Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA1D67CE1B8411F1AF12A9B5DAE4EC9C.roa
File: BA1D67CE1B8411F1AF12A9B5DAE4EC9C.roa (raw, json)
Hash identifier: k49GEfH/U02GdOMygPUSve7F11g8d3wf067PF2PbXuc=
Subject key identifier: 7E:6F:08:2E:CE:F0:11:6E:8D:2F:25:F3:48:03:B6:56:62:D5:54:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA1D67CE1B8411F1AF12A9B5DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 06:53:50 +0000
ROA not before: Mon 09 Mar 2026 06:53:46 +0000
ROA not after: Thu 16 Apr 2026 06:53:46 +0000
asID: 17497
IP address blocks: 154.193.8.0/21 maxlen: 24
154.193.8.0/24 maxlen: 24
154.193.9.0/24 maxlen: 24
154.193.10.0/24 maxlen: 24
154.193.11.0/24 maxlen: 24
154.193.12.0/24 maxlen: 24
154.193.13.0/24 maxlen: 24
154.193.14.0/24 maxlen: 24
154.193.15.0/24 maxlen: 24
154.196.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114276 (0x1be64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 06:53:46 2026 GMT
Not After : Apr 16 06:53:46 2026 GMT
Subject: CN=69ae6e7e-0b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:a5:9d:c2:5f:a0:97:70:0a:51:e7:bf:61:
4b:40:a7:e7:e8:4f:f4:be:36:eb:c4:27:cc:f0:17:
a1:8b:5d:28:a6:c7:55:50:88:ef:8e:09:7e:13:1f:
78:12:7b:c9:36:a6:76:6f:35:3b:61:cf:1a:3c:f6:
1a:8f:7d:42:88:0f:d0:64:c5:1f:c5:a4:5e:65:39:
61:ad:a3:8b:36:b5:12:46:c4:d8:e6:e4:0e:d4:83:
a5:0b:8a:37:b8:cc:97:26:48:d8:13:09:e6:bb:66:
07:db:c3:18:88:19:be:24:27:5c:06:a8:0d:f7:19:
b8:e1:aa:58:85:4b:db:2e:f2:96:c9:43:07:1c:ff:
d4:ee:a1:58:87:3d:8f:fa:dd:54:2f:e2:71:b1:40:
9f:f3:d9:09:0d:0e:f8:42:5e:63:6c:ec:6d:f4:7e:
c1:8a:24:f5:ec:f6:c8:be:fa:cc:b3:69:cc:97:1c:
a8:e4:50:2f:f7:8c:a6:3a:7e:77:32:c8:0f:a0:ba:
a5:3b:a1:83:fc:49:d4:2f:a4:51:22:f5:9f:c6:41:
7d:41:8e:94:62:17:52:29:e9:24:24:fe:53:6b:78:
82:b8:5e:cb:76:ea:40:59:5e:93:32:c2:dc:2b:ba:
f7:a7:d8:a3:d5:f3:4d:73:36:fe:85:ae:9d:12:a4:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6F:08:2E:CE:F0:11:6E:8D:2F:25:F3:48:03:B6:56:62:D5:54:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA1D67CE1B8411F1AF12A9B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.8.0/21
154.196.135.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:8e:9c:87:98:73:22:61:1f:b9:cc:8f:3f:5b:b0:18:2f:ff:
de:73:0a:99:1a:bd:9a:bf:54:18:4a:54:c4:7e:bd:59:fc:06:
21:cc:f4:f7:d1:fa:0e:fa:ee:fa:03:6f:96:fa:60:a1:1b:c4:
16:63:58:39:9f:59:99:4a:0a:6b:52:3a:a3:87:c2:1e:e9:7a:
c6:51:cc:c3:3f:5c:f2:04:06:82:5e:64:8e:aa:76:7d:43:be:
96:8e:7d:00:a6:bc:ab:d6:e0:30:0d:91:9d:69:f4:62:9f:8e:
00:0b:67:93:4e:42:e9:71:20:da:02:cc:57:98:68:12:66:da:
01:ec:af:06:e5:7c:e3:83:98:c6:d1:39:dd:02:5a:33:66:09:
9b:a9:6b:89:d4:f1:25:97:7c:72:ce:73:8b:8c:2d:07:5a:22:
24:47:35:70:ed:cc:35:f3:cc:77:f3:71:81:9b:ce:38:93:ce:
1c:08:cc:13:1a:98:cd:91:ad:9f:fc:f3:0a:7f:a5:94:c6:13:
70:a2:7c:f2:e2:c1:23:94:53:75:18:50:3c:b0:d0:2c:c9:5a:
f1:1f:2f:28:0d:44:4f:d9:2c:72:13:d5:f8:e2:a7:0a:87:e2:
38:9e:2b:77:f7:4f:7c:94:b8:7a:62:51:11:89:6b:26:e4:ef:
85:05:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:27:53 2026 by rpki-client