Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE74A0876B011F19DC974E5CE1D38B0.roa
File: BAE74A0876B011F19DC974E5CE1D38B0.roa (raw, json)
Hash identifier: iTLK9k3kgZH68uWa9Gd599kaYrBvNXZGZG4p9CrrROg=
Subject key identifier: E0:81:D2:64:FD:4E:66:C3:DC:93:E2:4B:21:E0:3E:B7:E7:B4:19:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE74A0876B011F19DC974E5CE1D38B0.roa
Signing time: Fri 03 Jul 2026 07:28:05 +0000
ROA not before: Fri 03 Jul 2026 07:28:00 +0000
ROA not after: Thu 06 Aug 2026 07:28:00 +0000
asID: 140227
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120490 (0x1d6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 07:28:00 2026 GMT
Not After : Aug 6 07:28:00 2026 GMT
Subject: CN=6a476485-6cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:5f:e4:d1:54:8d:13:2c:14:b3:7d:fc:36:
2c:f6:18:75:ee:ba:6b:6f:b7:6e:d8:a3:72:f7:9b:
4f:ee:bf:3c:7e:b0:67:58:f1:24:74:c7:a6:f6:53:
9e:7b:a9:95:c0:c6:79:eb:00:de:a1:56:1e:f4:09:
d8:8b:c3:ec:72:ee:59:d2:24:35:5b:f4:83:1d:1a:
6e:98:3c:49:df:da:1f:fe:68:c0:dd:1a:8a:29:54:
4b:ca:30:d1:78:b3:39:53:9c:e4:cd:e7:03:0d:9b:
45:32:2b:24:66:d0:e4:89:4f:6d:fb:9c:44:11:28:
58:91:70:19:14:db:cb:e2:f4:ad:f0:3e:c0:f5:91:
71:4a:a0:4f:37:dd:9e:56:4f:92:f8:0c:20:2b:15:
74:bf:22:3a:70:67:4c:20:41:db:86:a2:ea:84:a5:
08:29:da:e9:48:97:db:89:c1:db:7e:a4:74:d7:71:
1f:d7:85:d8:8b:70:f2:27:ac:73:28:db:54:a1:52:
6c:21:34:b2:26:8a:b9:0a:a5:ab:77:a7:3b:e3:ee:
e6:53:65:63:a8:d0:94:6e:69:0e:a2:9c:e0:4f:3c:
a4:d3:9d:21:0b:30:2e:87:6b:12:7f:d3:62:a2:0a:
b1:81:9c:ab:ea:78:64:f2:25:d6:43:40:28:5b:cd:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:D2:64:FD:4E:66:C3:DC:93:E2:4B:21:E0:3E:B7:E7:B4:19:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE74A0876B011F19DC974E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/23
154.86.21.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
93:9f:f9:5a:83:e7:bc:04:3d:eb:fc:f8:cd:bf:45:9d:37:3d:
5f:85:0b:27:38:02:96:35:0d:2e:f3:f3:3b:65:0a:ca:0a:2f:
d8:6f:26:7c:56:88:ad:1c:0b:57:4a:2e:21:7f:bf:1f:ff:70:
43:1f:05:9b:6f:b3:51:5a:12:be:a8:f2:ae:fc:5e:fc:4a:0a:
9e:2f:f0:6a:40:09:dc:65:24:41:f6:1b:0e:23:d9:2d:95:7b:
76:be:30:da:a9:36:44:38:f9:7c:7f:3e:ba:93:d5:30:3a:4b:
c4:18:3f:fb:10:b5:1b:16:0c:4f:7c:1d:c6:58:a4:3d:1f:e0:
4c:d8:a7:d1:e4:2f:70:c4:be:d4:94:14:c7:c0:0e:03:50:f8:
65:ea:fb:a3:0e:d3:21:e9:59:db:bc:86:d1:88:ee:cd:3c:ae:
ce:88:9f:39:1f:2f:8d:ac:49:0b:2e:70:c2:ad:05:e7:c9:96:
eb:9a:6f:15:62:56:d7:7d:9c:08:29:12:d0:aa:ae:a3:3a:52:
de:6b:61:17:9d:5c:93:ad:ee:27:46:36:02:5b:63:1b:86:c7:
2d:78:3b:29:e3:ec:4e:54:57:0d:2c:9c:0b:23:eb:cc:9c:6d:
e2:fb:d0:27:84:14:2b:5a:1f:4f:86:d6:8a:ba:d1:71:3e:06:
56:87:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:50 2026 by rpki-client