Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAF9DA2135111F1801E97BDDAE4EC9C.roa
File: 8BAF9DA2135111F1801E97BDDAE4EC9C.roa (raw, json)
Hash identifier: u+MMNghNVLMjGyj/YdnOnBbxMXuvhhZe2dpJxPFwS+s=
Subject key identifier: BA:F9:CA:E6:76:43:D4:E6:F7:54:84:13:72:A7:D7:79:00:D5:9F:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAF9DA2135111F1801E97BDDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 20:27:18 +0000
ROA not before: Thu 26 Feb 2026 20:27:14 +0000
ROA not after: Thu 09 Apr 2026 20:27:14 +0000
asID: 401783
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.181.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113693 (0x1bc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 20:27:14 2026 GMT
Not After : Apr 9 20:27:14 2026 GMT
Subject: CN=69a0aca6-c6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:b8:76:d2:18:e3:a1:5c:74:1d:1f:09:04:
e6:bf:b6:95:cb:6f:c4:a6:5e:1c:ac:04:86:f0:9c:
f1:af:05:c2:58:1f:a1:fb:f6:f8:8f:21:27:25:fd:
4a:d9:8e:53:bb:f4:3e:00:c0:97:56:b3:17:cc:b1:
2a:d2:e4:78:33:1f:76:73:8a:ee:7b:9f:ae:be:fc:
10:94:1e:34:cb:24:e0:21:36:02:3f:8e:2b:97:24:
65:5f:d8:e2:fa:ed:e8:db:4d:b9:d1:7c:68:41:75:
ee:71:1e:17:de:14:6c:02:4a:f5:fa:d3:b7:83:be:
96:0a:b7:28:76:47:e8:1e:01:ae:d4:bf:a6:3c:bc:
48:d0:a8:fb:f0:4d:9a:db:be:4b:a8:b1:88:3f:b5:
de:a0:92:13:22:e6:b3:4a:be:2c:c3:b6:10:78:3f:
1f:f2:26:72:60:12:53:2c:57:ab:a8:59:b4:eb:38:
eb:9b:d1:6a:fa:5d:5d:d6:e4:24:08:f8:d0:ca:d1:
49:35:80:50:73:42:7f:70:ae:81:ee:dc:54:57:c3:
04:94:de:99:3f:61:0c:0c:63:e2:5e:45:66:89:2f:
58:5f:02:89:7c:b0:1b:86:62:3c:c9:f6:74:33:4a:
ea:40:f3:6b:8f:7a:35:bd:88:46:c9:90:6a:e1:e8:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:CA:E6:76:43:D4:E6:F7:54:84:13:72:A7:D7:79:00:D5:9F:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAF9DA2135111F1801E97BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.181.0/24
154.83.10.0/24
154.83.24.0/24
154.89.132.0/24
154.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e8:2f:24:d4:6e:a0:a3:cd:ed:00:94:f3:20:87:a2:c6:c7:
4d:b0:24:20:01:7b:03:38:7f:1a:da:29:a8:b7:f0:15:06:5f:
3c:44:94:95:f0:a4:04:38:d9:f1:3c:ec:4a:ba:75:e1:15:41:
4d:e1:eb:a4:53:f8:bc:18:e3:79:68:79:d6:f3:f0:32:7a:b0:
03:b8:ad:3e:5e:c1:40:c0:5b:60:3a:e9:21:a9:da:bc:d9:2c:
4c:3a:1e:fd:d6:bd:49:9d:89:30:01:98:75:67:d1:3c:4b:8c:
ee:9b:92:5a:c0:7e:4b:39:b1:60:d2:7f:8f:2c:34:50:12:4b:
b0:db:75:e1:53:50:e8:88:0d:2b:2e:9f:ec:1b:02:8d:21:6f:
8b:5f:19:f0:06:ea:23:ba:91:70:ed:03:4c:c2:6b:67:79:57:
dd:b4:5e:63:23:31:ab:3e:c8:d5:5e:5e:32:54:c5:35:b7:f2:
38:90:97:6f:0f:c7:e1:b4:71:93:2d:28:d9:f0:0e:55:01:ab:
86:40:6d:ca:6f:45:55:cb:c1:e1:cd:ee:1f:51:1b:67:34:11:
4a:c3:c8:58:30:c5:71:0c:71:7c:6a:a8:f5:84:4e:3b:67:da:
6c:a5:c8:19:22:76:bd:64:0c:45:e7:6f:ce:2e:a4:a2:56:15:
46:03:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:37 2026 by rpki-client