Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFB6DFE8278811F194F1E5CADAE4EC9C.roa
File: BFB6DFE8278811F194F1E5CADAE4EC9C.roa (raw, json)
Hash identifier: lQMUSNTEkw/XO35AtHUoHKQ/g5rttbJGUoCZeAV7Vx0=
Subject key identifier: B4:DA:1C:51:C3:CA:9F:7C:46:35:47:BF:6E:B7:CF:FD:E9:C3:61:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C09B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFB6DFE8278811F194F1E5CADAE4EC9C.roa
Signing time: Tue 24 Mar 2026 13:52:51 +0000
ROA not before: Tue 24 Mar 2026 13:52:47 +0000
ROA not after: Fri 01 May 2026 13:52:47 +0000
asID: 20326
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114843 (0x1c09b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 13:52:47 2026 GMT
Not After : May 1 13:52:47 2026 GMT
Subject: CN=69c29733-4dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:fc:19:53:8d:28:f8:42:ad:c2:dc:91:9f:
c7:ab:d2:34:e1:84:6c:43:3a:ab:3a:bf:50:a9:f5:
51:5e:f6:44:10:5c:03:d4:4c:dd:b9:4b:ce:c6:6f:
3f:89:ba:10:6a:cc:79:0f:8c:6c:5e:d6:64:51:2e:
76:d8:6d:0d:98:74:b2:32:5c:a9:b1:86:4e:89:e9:
f6:9b:0b:95:53:0c:c0:04:19:a8:7b:11:ba:77:4d:
23:db:15:cf:49:13:36:78:4a:09:37:51:f1:59:d6:
96:e0:31:f8:76:8e:29:dc:8b:76:54:ee:0d:9f:b7:
a0:d5:42:58:c2:21:6b:e8:5d:77:ae:46:7d:52:c7:
48:f5:b9:ea:62:29:51:e1:c9:3c:c8:e4:ef:0f:a0:
6e:14:d1:af:39:75:b9:bb:bb:73:37:97:cb:c4:d8:
e3:50:3f:09:69:e4:3d:7c:7e:5d:95:7e:14:de:7e:
43:c6:3b:fa:ef:70:e3:92:ae:14:e1:2a:4e:2b:45:
d4:93:dc:3c:da:90:ec:46:70:24:65:ec:a4:80:18:
a1:8e:91:43:14:cc:3e:f7:81:19:bc:bc:79:62:04:
b6:93:88:e7:cf:bb:8f:b5:1c:f4:d9:c1:e2:18:8d:
3c:a4:52:0f:f9:e7:e8:1b:90:9c:cd:6d:c8:b2:64:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:1C:51:C3:CA:9F:7C:46:35:47:BF:6E:B7:CF:FD:E9:C3:61:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFB6DFE8278811F194F1E5CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5c:e7:64:41:a7:89:d5:6d:66:7e:30:20:f8:84:73:8f:55:
c7:94:ab:23:5b:54:27:dc:24:1d:72:e4:bb:4a:71:2b:f6:6f:
e5:02:90:b4:00:f2:3b:b0:db:a2:55:3d:98:bb:2b:cb:7c:ef:
c0:97:b1:b6:62:cf:1c:52:b5:49:c1:20:c3:a9:e9:bd:9d:a4:
19:a1:19:71:b0:55:d6:e6:3e:1e:45:6d:bd:5f:64:b6:e9:09:
1b:00:22:5e:94:d6:b3:9e:a6:04:3a:68:9c:23:00:10:4b:0d:
2d:8f:26:a6:27:f1:38:58:e7:e3:9a:78:cd:d5:c0:e2:cc:c5:
41:df:70:65:f6:eb:76:22:90:92:17:08:09:ba:ba:6e:e3:35:
8a:b8:14:8b:58:65:df:4a:8a:1e:92:69:3e:99:d3:6d:72:ed:
50:61:6e:65:1e:ae:73:18:55:87:98:77:7d:24:a4:e8:df:9a:
75:d2:7a:5d:ad:38:5e:f0:57:7d:9b:db:4e:45:9b:95:58:48:
d9:44:ed:56:18:a9:8b:b7:cc:8d:8a:fc:94:b0:8b:70:ae:55:
4d:44:5b:6c:85:49:c5:69:c6:2a:8f:77:09:6d:ae:45:4c:09:
e7:92:f0:f8:9e:78:9c:f4:01:9c:ba:f6:4f:1b:19:f3:3e:f2:
a6:b0:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:45 2026 by rpki-client