Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCDC831A2B5511F1A49F26B9DAE4EC9C.roa
File: BCDC831A2B5511F1A49F26B9DAE4EC9C.roa (raw, json)
Hash identifier: 1TzrajCZ2sB9eJ8jtPGTD4FNpo+LI6qzPeM10Xt6YqA=
Subject key identifier: DD:93:D8:2D:BD:BE:90:0A:85:39:66:C9:E8:F0:83:CA:FB:D1:5E:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCDC831A2B5511F1A49F26B9DAE4EC9C.roa
Signing time: Sun 29 Mar 2026 09:57:47 +0000
ROA not before: Sun 29 Mar 2026 09:57:42 +0000
ROA not after: Thu 29 Mar 2029 09:57:42 +0000
asID: 17561
IP address blocks: 154.197.65.0/24 maxlen: 24
154.206.242.0/24 maxlen: 24
154.206.245.0/24 maxlen: 24
154.206.246.0/24 maxlen: 24
154.206.247.0/24 maxlen: 24
154.206.248.0/24 maxlen: 24
154.206.253.0/24 maxlen: 24
154.208.64.0/24 maxlen: 24
154.208.65.0/24 maxlen: 24
154.208.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115104 (0x1c1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 09:57:42 2026 GMT
Not After : Mar 29 09:57:42 2029 GMT
Subject: CN=69c8f79b-83a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:87:c7:db:d1:1a:4f:bf:bc:fc:6b:36:a8:
cd:43:49:87:e5:fb:78:8a:00:9c:2a:b2:21:ea:de:
f1:bd:4a:8d:a0:dd:2f:16:98:64:4e:c3:01:c8:8c:
ca:7b:8e:ed:a6:19:7e:e3:56:7d:fe:66:8f:5e:aa:
ac:91:a5:a1:23:7c:56:fd:44:a7:16:96:53:fa:65:
18:f9:12:f1:8f:68:de:fe:be:c5:97:fc:cb:24:dd:
f5:27:d1:88:af:f6:91:47:d7:ee:5e:60:5b:b3:91:
d8:a2:27:4e:6e:ce:f5:f2:4a:55:4d:38:3a:50:42:
1e:b8:e2:b1:d0:61:d3:41:37:59:1f:4c:f1:02:8e:
f8:74:b0:08:2c:f2:c0:9a:5e:2e:90:d0:48:f4:75:
f5:b2:9b:58:3c:5c:7f:f9:c1:fb:4d:00:24:b0:d6:
ad:c5:15:6f:96:9f:01:9e:9e:6d:53:68:5b:f0:3f:
55:08:4a:4e:6c:d9:2f:9c:7c:00:24:2d:26:d8:c5:
05:10:65:22:01:80:8a:19:28:54:74:32:37:2e:27:
fe:fd:69:1c:a4:3e:55:4f:31:6e:dc:e2:58:2b:7f:
9b:1f:dc:60:8e:20:ef:d2:b0:a7:c6:67:53:7a:01:
aa:b9:b9:62:46:ae:97:e8:bb:b3:63:85:e4:24:71:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:D8:2D:BD:BE:90:0A:85:39:66:C9:E8:F0:83:CA:FB:D1:5E:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCDC831A2B5511F1A49F26B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.65.0/24
154.206.242.0/24
154.206.245.0-154.206.248.255
154.206.253.0/24
154.208.64.0-154.208.66.255
Signature Algorithm: sha256WithRSAEncryption
42:57:1a:2b:a2:d1:1a:60:8c:9f:d6:3c:12:e3:ba:37:08:2c:
b4:0e:fb:0f:ee:25:80:00:71:ec:77:62:0e:f5:5f:80:23:7c:
ab:3e:b4:b4:63:cf:88:49:31:8b:45:3a:f7:d6:89:13:b8:e8:
a4:0c:49:ae:6d:a6:50:19:dc:ee:06:a5:13:b4:89:a5:fd:1e:
64:6d:47:89:cd:96:fb:dd:5c:2f:f1:61:0b:8d:08:0e:0c:6c:
49:43:af:68:c4:22:65:66:37:81:2d:86:2c:7a:99:0b:26:9d:
c2:d9:11:2f:bb:d9:59:00:bb:9b:f8:53:19:13:c0:78:f9:c3:
0f:7b:fa:3b:13:5b:35:ab:1d:58:a1:f7:93:b0:97:45:05:9d:
ad:de:16:d9:1e:6b:2c:a0:d2:a6:82:28:48:f6:0f:51:42:11:
ee:70:48:8a:ef:16:43:3b:98:74:0c:bd:a6:9a:e6:03:0b:04:
23:b6:ce:2a:65:81:2c:a0:af:3b:08:c4:83:76:80:ff:cf:a0:
94:49:0b:8e:80:a4:32:4f:62:e1:23:db:30:a4:a1:49:6a:ae:
79:17:ea:4d:b4:56:43:18:0a:e4:f4:3c:1c:5a:3b:c7:b7:d1:
bd:2b:ea:49:f9:bd:80:5d:27:2f:fb:ab:23:32:eb:62:bf:c4:
66:86:a4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:56 2026 by rpki-client