Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEDE942348D11F192AB8ADBCE1D38B0.roa
File: BDEDE942348D11F192AB8ADBCE1D38B0.roa (raw, json)
Hash identifier: cbRTKPyPeHIvOfK94+nR58AuqIHCgVdSLnUTvk/+OLs=
Subject key identifier: 63:6D:CD:53:A2:68:93:AF:B3:DB:E5:81:7A:C2:6F:41:2A:81:F8:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C443
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEDE942348D11F192AB8ADBCE1D38B0.roa
Signing time: Fri 10 Apr 2026 03:31:21 +0000
ROA not before: Fri 10 Apr 2026 03:31:16 +0000
ROA not after: Sun 19 Apr 2026 03:31:16 +0000
asID: 32043
IP address blocks: 154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115779 (0x1c443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 03:31:16 2026 GMT
Not After : Apr 19 03:31:16 2026 GMT
Subject: CN=69d86f09-1099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:44:c7:87:35:6a:53:63:ed:ed:85:17:e8:
99:95:83:06:d8:bd:26:8c:a6:07:1b:2c:cb:6c:3d:
16:2d:16:dd:1b:61:49:69:7d:6c:98:65:93:1f:ef:
6c:ca:3a:26:ab:4c:33:d0:9a:6f:ae:fb:19:eb:23:
a9:f9:34:2f:09:5d:4e:89:c1:9d:1d:34:eb:94:3f:
71:a4:8c:44:cc:c0:d9:24:f0:ee:38:dd:ca:be:3f:
f3:bb:e4:b5:92:ea:78:f9:94:9a:a1:c7:a2:23:52:
58:43:8d:61:bb:27:f5:72:00:fe:a2:e7:0b:00:cb:
4d:0c:cf:a8:3d:19:57:81:6a:10:59:16:0b:cd:2f:
db:d7:f6:b9:c6:a3:1a:97:6a:ed:b2:af:0e:3a:fa:
a8:8a:a3:35:fd:8b:63:d5:34:80:e0:46:33:b2:73:
dc:55:67:01:82:31:d7:d5:ac:e1:97:1b:e7:43:2c:
ac:5f:ed:df:0c:f3:09:df:13:e1:30:fd:32:ca:a4:
09:e3:f4:9f:82:14:99:6f:ea:74:e9:30:08:f7:54:
45:a5:e7:6d:90:b8:f6:59:37:e4:70:89:89:b4:7a:
93:d9:80:e2:88:42:75:b3:43:4d:b9:cc:cd:9c:fc:
e0:15:b4:ec:07:da:d9:ff:dd:c7:6f:0b:31:85:45:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:CD:53:A2:68:93:AF:B3:DB:E5:81:7A:C2:6F:41:2A:81:F8:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEDE942348D11F192AB8ADBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
36:ac:9b:8f:55:98:8c:5d:5c:5a:b7:a7:2d:20:80:1e:60:ee:
85:f4:35:b0:32:83:23:b8:bc:6d:0e:57:3c:46:34:03:e7:53:
c6:81:e4:c1:ef:35:6d:41:79:9b:fd:4d:76:81:5e:00:c8:69:
03:6c:2c:f0:32:39:23:6d:cd:fa:bb:bd:38:95:26:1b:25:29:
90:fb:aa:29:57:b1:7d:d1:d4:80:74:74:6e:a0:d8:b7:0b:79:
6a:36:29:a5:60:36:ae:ae:17:76:4d:a3:75:a1:be:68:7c:40:
81:00:13:f2:bf:88:47:4c:44:69:81:c4:76:a2:b9:27:42:02:
55:96:52:4b:b6:62:b9:96:8b:49:2a:65:58:1c:02:65:9a:d9:
c7:1f:ac:ec:ea:95:8e:2b:bd:75:ae:e8:84:4b:c6:8a:36:c3:
de:b9:43:9d:fa:af:7e:76:58:54:cf:f0:dc:96:57:6f:ec:50:
c2:f9:56:d9:af:d2:5a:5e:1a:f7:dd:90:6b:f1:3f:3b:9b:cc:
9e:8e:97:f7:8b:70:fa:87:ca:b5:9a:de:72:ce:f4:3f:03:a1:
8f:94:d6:f5:f4:b3:0c:f2:e3:e6:e6:df:30:2b:7d:21:7b:d6:
bc:03:8e:15:fe:b1:7c:f9:5b:4a:bc:fc:47:af:f3:67:ab:38:
8b:8b:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:38 2026 by rpki-client