Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCD4CB0617BF11F18E38AA80DAE4EC9C.roa
File: BCD4CB0617BF11F18E38AA80DAE4EC9C.roa (raw, json)
Hash identifier: NcObY2vBw+M80nI/NnwNAVhJAaiMl09Dn5+LIygKeyA=
Subject key identifier: 24:EA:4F:F2:7E:FD:80:3A:AD:21:1A:0F:EC:F9:FA:25:1A:A7:12:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCD4CB0617BF11F18E38AA80DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 11:46:10 +0000
ROA not before: Wed 04 Mar 2026 11:46:06 +0000
ROA not after: Thu 09 Apr 2026 11:46:06 +0000
asID: 48678
IP address blocks: 154.196.12.0/24 maxlen: 24
154.196.14.0/24 maxlen: 24
154.196.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114027 (0x1bd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 11:46:06 2026 GMT
Not After : Apr 9 11:46:06 2026 GMT
Subject: CN=69a81b82-911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:d0:0c:45:53:8e:0c:75:ee:50:4c:44:2c:
43:4f:fc:72:54:1b:92:3b:a9:09:4a:7f:c9:65:f5:
31:8c:ff:5c:d7:16:a3:7b:55:f9:2c:28:47:05:b3:
1e:5c:81:08:91:8a:d9:a7:99:3e:07:af:0c:ce:73:
51:09:04:a2:fd:1c:54:33:04:5b:03:44:e6:63:71:
d8:4d:f0:83:be:6a:30:8f:8a:72:2e:2d:41:7a:d3:
47:02:cb:34:c7:ba:36:9d:1c:39:5c:64:18:7d:81:
68:00:d2:4b:fd:70:3c:41:e3:3d:ff:49:28:e9:b8:
db:d1:bd:25:c6:84:be:a5:43:6f:19:40:59:e9:06:
34:20:54:30:44:8b:e3:cf:00:9e:ed:43:19:f1:e5:
79:3c:71:76:7b:2a:ad:e0:bd:2a:75:79:cc:01:c1:
96:39:7d:ce:43:fd:53:d7:4d:d6:67:33:3c:e2:f5:
d2:be:b6:3b:6e:e0:51:24:5c:88:ae:9c:d6:51:3d:
6e:1d:3b:32:26:bc:ff:7e:77:38:2e:07:8c:e4:d7:
af:68:2d:01:be:e7:ad:72:70:37:24:26:57:ee:36:
63:ed:c9:e1:0a:33:16:79:2f:6b:19:76:15:6e:e9:
25:99:7e:40:2f:9c:b3:16:90:54:a3:b1:2d:b6:c5:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:4F:F2:7E:FD:80:3A:AD:21:1A:0F:EC:F9:FA:25:1A:A7:12:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCD4CB0617BF11F18E38AA80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.12.0/24
154.196.14.0/24
154.196.92.0/24
Signature Algorithm: sha256WithRSAEncryption
38:59:d6:8c:8a:a9:41:54:58:7c:52:b2:59:56:82:fa:88:1c:
0d:30:04:57:49:47:c4:f9:5f:fc:f2:2c:f6:97:ae:af:e9:5a:
91:77:59:13:e7:9e:c5:23:d6:6f:8d:18:e0:ef:eb:87:31:f4:
7d:51:bb:78:cb:db:61:93:54:e6:20:7e:1a:a8:48:b1:63:e0:
c4:e4:89:c0:23:5a:4d:0c:78:88:ce:cb:39:2a:6d:44:cd:10:
d2:68:3e:c7:b6:a4:a0:6c:fc:1c:db:8d:02:b6:0a:af:35:99:
3d:73:81:22:d4:37:ea:0e:7e:e5:6f:43:ae:34:b7:5c:57:20:
b2:0c:f8:c1:02:4f:d3:cb:aa:93:f6:2f:03:ee:4b:71:10:5f:
e5:6b:26:55:ed:85:e4:35:a6:04:e9:3f:fc:4d:77:1f:58:0e:
a4:cc:88:ca:15:74:89:aa:7d:46:9f:3e:c4:80:fe:a6:46:d5:
ab:eb:bc:7e:6e:49:2d:90:31:3f:b7:df:23:0a:72:39:40:e8:
43:d1:6e:42:31:96:a3:a6:0d:66:78:2c:99:e3:bb:e8:e1:8b:
fc:7a:14:5d:31:32:3f:5a:19:01:40:0a:05:84:72:7f:80:fa:
84:e8:94:7c:03:90:10:42:88:73:1a:69:50:38:a3:a4:be:a5:
0c:1c:8a:dd
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAb1rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA0MTE0NjA2WhcNMjYwNDA5MTE0NjA2WjAYMRYw
FAYDVQQDEw02OWE4MWI4Mi05MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsPnQDEVTjgx17lBMRCxDT/xyVBuSO6kJSn/JZfUxjP9c1xaje1X5LChH
BbMeXIEIkYrZp5k+B68MznNRCQSi/RxUMwRbA0TmY3HYTfCDvmowj4pyLi1BetNH
Ass0x7o2nRw5XGQYfYFoANJL/XA8QeM9/0ko6bjb0b0lxoS+pUNvGUBZ6QY0IFQw
RIvjzwCe7UMZ8eV5PHF2eyqt4L0qdXnMAcGWOX3OQ/1T103WZzM84vXSvrY7buBR
JFyIrpzWUT1uHTsyJrz/fnc4LgeM5NevaC0BvuetcnA3JCZX7jZj7cnhCjMWeS9r
GXYVbuklmX5AL5yzFpBUo7EttsV7iQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFCTq
T/J+/YA6rSEaD+z5+iUapxLSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQ0Q0Q0IwNjE3QkYxMUYxOEUzOEFBODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmsQMAwQAmsQOAwQAmsRc
MA0GCSqGSIb3DQEBCwUAA4IBAQA4WdaMiqlBVFh8UrJZVoL6iBwNMARXSUfE+V/8
8iz2l66v6VqRd1kT557FI9ZvjRjg7+uHMfR9Ubt4y9thk1TmIH4aqEixY+DE5InA
I1pNDHiIzss5Km1EzRDSaD7HtqSgbPwc240CtgqvNZk9c4Ei1DfqDn7lb0OuNLdc
VyCyDPjBAk/Ty6qT9i8D7ktxEF/layZV7YXkNaYE6T/8TXcfWA6kzIjKFXSJqn1G
nz7EgP6mRtWr67x+bkktkDE/t98jCnI5QOhD0W5CMZajpg1meCyZ47vo4Yv8ehRd
MTI/WhkBQAoFhHJ/gPqE6JR8A5AQQohzGmlQOKOkvqUMHIrd
-----END CERTIFICATE-----
Generated at Thu Mar 5 20:25:35 2026 by rpki-client