08:58:36:73:
69:e7:a6:55:14:9a:97:a8:1a:dd:5d:10:2d:7f:46:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:1B:F0:6F:C0:06:FA:34:8C:BD:08:CE:63:D3:B7:DF:33:DC:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE84FBA4C5E11F19A050BC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0-154.83.98.255
154.85.18.0/23
Signature Algorithm: sha256WithRSAEncryption
af:1c:21:f1:ab:7c:d8:a8:4b:51:71:fd:06:0a:f2:d2:f5:63:
26:e7:f4:6b:a2:3c:a7:99:25:7f:ff:f0:8a:ae:28:13:d3:f5:
0d:a0:90:a1:94:d2:fe:d2:69:ef:39:15:83:9b:4d:e5:fd:ba:
23:61:ed:de:04:36:48:2e:7b:5c:3e:fd:8f:36:6a:dc:dd:3e:
7e:39:cc:d9:a0:0e:d0:70:20:20:42:e8:ba:7b:03:7e:78:c3:
37:63:f7:29:6c:5f:fe:0f:71:2a:82:59:94:71:45:ac:5b:73:
d4:89:fa:93:ca:9d:05:6a:d6:7b:f9:f6:1d:86:0b:27:2f:a4:
94:12:c8:96:7c:7d:0c:a8:98:7d:e4:fa:20:bb:29:2a:7b:15:
14:0c:0d:d5:0b:2b:26:de:92:a0:f4:6f:a4:b1:8e:b8:3c:48:
34:f0:a3:a6:76:67:6e:b2:11:cf:c2:d4:6f:ed:3f:eb:06:dd:
03:bb:12:95:d2:22:c0:14:be:51:be:65:dc:39:0a:80:b0:66:
fd:66:2d:9a:cd:d5:61:3e:4c:50:30:49:78:e5:39:b4:78:ed:
2f:3e:b2:64:ff:ad:88:14:3a:9f:a1:dd:1e:05:df:2c:e1:fd:
1b:8b:04:11:f4:e2:a0:9d:68:23:25:d8:17:d1:38:57:41:50:
83:03:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:48 2026 by rpki-client