Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA98A1303E1D11F188FD6CF6CE1D38B0.roa
File: BA98A1303E1D11F188FD6CF6CE1D38B0.roa (raw, json)
Hash identifier: 6xdtXHeVsSwARXqGffagbZpIYaWUKVUavSCZUgtBOik=
Subject key identifier: 76:B4:DD:4B:C4:04:D6:CD:BF:79:88:14:AA:22:70:6C:19:E0:EA:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C663
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA98A1303E1D11F188FD6CF6CE1D38B0.roa
Signing time: Wed 22 Apr 2026 07:34:43 +0000
ROA not before: Wed 22 Apr 2026 07:34:39 +0000
ROA not after: Sun 24 May 2026 07:34:39 +0000
asID: 17497
IP address blocks: 154.81.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 28 Apr 2026 00:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116323 (0x1c663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 07:34:39 2026 GMT
Not After : May 24 07:34:39 2026 GMT
Subject: CN=69e87a13-e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:a4:9d:bb:08:2c:bc:cd:15:c7:91:06:80:
39:32:64:44:65:89:97:e2:f3:61:f5:6d:0f:e4:60:
e2:38:09:7a:90:89:cf:0e:00:5f:d3:d1:9d:d4:43:
47:44:2b:de:ec:d6:e7:98:95:be:76:8e:19:49:f0:
5a:78:00:91:b1:34:d2:05:1b:c5:03:0e:30:bc:1b:
7a:0b:47:e9:4b:cc:83:7f:42:b7:d0:a0:1a:cd:f5:
93:dd:a5:27:f0:64:4f:4c:3a:9d:9c:36:a6:aa:4d:
d0:e4:8a:14:04:94:df:a4:34:f2:8e:ad:a2:bc:1e:
4e:1a:21:19:2e:60:ba:0c:cf:26:cd:4f:38:f5:56:
b4:9e:24:3f:b9:00:a9:b6:30:87:92:5e:72:96:4f:
a6:a4:cb:28:19:5d:5f:5c:25:ac:22:f1:92:86:48:
d8:f7:aa:80:94:e5:87:bf:f2:77:a9:10:42:ec:e9:
74:fc:a6:67:16:42:d8:f7:d4:3c:24:e1:7e:e9:f9:
73:aa:dd:92:03:02:aa:65:e5:f8:6f:40:61:06:8b:
bd:e5:87:75:88:42:f0:2e:27:02:bc:9a:96:2b:d1:
5e:da:8d:88:fa:69:fa:41:e8:9d:b7:aa:64:72:cf:
fc:6b:5a:9b:68:be:f4:72:fe:4b:e2:65:09:1b:00:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B4:DD:4B:C4:04:D6:CD:BF:79:88:14:AA:22:70:6C:19:E0:EA:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA98A1303E1D11F188FD6CF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.159.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9d:85:40:a1:a4:0a:01:76:b8:eb:a5:1a:85:ac:74:be:cc:
5d:0b:65:44:c6:e0:8a:d3:7f:ed:c6:ef:44:42:e9:5c:98:57:
a7:d1:7d:7c:5e:f9:eb:f8:ad:d2:e0:8c:8b:e1:33:7b:d9:a9:
1c:a6:0a:8e:ea:0c:68:b6:cc:95:94:29:00:9b:ec:b3:f7:65:
d4:b0:2f:36:11:3c:56:cb:fc:31:08:01:b9:f4:cc:9f:51:af:
92:b4:dc:41:6c:58:89:60:65:c2:7f:fc:5e:3d:e8:2b:82:a0:
92:5d:2d:f6:10:c8:38:ce:29:10:32:70:e0:5e:f1:c7:65:01:
65:7a:25:ab:44:2a:aa:9e:03:98:f3:9d:8a:4e:79:41:7e:e0:
42:d0:9e:34:72:70:ae:de:3f:1c:b2:2d:b6:7c:11:71:a1:aa:
14:bd:27:8e:f0:68:90:ef:bc:8d:d8:05:5a:2b:cd:0e:df:b6:
84:e1:4a:0a:12:69:1e:a3:e8:76:ad:13:82:c5:a7:29:29:73:
69:cc:9e:e4:ef:8f:bd:86:67:5f:52:5c:eb:93:f8:49:9f:88:
79:6b:d7:94:a1:25:69:a6:f4:42:bd:90:de:d6:a6:92:d9:f0:
ea:73:22:5b:33:3f:bf:9d:21:62:af:85:72:44:dd:12:9d:09:
09:fb:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 21:16:41 2026 by rpki-client