Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDA26F7C312111F19C6C08EFDAE4EC9C.roa
File: BDA26F7C312111F19C6C08EFDAE4EC9C.roa (raw, json)
Hash identifier: unxWwLT/jo6vR6MVZPDEatcCn3+GgfmtJcf9/xXE3y4=
Subject key identifier: 9A:E9:8C:8E:C2:9E:EF:38:39:1D:1C:FF:89:59:E7:94:43:CB:6D:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C347
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDA26F7C312111F19C6C08EFDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 19:00:41 +0000
ROA not before: Sun 05 Apr 2026 19:00:37 +0000
ROA not after: Sun 10 May 2026 19:00:37 +0000
asID: 61112
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115527 (0x1c347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 19:00:37 2026 GMT
Not After : May 10 19:00:37 2026 GMT
Subject: CN=69d2b159-08b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:b5:b1:ec:bf:09:b1:99:ed:fc:4e:cb:c9:
26:15:a8:20:6d:21:25:8a:3f:11:bb:6e:80:36:6c:
5a:32:33:76:4c:c9:66:7e:54:24:b3:af:21:eb:54:
0e:f7:0c:dc:0c:fe:43:ea:5d:b2:ef:e4:61:ed:6a:
20:1b:79:ad:dd:3f:c7:03:14:c1:05:3f:a4:98:23:
f8:92:33:fa:38:51:4c:5d:14:2a:8f:0d:e9:c5:87:
0f:c0:21:86:0a:5c:eb:ae:3b:47:3e:59:95:74:6a:
29:b2:01:be:16:d0:e8:e3:0b:ae:dc:63:d8:d9:83:
fa:61:5f:cd:c3:ef:90:60:a8:d5:f4:58:12:25:70:
72:91:7d:df:64:f8:34:b7:b3:94:21:f5:47:85:31:
21:62:2a:f3:24:fc:d6:87:bb:8a:c0:32:e4:d6:13:
17:22:ab:d7:72:44:09:f1:62:12:bc:bb:4e:ab:a4:
14:60:3c:4f:1d:ca:f8:65:d1:9c:82:e3:b3:11:55:
98:d2:67:7d:d2:7f:59:69:d8:7c:97:c2:f2:8d:89:
12:92:46:3f:67:d6:8b:c4:db:44:3b:88:5f:99:7e:
1a:cd:47:ea:68:0a:76:ac:4f:8f:12:b5:b3:c2:72:
91:6b:79:17:f3:0e:a3:8f:ea:0c:a4:1e:e9:ab:22:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:8C:8E:C2:9E:EF:38:39:1D:1C:FF:89:59:E7:94:43:CB:6D:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDA26F7C312111F19C6C08EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2b:b9:34:b1:da:21:c2:00:5b:13:e2:d2:a8:ea:5e:f0:85:
71:1a:6b:15:57:60:ff:d4:88:0d:3f:98:fc:a6:3a:cf:fb:48:
24:4e:f7:37:9d:9e:b1:18:a9:b3:bf:29:b3:52:f3:02:6b:62:
f8:55:de:1c:e3:20:dd:9e:1d:15:57:4c:57:84:79:c5:1f:d2:
fe:07:ce:1c:9c:ba:97:9a:83:12:cf:f9:46:5c:b7:18:31:1c:
71:ae:ed:63:e5:74:c8:a8:4e:8c:e4:eb:eb:24:7c:c4:d7:4d:
f0:45:68:21:45:15:24:5c:6f:cd:0c:a7:86:40:84:b4:7f:9f:
40:4b:49:df:69:68:1c:37:66:c1:0d:ab:02:2a:3d:7d:65:6e:
96:4e:0e:0c:e1:99:9d:c8:b0:f8:98:2d:65:a3:45:b5:d1:d0:
c8:6a:ca:d5:10:51:03:a5:ef:59:13:41:db:d9:26:6b:7a:cd:
fa:29:9f:c0:02:74:50:bd:e1:25:dd:da:de:e2:a4:0d:81:55:
67:a7:84:d1:44:af:da:f6:d8:81:1d:31:4f:48:45:17:30:aa:
10:15:4e:19:fb:66:bf:1c:9f:2c:d1:76:37:06:ac:d4:1a:c8:
95:af:82:cf:b6:51:63:bf:9c:3c:5f:ee:a8:c2:95:71:f7:3a:
60:8b:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:23:54 2026 by rpki-client