Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE3D3881D1811F18743EFF0DAE4EC9C.roa
File: BAE3D3881D1811F18743EFF0DAE4EC9C.roa (raw, json)
Hash identifier: bV9TilsjWbFmLVhELSS2MVxmiQD5HrsWnBSlh6mw7a4=
Subject key identifier: AF:46:3A:38:E7:BF:CB:F7:70:E0:B8:35:D5:52:9D:2A:5A:3B:6A:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE3D3881D1811F18743EFF0DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 07:05:48 +0000
ROA not before: Wed 11 Mar 2026 07:05:43 +0000
ROA not after: Thu 09 Apr 2026 07:05:43 +0000
asID: 135377
IP address blocks: 154.82.22.0/24 maxlen: 24
154.82.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114397 (0x1bedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 11 07:05:43 2026 GMT
Not After : Apr 9 07:05:43 2026 GMT
Subject: CN=69b1144c-4860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:3e:39:43:cc:7d:5f:97:cb:74:f6:3a:bb:
2c:68:09:3c:17:63:e7:7d:eb:12:74:6a:aa:04:4a:
d8:5b:29:40:21:3a:b4:e9:02:9c:77:d4:ad:c4:75:
a8:0f:d1:18:6a:be:da:6b:e2:83:fc:91:d7:ba:92:
48:4a:1e:3b:54:33:e7:5e:90:63:80:c6:cd:d4:94:
18:5b:08:4c:fa:8d:d3:22:0f:3d:58:0a:20:6c:b4:
0d:7b:52:c0:5a:8b:da:f4:28:18:ea:78:1e:b3:e3:
38:9d:1f:e2:2e:63:9f:d8:f9:0c:66:2d:92:63:c4:
d4:62:2d:6c:f8:c5:99:d5:b5:20:d2:19:b2:3c:7d:
da:54:03:b2:9a:0a:94:46:1e:a0:e1:48:91:40:fb:
67:b3:77:ab:c7:21:cf:2c:5c:fb:fc:73:5f:65:4c:
e9:8a:52:13:99:5e:97:8d:9f:76:72:a6:50:65:68:
7b:f3:b3:c1:19:a6:1c:83:f2:78:12:a8:46:60:bc:
b0:32:0c:8b:7e:7b:d6:af:7c:eb:a2:43:11:f0:c8:
a3:fa:06:dd:39:c8:45:9d:d4:bc:bd:81:32:da:a8:
ec:8d:d6:5d:70:33:13:5e:21:59:c9:ef:ac:ab:ff:
6e:04:28:c1:28:68:66:51:17:5a:7d:42:5e:7b:5b:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:46:3A:38:E7:BF:CB:F7:70:E0:B8:35:D5:52:9D:2A:5A:3B:6A:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAE3D3881D1811F18743EFF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:76:f2:c1:75:10:69:72:62:f0:7a:c7:1e:09:fe:a0:d3:0d:
88:b3:3d:e0:28:c4:07:22:56:91:a9:7e:10:63:ae:6e:f7:e5:
d6:d9:ad:1d:2f:41:44:71:20:57:de:37:cf:49:7d:f9:b6:87:
7c:7f:08:61:fc:77:25:c1:0c:ef:7e:3f:0b:c2:a5:83:85:2c:
4d:f3:c8:d1:1e:3c:7e:2a:2e:e5:99:d9:69:85:f5:9d:c3:31:
aa:63:fb:60:8b:3c:2e:ea:c0:e7:0b:0c:1a:0d:e9:8f:36:c5:
1c:08:05:d4:91:50:d2:8b:42:41:f4:c8:3d:eb:10:9a:29:e6:
10:8b:3e:43:c5:a0:28:98:55:27:0f:ef:c1:28:c7:3d:9a:cc:
85:99:81:df:4d:14:8a:c1:58:a3:2c:c2:c1:ae:19:93:66:04:
9a:0d:d2:1d:4c:e2:7c:57:d4:e2:23:82:d5:e9:f2:52:a4:92:
20:80:6d:9e:60:84:a1:a9:c4:08:b7:6e:85:55:09:af:32:a6:
f1:dd:87:b6:a8:e3:ea:cb:d3:c7:f2:af:ea:0f:b2:19:b8:58:
10:69:bb:50:e8:6a:42:81:d0:6f:fe:a9:77:56:af:f5:ee:89:
cf:9d:bb:72:84:b0:d1:a0:ba:b6:f7:00:bc:d0:25:92:1b:70:
b7:9d:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:45 2026 by rpki-client