Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD5070038D211F18C5BABFCCE1D38B0.roa
File: BBD5070038D211F18C5BABFCCE1D38B0.roa (raw, json)
Hash identifier: kA4J09aQ/8cuU05TvOs9NDgmqsRWSCBjAxO69CE1QZo=
Subject key identifier: 47:CA:6F:B3:77:13:60:73:56:14:FF:82:ED:33:EC:CE:CC:06:45:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C56E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD5070038D211F18C5BABFCCE1D38B0.roa
Signing time: Wed 15 Apr 2026 13:55:17 +0000
ROA not before: Wed 15 Apr 2026 13:55:13 +0000
ROA not after: Thu 30 Apr 2026 13:55:13 +0000
asID: 9304
IP address blocks: 154.211.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116078 (0x1c56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 13:55:13 2026 GMT
Not After : Apr 30 13:55:13 2026 GMT
Subject: CN=69df98c5-33a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:73:10:ef:b2:1a:dd:c3:ff:b3:00:8f:32:
4b:78:7f:cb:d9:c2:fb:40:13:b5:d4:38:6a:c5:31:
db:e5:bd:24:08:44:a0:3c:8c:31:b6:9a:56:14:6b:
05:3b:2f:41:4f:31:7a:c7:83:b2:c9:2d:58:92:04:
b7:83:16:7d:e1:45:77:4a:2c:9e:a8:25:53:75:dd:
d9:44:c5:2d:28:95:81:3d:87:d1:d4:38:ec:4f:6e:
45:02:e1:0a:44:05:b9:62:e0:29:a7:2f:f9:e5:7d:
0c:a5:1d:1b:f8:63:78:62:2e:de:a2:99:98:44:59:
7f:af:48:3b:71:d5:03:e3:c9:bc:17:16:6f:5f:26:
93:8c:d3:b7:ea:85:2d:94:95:0d:9e:ff:8c:7f:81:
d1:7d:13:40:f5:4e:14:a2:28:6a:c7:97:d4:6c:42:
f7:45:65:f2:a7:0a:e9:49:02:e3:d3:56:cb:af:fd:
1d:0a:ea:1a:c6:b1:65:ca:5b:bf:08:66:32:78:a9:
9c:62:d2:7f:bc:ae:c7:28:88:2c:a0:d7:38:c8:9c:
e4:0b:4b:53:00:5f:fb:84:e4:d9:00:02:fe:df:92:
b6:c9:b7:38:c7:d5:10:f4:05:21:f3:01:74:3f:f3:
70:11:c5:68:a0:49:ea:a7:46:4a:e2:dd:8e:cb:ea:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CA:6F:B3:77:13:60:73:56:14:FF:82:ED:33:EC:CE:CC:06:45:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD5070038D211F18C5BABFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.24.0/21
Signature Algorithm: sha256WithRSAEncryption
99:f3:39:df:a8:7a:09:4f:42:f2:66:55:54:d4:33:b2:fe:95:
ef:d8:99:45:48:b6:ea:ae:2e:b0:38:4c:61:9d:0b:b8:ba:39:
5f:a6:95:a6:79:0b:a2:74:e2:62:3a:c2:58:52:b6:c6:0a:83:
5d:09:74:43:30:29:85:a2:be:31:26:5f:9e:ae:6b:ff:c3:b1:
c5:1e:c2:c5:f0:36:7c:db:de:1f:0e:81:54:6b:b2:8d:86:b2:
27:1a:ea:31:3e:cf:be:36:7d:ce:d7:75:b3:01:b9:de:28:77:
be:40:08:b4:66:84:73:29:13:71:7c:78:06:a7:28:d9:f1:22:
73:c1:dc:95:a2:63:42:66:a0:bf:9e:a5:42:13:c7:99:ba:f8:
c0:1f:a3:01:77:6a:8b:8c:b9:50:e4:b7:d3:a7:67:6d:c8:60:
a9:10:14:3f:b5:86:6b:f1:28:21:c0:c1:9a:4c:23:68:1b:2e:
f7:30:e8:a9:f4:df:42:d5:1c:cb:1f:71:0b:df:68:29:f1:73:
df:bf:14:29:4e:56:2b:6f:13:e2:fc:6b:c2:87:c9:96:4e:d2:
e7:21:fa:48:a7:5b:fd:47:67:73:2f:51:19:52:cf:5a:58:9e:
3a:e4:18:31:ff:e4:49:27:86:7a:1b:da:d6:9c:2c:d8:aa:1b:
b9:38:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:20 2026 by rpki-client