Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAF85360834A11F1B5E50307CF1D38B0.roa
File: BAF85360834A11F1B5E50307CF1D38B0.roa (raw, json)
Hash identifier: eOdpnIxtUNHaqUjaxOH3cN1/06ku+TvdWsA3n2gLA4o=
Subject key identifier: 22:D1:26:A4:8A:26:C6:51:76:6E:D2:47:AA:92:87:FA:60:83:F9:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D99D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAF85360834A11F1B5E50307CF1D38B0.roa
Signing time: Sun 19 Jul 2026 08:20:42 +0000
ROA not before: Sun 19 Jul 2026 08:20:38 +0000
ROA not after: Wed 19 Aug 2026 08:20:38 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121245 (0x1d99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 08:20:38 2026 GMT
Not After : Aug 19 08:20:38 2026 GMT
Subject: CN=6a5c88d9-6cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:39:8c:70:61:2c:79:89:91:3f:a2:43:a1:
91:c0:ed:bf:cb:84:aa:f0:e1:3d:dc:76:bb:65:7e:
dd:96:9f:3e:cc:70:6b:a5:c3:6b:b6:e7:b4:c7:bd:
19:ef:cb:85:86:68:f9:6b:8e:ab:01:89:7f:d3:7a:
5e:ad:2a:55:4e:7c:44:2e:92:4c:25:e9:9e:44:d4:
14:de:43:6d:03:75:56:89:11:b9:37:72:2e:92:bd:
51:da:44:eb:a1:e6:41:1d:ad:e2:23:d6:87:0e:a6:
b6:a7:6c:11:64:7a:70:bc:1a:59:d4:62:62:91:5c:
66:5f:e1:a1:1d:7d:84:e2:0c:a3:bd:82:28:a0:91:
6f:e7:28:b7:e7:bb:4a:5b:5a:12:de:c1:83:9e:8c:
26:bd:a6:ec:24:c9:3e:91:98:6e:6a:13:d1:6b:7e:
91:2d:62:ff:0e:6d:74:81:bb:08:ea:ed:bf:cb:d1:
f0:27:ab:4c:cd:eb:65:bd:91:81:54:cc:74:66:9b:
67:08:b2:c9:0e:67:89:16:5a:b0:c4:e9:41:c7:8d:
3f:4b:9e:58:70:ae:d2:96:c8:1d:a6:7e:75:3a:90:
2c:57:45:10:f4:a3:33:16:59:35:df:a6:56:12:bf:
cd:ab:46:2b:50:93:1b:8e:54:b8:e2:89:51:ec:51:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:26:A4:8A:26:C6:51:76:6E:D2:47:AA:92:87:FA:60:83:F9:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAF85360834A11F1B5E50307CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:35:cc:d0:8a:81:c2:df:50:d6:0b:73:59:2c:c0:f0:0b:f5:
26:73:f6:b8:55:bb:b4:8b:75:f8:6c:41:cb:1e:b6:63:a6:f2:
37:a0:05:94:6d:55:06:7c:46:99:0d:4a:b2:85:96:bb:7a:d4:
91:32:48:88:e6:57:cf:9a:6b:41:5e:3f:3e:d7:3f:23:16:e9:
b6:ab:86:1c:35:e4:01:87:58:e5:95:10:94:04:34:9f:83:24:
1f:5f:30:95:72:9d:94:df:50:f9:f7:e2:58:e8:35:15:dc:15:
43:6b:2c:09:83:c4:8c:75:94:eb:5a:b1:64:53:92:2e:60:4b:
c5:31:5e:50:35:83:40:f6:20:39:96:85:ed:ee:a5:ee:38:3a:
40:b2:e4:f2:38:fd:29:01:a7:04:61:8b:73:b0:07:af:6d:49:
c1:bb:a8:8a:e9:48:5d:a2:2b:c3:e9:d7:c4:51:39:a3:7b:60:
56:9b:05:eb:1d:15:e7:1a:8f:f1:f6:c2:6c:42:aa:b3:c0:ca:
9d:7b:73:2d:18:78:18:73:d3:8a:c8:0d:a1:54:0b:31:3b:af:
36:e2:05:36:94:ec:96:d7:35:e5:1b:cc:01:e7:67:65:ed:2e:
d9:c3:1f:4a:10:e2:26:43:1b:3d:6e:82:60:7f:31:33:df:13:
26:1c:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:52 2026 by rpki-client