Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BAE0478161B11F1960D83E7DAE4EC9C.roa
File: 5BAE0478161B11F1960D83E7DAE4EC9C.roa (raw, json)
Hash identifier: zCBeE8jyRpC+D+qHit11sNVbdoNfVvwFWAtLaI1Fk/E=
Subject key identifier: BC:1E:78:30:A4:46:FC:4D:C9:4A:55:0E:CD:92:A0:30:C2:46:EB:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BAE0478161B11F1960D83E7DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:36:58 +0000
ROA not before: Mon 02 Mar 2026 09:36:54 +0000
ROA not after: Mon 13 Apr 2026 09:36:54 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113895 (0x1bce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:36:54 2026 GMT
Not After : Apr 13 09:36:54 2026 GMT
Subject: CN=69a55a3a-a922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:38:86:76:12:f5:ae:52:4a:85:4d:d2:2b:
72:ac:17:81:06:1e:4e:18:f8:92:86:f1:41:9c:6f:
2b:20:f9:b4:ac:73:b6:a0:14:10:0d:0f:d0:a3:30:
56:fe:62:8c:fb:cb:64:a0:fd:f8:29:0e:af:7f:b7:
95:9e:d5:86:1a:25:22:e5:81:74:26:0d:ef:fe:05:
df:59:d9:14:ab:ad:dc:28:a0:00:06:3d:d2:cf:3f:
ca:d2:8c:fb:ce:ff:60:49:81:97:37:14:b1:6d:58:
49:8a:bd:03:1a:09:84:25:4c:31:b6:fc:fa:07:a1:
b2:3a:1a:86:a0:02:78:c9:57:f0:b7:2f:db:fd:ba:
43:87:70:ec:4a:94:d0:e1:e9:4a:e3:36:b6:6d:08:
49:84:39:b0:6f:8a:3a:a4:8e:1c:05:2a:04:37:60:
e2:73:79:fd:59:c6:98:c4:93:ee:00:93:58:98:ca:
cd:48:61:f5:2d:ab:37:90:1b:00:19:36:9e:c5:35:
81:59:b3:80:e1:59:d7:2b:90:8a:34:33:a3:cc:2c:
cf:d4:09:11:25:68:39:c6:88:6e:c1:1e:ff:af:a5:
68:61:9f:59:1d:6c:32:89:41:89:a7:2c:83:17:9a:
7e:54:0a:b9:35:da:ac:fd:05:d3:22:4e:ef:e2:1b:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:78:30:A4:46:FC:4D:C9:4A:55:0E:CD:92:A0:30:C2:46:EB:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BAE0478161B11F1960D83E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:86:51:4f:39:c0:9d:7b:56:27:7f:67:ac:21:c4:46:83:ed:
cf:11:6a:c2:0b:30:f3:00:3e:6f:ec:de:4c:2f:f4:8f:49:7a:
20:e7:99:68:3f:eb:31:16:41:95:ce:84:25:f0:c6:3e:39:af:
ff:8e:e1:c8:36:5a:9b:73:36:ed:70:61:10:97:3e:36:f0:79:
96:91:44:e6:c6:2f:39:f0:eb:3e:41:f6:27:0c:f0:4a:8b:f8:
89:92:1c:22:a4:a6:4f:cd:c3:f6:66:ba:dc:c2:7d:27:c3:29:
9f:09:00:04:21:a7:fe:ce:c1:f7:c8:98:5f:fa:0e:f2:31:d7:
27:9c:49:57:29:28:f2:90:da:aa:f8:a7:5f:e8:1e:87:5f:95:
bc:b3:0e:ab:00:90:76:f3:3e:88:d5:95:b4:62:f1:d7:84:52:
84:48:49:d9:d7:aa:a9:35:e6:88:16:15:a5:43:6c:9c:3b:a5:
7c:25:7c:b1:44:7a:a6:45:39:5a:73:c1:3f:81:67:70:42:0e:
66:ea:df:c6:0e:1a:b2:46:df:46:2e:dd:f5:31:a4:5d:a5:8b:
ad:6d:10:e0:d8:30:23:69:cc:ad:ae:ec:cd:77:ae:50:59:2a:
b6:04:c1:e1:65:4a:bd:59:b9:78:8c:30:27:df:fd:b2:fc:d5:
3f:2a:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:20 2026 by rpki-client